Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File:                     wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier:          FfGeVv3BNC2hXInHEg/FrogxzCYK84ohxiQ2Y3LNFAo=
Subject key identifier:   D6:9E:D6:A0:45:CE:C8:65:E1:79:16:BC:ED:9C:12:63:00:E8:ED:56
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer:       /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial:       018F8938EEBEC93A1433CE5BE5F4FC478E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:02:40 +0000
Manifest this update:     Sat 18 May 2024 01:02:40 +0000
Manifest next update:     Sun 19 May 2024 01:02:40 +0000
Files and hashes:         1: ql8br5Bm5ryHvG7PGnuTt1_1oD4.roa (hash: KCujset59rTqVNduQdpUs+54KUtiwc2lwnnEFXvAvTA=)
                          2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: etbSo2UPbUS968nBDeBc9aVpW3pulZkhVEF7Iej96Vg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:ee:be:c9:3a:14:33:ce:5b:e5:f4:fc:47:8e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
        Validity
            Not Before: May 18 01:02:40 2024 GMT
            Not After : May 19 01:02:40 2024 GMT
        Subject: CN=d69ed6a045cec865e17916bced9c126300e8ed56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:91:40:94:7c:c2:e3:3a:57:54:f5:47:9b:
                    3c:47:51:73:a8:fb:cd:60:46:42:49:f3:76:22:dc:
                    b7:86:67:aa:ff:16:cf:bb:d8:ac:6a:a7:be:63:72:
                    2c:b2:8d:cc:1a:3d:85:65:b9:67:41:09:65:bd:a2:
                    f0:f6:c3:02:1b:df:06:01:2d:c9:de:99:65:8b:aa:
                    41:b2:90:b0:93:cb:d9:29:1f:36:9b:70:5b:e5:2b:
                    13:31:b7:39:c5:10:41:e0:9f:ba:72:c2:7c:23:1d:
                    1e:a5:35:a6:c7:65:df:9d:2f:5e:dd:60:69:4a:eb:
                    6a:dc:05:11:bf:1d:88:9a:01:fc:dc:a7:55:5e:28:
                    e6:31:13:63:6e:b0:f1:d7:bf:63:04:e2:27:8f:e6:
                    2c:7e:f2:86:5a:18:ee:85:b6:71:69:09:eb:3f:e7:
                    49:75:7e:6f:13:7e:58:d5:6c:e2:80:fa:b9:0c:a0:
                    b7:d8:f2:52:56:c2:38:ae:4e:fe:2f:60:16:7a:ad:
                    b6:e4:3d:31:8c:70:fb:e3:1c:be:9f:27:be:21:2e:
                    2f:73:31:ce:db:9d:5f:bb:d8:2d:d9:3a:b4:6f:5e:
                    42:d2:b8:fd:7b:57:fb:ae:29:71:a8:e4:63:fc:0d:
                    15:1f:e9:14:25:da:05:c1:df:95:2f:15:b6:ca:bb:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9E:D6:A0:45:CE:C8:65:E1:79:16:BC:ED:9C:12:63:00:E8:ED:56
            X509v3 Authority Key Identifier:
                keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:48:4c:0a:2f:cf:4f:ec:b5:58:9c:cb:78:db:04:8a:25:4f:
         93:bb:ed:52:d8:cb:22:ab:f7:84:ec:77:f6:0c:e5:7c:94:6e:
         71:cd:51:1d:cb:e8:8b:2d:2b:6a:bb:2e:9e:51:d0:8d:3b:12:
         21:f2:c8:ce:00:7e:07:c5:f3:f1:7f:86:94:c9:f5:ca:71:5a:
         f5:8e:8b:15:5c:d8:ca:49:61:5a:fb:9b:6e:e3:2b:35:ae:f4:
         79:ae:09:da:7d:76:a9:8f:63:7c:d7:0e:46:92:82:0d:dd:eb:
         10:eb:be:e1:f1:2e:c7:17:6d:d8:ee:ac:dc:60:eb:5e:d2:81:
         93:a2:f9:9b:b7:cc:cd:1c:56:36:dc:8d:47:f9:27:cb:63:a8:
         6a:ba:26:58:e2:59:03:4a:32:5f:e1:93:a2:29:f8:d4:5e:f1:
         bd:f9:ca:49:fe:1b:2c:2d:ba:67:e0:81:47:4c:4f:c0:95:8d:
         a0:48:3e:18:0c:7c:29:9a:b7:ae:87:63:22:f2:51:01:4c:9c:
         91:98:cf:64:8e:77:82:1f:f2:17:59:88:d5:33:f6:40:76:66:
         0a:5c:84:18:32:39:18:d4:51:70:56:cb:ed:f3:c9:07:fa:a6:
         56:e0:95:fb:2a:ae:88:7c:e5:e5:83:2f:d3:f5:56:c6:38:09:
         1a:37:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:29:15 2024 by rpki-client on console-ams.rpki-client.org