Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File:                     wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier:          P0ZoZyySM7SniBLkJ7xgggRTi5n0QHIc48fUUamvjOw=
Subject key identifier:   E5:E0:09:DE:3D:A6:7D:16:36:FC:D4:99:27:AE:F2:4C:4A:BA:F5:44
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer:       /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial:       018F8823F221593D7A716540D6A9EBD6BBC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number:          0A4B
Signing time:             Fri 17 May 2024 20:00:07 +0000
Manifest this update:     Fri 17 May 2024 20:00:07 +0000
Manifest next update:     Sat 18 May 2024 20:00:07 +0000
Files and hashes:         1: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: APc2ksGCgTUqgb/igtqU/Aeqkd/AYiBJo0IuaVBIcXw=)
                          2: yZ4mv2GNBpF2s8xhif6RvJH_mek.roa (hash: eF71+BtyVjVcTQrVyjHn8NY6MvpEmaTN1GZAR9bTUKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f2:21:59:3d:7a:71:65:40:d6:a9:eb:d6:bb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
        Validity
            Not Before: May 17 20:00:07 2024 GMT
            Not After : May 18 20:00:07 2024 GMT
        Subject: CN=e5e009de3da67d1636fcd49927aef24c4abaf544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:9a:ee:bc:35:3a:15:5a:45:12:15:bf:2e:
                    36:22:73:a8:6c:a8:13:17:ad:6e:2f:2e:cd:ae:ee:
                    2d:f0:57:c9:78:e9:ea:35:6b:fa:b0:51:9d:c4:94:
                    0e:13:45:49:da:83:a0:63:b5:62:29:9e:d5:7c:45:
                    7a:17:7d:b3:92:26:d2:12:2a:ce:80:f2:25:ae:7c:
                    0f:24:51:90:40:f6:ea:62:18:5d:3c:35:2b:b5:d0:
                    99:f7:1f:2f:14:aa:c6:84:f1:c6:04:a7:07:53:65:
                    a4:74:62:d3:c5:dd:fa:b9:4f:ef:3b:f0:b6:6a:22:
                    26:03:f0:6e:d3:a4:07:2b:14:81:ed:be:85:08:a9:
                    58:b1:15:35:eb:9e:11:45:e0:8d:10:8c:fb:43:0d:
                    69:61:7e:d5:bf:83:99:d5:82:55:ba:f0:45:32:c8:
                    60:77:07:56:d6:83:fe:63:39:d6:55:68:3d:ef:e3:
                    79:52:96:f2:0a:94:63:51:b2:54:83:d5:99:58:77:
                    da:3f:d0:0d:03:c4:3c:e2:6e:79:c5:42:23:eb:e6:
                    6b:6c:43:27:3d:6a:38:b9:ff:3f:7b:04:e1:4a:b6:
                    8a:c7:78:d1:9f:90:3b:f3:ee:23:8e:a5:57:82:d5:
                    20:e0:52:e5:ea:31:ea:78:8a:3c:d1:f3:c7:99:b7:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E0:09:DE:3D:A6:7D:16:36:FC:D4:99:27:AE:F2:4C:4A:BA:F5:44
            X509v3 Authority Key Identifier:
                keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:a8:55:bc:29:bb:f3:13:52:2c:b3:85:0f:3f:53:95:1c:
         08:8a:e5:ea:45:56:33:3c:08:a0:ad:86:05:9c:0d:fc:05:ec:
         ea:12:40:18:5c:d2:7d:de:86:e2:e2:34:0c:3c:89:00:36:45:
         56:28:ea:76:63:c1:60:e9:42:92:0f:5c:1e:50:63:aa:32:6c:
         97:a9:a1:f2:a2:28:be:70:e2:29:c8:72:82:d6:67:2e:97:8d:
         45:25:7c:6c:c2:5d:dc:b1:16:ed:82:d8:ac:1a:f1:ce:df:06:
         b2:f9:51:52:33:2b:ba:d1:c4:9e:71:d3:d3:e1:79:da:d4:dc:
         7e:c1:2f:88:70:f5:00:e5:27:c7:74:99:68:82:d2:c1:53:58:
         c7:67:2a:64:fd:57:4a:b4:5c:97:10:1b:14:94:ae:cb:80:8a:
         c7:ff:e3:fc:94:87:db:b2:73:d5:31:de:75:91:f0:4e:45:c0:
         9c:02:67:05:dd:b1:54:45:f3:d7:fe:fd:e2:b7:3a:0f:ba:e1:
         6a:34:93:3c:56:d6:83:ca:ca:05:4d:2b:66:20:f7:9f:1e:46:
         f3:99:46:dc:60:a1:52:b7:d6:f7:85:94:3c:e7:ad:5a:0a:33:
         d2:f4:91:f1:90:be:a2:67:8f:cb:70:eb:a8:ba:14:72:4c:92:
         4d:e5:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:53 2024 by rpki-client on console-ams.rpki-client.org