Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          M1mtlfhOXN59NbYf2pDDppDew6kX69rskX2eOF1WXCI=
Subject key identifier:   E7:3C:0F:33:5D:13:DE:FC:F4:BA:D6:D4:64:C4:98:EB:3B:1F:94:B1
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       018F874AEABDA9D75D9AD2170AD75210FEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: QLERAXxHaK34s8FyK4Vvp15pGkE.roa (hash: 4CTGVHYelhgW0zPL8KdpNKMjdQhanQG4X+t7wPcaZyI=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: JkrU+DZ7ZnoD5bWUxVqzcfPOHEyVcz3ONgHz0PrHCCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ea:bd:a9:d7:5d:9a:d2:17:0a:d7:52:10:fe:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=e73c0f335d13defcf4bad6d464c498eb3b1f94b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:5e:b9:7e:13:59:ae:c8:5e:94:ed:2c:71:
                    13:90:56:b9:24:6c:a1:0f:d8:d4:90:e8:f5:91:60:
                    78:88:bd:25:05:cc:c9:3c:7b:ff:93:bd:cc:63:fd:
                    6f:9a:c2:64:36:4d:92:05:e3:e4:ca:5c:c7:9e:c6:
                    80:4c:cf:33:3b:03:14:6e:ea:0d:73:48:33:d8:b6:
                    e0:e5:96:5c:d6:84:e6:76:89:9f:9f:28:57:20:0e:
                    ad:bf:d3:e5:2a:ef:bb:fd:fb:29:1d:d6:04:46:59:
                    4b:8d:c1:ad:fb:a6:02:95:f9:5e:21:d6:7c:b8:41:
                    a4:5f:bd:7b:33:75:13:e3:0e:04:fb:86:5c:87:06:
                    96:32:cb:1f:ce:e4:e4:56:34:9f:97:fb:c0:e6:4d:
                    51:d0:f7:55:26:b1:d6:81:e1:32:b3:f5:1d:91:3c:
                    d2:fe:5a:c4:4d:fa:04:4c:23:69:36:0c:88:0e:bb:
                    73:17:2a:aa:22:aa:2c:d8:5d:39:23:af:16:78:e5:
                    fc:41:3c:af:01:d1:34:9a:96:b1:5a:8a:96:ad:f5:
                    b7:c5:b7:56:d1:bd:9f:64:26:57:40:e1:8b:e7:2f:
                    08:fb:d8:a3:f8:56:67:f6:19:f8:29:d5:d6:50:ec:
                    f0:46:66:01:e0:8a:72:8e:c3:75:77:18:9f:bb:58:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3C:0F:33:5D:13:DE:FC:F4:BA:D6:D4:64:C4:98:EB:3B:1F:94:B1
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:51:30:07:59:b0:12:35:83:ce:ca:38:53:62:b9:37:e9:
         89:17:b3:3d:49:3e:9e:e6:dd:99:b1:cc:60:06:6e:1c:22:c0:
         6f:0d:36:96:24:0f:6b:69:d6:18:2b:63:41:bb:04:02:a1:d5:
         4e:8a:49:b3:cf:7f:2d:06:45:7f:97:d5:51:22:d8:50:29:a2:
         ee:19:34:a6:ce:aa:39:87:a3:3f:0b:e9:b5:c3:2e:c4:f0:4d:
         2a:96:9d:24:f3:66:78:a0:5d:fb:e4:ab:9d:3b:51:71:42:1b:
         8c:ba:7d:6b:1a:9e:b1:b9:e4:1e:b8:52:89:f5:ab:04:33:0c:
         20:98:78:62:da:c8:6d:2e:b8:28:75:32:06:76:63:b1:bb:92:
         2c:e2:6a:84:32:f8:72:75:59:8b:43:bc:71:37:67:f2:a8:4e:
         ba:61:c9:34:17:85:f7:2f:b8:8b:f2:50:2f:26:66:0d:d1:0c:
         8c:69:b8:a6:e3:a2:9b:95:41:ff:23:3c:32:13:6c:41:d3:91:
         b8:a0:9f:07:79:6b:77:e9:28:7b:a6:16:14:86:95:69:24:9c:
         cb:07:76:3a:23:f6:dd:7c:af:ed:5b:ea:d2:49:c6:d3:94:c2:
         a3:2a:b4:65:0f:53:ab:ce:ea:56:97:2d:0b:3b:c2:3a:76:9c:
         bb:a5:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:48 2024 by rpki-client on console-ams.rpki-client.org