Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File:                     WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier:          sBc0/65+fFPq03te31jUVArkg88mr8HhZstjgGeMnPk=
Subject key identifier:   A7:1C:4A:72:03:62:F0:8C:A4:84:37:D7:54:FB:C5:BC:B1:EC:E2:DB
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer:       /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial:       018F874AE145285142E0188CEDC68589C140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number:          05F7
Signing time:             Fri 17 May 2024 16:03:02 +0000
Manifest this update:     Fri 17 May 2024 16:03:02 +0000
Manifest next update:     Sat 18 May 2024 16:03:02 +0000
Files and hashes:         1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: fUBFdzPNEsvlH4QudZn+rRPfqdzxUfZafaPOggPFKqY=)
                          2: cW6pgAW6E9TNlsqAE1uA2qcU8bM.roa (hash: E4cyReKCF4aRius+sZJpiTi2AOL0e8e/xND/keteLQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e1:45:28:51:42:e0:18:8c:ed:c6:85:89:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Validity
            Not Before: May 17 16:03:02 2024 GMT
            Not After : May 18 16:03:02 2024 GMT
        Subject: CN=a71c4a720362f08ca48437d754fbc5bcb1ece2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:1f:8b:89:ca:1e:69:8a:40:f3:bc:f3:16:
                    27:2c:cc:36:e5:9e:ad:d3:5f:56:21:ef:58:55:e8:
                    72:2b:48:67:20:cd:24:63:e0:96:1d:3c:a4:5c:c5:
                    06:01:7f:c9:1b:fa:cb:9f:6d:4f:73:08:30:27:1f:
                    17:15:a7:c0:a5:e7:6d:8f:f4:3f:21:3f:99:9b:00:
                    de:ee:34:97:c4:3a:d4:e4:2f:11:3f:83:fb:b7:1e:
                    68:41:82:f0:f9:c5:f6:51:3d:92:0d:60:58:60:21:
                    03:18:c4:d4:ee:04:46:61:f3:dd:7b:70:58:5d:60:
                    1a:41:02:f3:20:b5:fb:56:bf:f5:3d:1f:e2:d4:ef:
                    eb:35:c7:74:31:38:b4:cd:31:f2:55:a9:22:fe:a1:
                    80:9e:db:60:db:89:9e:56:e7:f3:6b:0d:ca:02:f5:
                    10:ef:2c:f6:d6:8a:06:bd:a7:db:3f:90:2d:9b:48:
                    76:fd:b5:90:45:8d:af:2c:27:9d:0e:2b:11:96:01:
                    0d:03:6f:dd:ca:3e:22:9b:bc:27:14:41:84:c1:70:
                    93:fd:a3:08:02:61:80:ce:37:7d:df:e3:06:2b:84:
                    3b:aa:88:a8:21:53:99:5d:e6:05:39:ba:58:e8:77:
                    6c:f6:f5:18:d0:a4:e4:ba:fc:41:f5:60:d7:42:7a:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:4A:72:03:62:F0:8C:A4:84:37:D7:54:FB:C5:BC:B1:EC:E2:DB
            X509v3 Authority Key Identifier:
                keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:a7:4a:2a:c2:09:cd:a9:4e:41:b6:5e:04:6c:00:f3:27:
         d1:78:3e:b5:93:66:0d:42:62:af:44:50:88:98:54:44:11:04:
         ae:70:14:84:ff:a1:c1:b0:7d:6e:b2:f4:e3:81:8b:9a:8b:25:
         e0:2c:c4:4f:85:8d:42:60:f2:9d:26:16:f6:fb:64:56:9f:0e:
         10:98:69:f7:3e:12:4c:44:2f:8c:c9:ef:4e:13:91:09:10:45:
         56:62:f8:16:18:51:8b:27:3d:ca:ed:90:b2:ea:08:76:12:4c:
         d4:cf:9d:89:1f:f9:a3:10:76:a4:26:f5:04:93:c2:0e:dc:91:
         11:db:3d:39:3e:96:81:a9:fc:51:27:6a:22:23:45:24:c8:6d:
         41:fc:52:d1:72:a8:57:ab:d4:f5:9e:72:8a:ad:72:19:9d:0c:
         80:a2:38:c6:01:24:25:30:3a:e6:d1:11:e7:b5:5c:1c:3f:1a:
         cc:6c:1b:c0:92:03:bc:ec:e5:96:44:be:da:fc:ac:77:38:76:
         24:d6:a7:28:ac:32:0f:2f:56:4a:f0:c8:17:22:1a:64:51:8b:
         fe:64:90:f7:13:37:0f:ff:e1:04:37:5a:72:51:27:89:9a:90:
         de:76:8a:7e:08:20:80:ac:ae:54:0b:8b:f8:39:b7:24:e0:1d:
         da:1e:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:04:45 2024 by rpki-client on console-fra.rpki-client.org