Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          CLwu90TWrxa6Fi8ejja07uU3JceWadgTJngRUtTyv/8=
Subject key identifier:   F1:A4:1D:76:D7:C5:6B:12:FA:92:89:07:27:B0:1D:FD:5A:41:25:F9
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       018F8748A81BC5875AA898549C0FD6832E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0560
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: H3EvvZ-1NtlMpcu8A23zGRXm6uI.roa (hash: SYDB9EaJOGhLNol0d1b4oOV6J9DEo/tDRN6C2pREWho=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: J64mWpEJxRROuAaxjpV08iiClmWHdrkiduVhBsSUeys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a8:1b:c5:87:5a:a8:98:54:9c:0f:d6:83:2e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=f1a41d76d7c56b12fa92890727b01dfd5a4125f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:87:3a:e1:18:51:b4:39:f7:82:ca:90:16:
                    e4:ce:db:92:e3:19:72:72:38:09:ee:ea:8d:34:be:
                    03:af:cd:9c:7d:c0:fc:d0:09:dc:f3:da:17:09:7f:
                    62:c7:1a:70:b5:6d:81:e8:dc:cd:0d:7a:d6:68:ea:
                    d5:98:cc:0b:7f:7d:32:ff:f5:40:2f:ef:0a:31:37:
                    4f:71:25:55:c3:d8:7c:88:cf:e4:de:7f:96:df:68:
                    e6:4c:44:f8:09:61:3a:76:9f:83:4a:67:11:d9:82:
                    34:7d:bd:a4:08:95:a6:56:08:de:d3:23:44:77:e9:
                    e3:03:55:2c:73:7d:85:a8:42:b8:c4:0f:07:47:3b:
                    0b:88:58:ee:8d:b9:26:b7:2d:49:31:c4:d7:bb:85:
                    b2:51:a9:86:7a:a0:29:02:02:6d:2f:ee:b1:f2:73:
                    64:bc:25:98:e4:7e:e4:ab:4f:b1:23:f4:d4:89:d4:
                    75:e3:79:46:94:3b:a0:7a:e4:5e:98:75:f9:dc:fd:
                    0f:6b:6e:84:8d:37:d9:fd:ae:b7:76:3c:17:8e:5a:
                    a8:e1:df:88:c4:ce:1c:b5:f5:05:51:19:77:07:57:
                    ee:f9:4a:44:25:37:f9:52:ff:b4:1e:69:01:fa:15:
                    61:89:1f:15:58:33:af:90:dd:8c:d2:f9:b8:a0:95:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:1D:76:D7:C5:6B:12:FA:92:89:07:27:B0:1D:FD:5A:41:25:F9
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:1d:0e:f0:3e:42:ce:62:52:ab:81:af:d4:42:71:c9:29:
         7a:9d:68:31:d3:40:d9:f6:9d:9f:04:7f:37:b7:b5:28:90:bf:
         cc:43:fc:f2:bf:18:40:05:c3:b3:4f:c7:95:ec:5e:81:84:db:
         3f:53:f6:a7:00:7c:79:de:bc:93:f1:45:95:22:aa:86:fb:10:
         e5:96:af:be:8e:e3:14:e6:6e:f0:75:13:5a:d4:32:ab:65:7a:
         3d:50:5d:70:d9:07:46:63:05:02:be:45:6a:a7:35:46:d7:6e:
         af:9b:e1:4e:09:22:17:bd:1d:14:70:57:4b:e1:6f:7b:d2:4d:
         83:10:0d:01:13:cd:20:b5:d1:20:06:d4:a0:f3:a6:4f:54:e8:
         fa:c6:21:3a:a6:0d:7e:18:a9:9d:7b:a6:81:73:65:e8:81:e1:
         47:4a:db:28:48:f8:52:c2:30:7e:a3:e4:e0:63:09:97:69:35:
         70:78:c6:fa:7a:7e:b4:2b:4c:05:6b:4f:df:4f:92:cb:c9:cf:
         4e:46:52:bf:8b:d8:cd:07:4a:54:e5:f4:2f:f2:65:21:b3:7d:
         32:e3:62:20:0e:97:51:7c:1a:2a:b5:c4:12:47:08:68:a3:23:
         41:a7:dc:3a:b9:f7:83:19:f6:45:13:c3:12:a1:38:c0:09:16:
         cb:09:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:52 2024 by rpki-client on console-ams.rpki-client.org