Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File:                     wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier:          feNo8KN38eWRawGi8gOQuM01pfNaYx+Rq49u1ucMdrU=
Subject key identifier:   ED:0B:F1:E5:CE:91:5B:91:94:6F:4F:18:6A:C3:CD:36:7E:95:AE:5A
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer:       /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial:       018F885B5F83F6D2CF7C5789DA6C6037E072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number:          0126
Signing time:             Fri 17 May 2024 21:00:40 +0000
Manifest this update:     Fri 17 May 2024 21:00:40 +0000
Manifest next update:     Sat 18 May 2024 21:00:40 +0000
Files and hashes:         1: SGFaRhnHcFKz76evEJpN6XUT1WQ.roa (hash: esVhdd97pvhtqs32rsoYqbULcgaXyTAL5sRHsgGkn4E=)
                          2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: nWoBVlfB89zlr3k9ZboXVT30J2EsDt3PQj8D/3i0j7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5f:83:f6:d2:cf:7c:57:89:da:6c:60:37:e0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
        Validity
            Not Before: May 17 21:00:40 2024 GMT
            Not After : May 18 21:00:40 2024 GMT
        Subject: CN=ed0bf1e5ce915b91946f4f186ac3cd367e95ae5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:bb:94:7e:9e:c3:4c:f5:f2:da:39:ba:1d:
                    d2:d5:22:e9:44:03:36:9f:1c:30:24:5a:91:2a:f1:
                    dd:b0:0e:5e:3b:37:01:3a:66:5f:31:b5:ee:9f:ac:
                    4b:65:92:f8:b0:3a:7f:c7:af:cb:cd:80:ec:b7:b7:
                    f3:74:d0:d2:ff:84:13:da:9b:e4:10:b1:4c:1c:5f:
                    38:a2:1a:cf:c8:b3:c3:9e:e6:f9:dd:e9:a5:71:58:
                    ea:9c:80:92:a3:13:2e:35:ba:1c:92:b2:d2:b8:1e:
                    57:94:30:1d:37:29:e8:a1:3f:d8:10:09:f4:b9:35:
                    c2:e0:26:81:cd:f7:4a:60:39:ac:21:d2:8c:38:64:
                    3c:1b:97:bc:89:2f:70:93:f0:c8:3f:c5:71:07:7f:
                    92:bf:8f:3e:48:85:0e:4d:9f:12:52:ba:d0:8a:4b:
                    a9:aa:ce:aa:9c:e4:ba:82:3e:c3:ef:06:e6:98:ce:
                    c4:bd:db:e9:99:17:da:06:6f:cf:96:36:a3:89:b5:
                    f4:fa:14:33:64:cc:3f:7d:ec:1c:03:22:6a:e5:5f:
                    03:0c:c6:05:51:86:5c:2c:0a:a3:63:ec:b1:76:b3:
                    62:dc:f1:83:5b:58:0d:9c:c3:34:2d:d5:4f:48:9b:
                    dc:0f:ce:c7:ff:34:01:32:3e:f2:da:00:4c:fc:17:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:F1:E5:CE:91:5B:91:94:6F:4F:18:6A:C3:CD:36:7E:95:AE:5A
            X509v3 Authority Key Identifier:
                keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:32:9d:b0:61:2b:9c:90:2d:7b:09:b1:23:14:58:7d:ab:18:
         d9:f0:14:72:c4:89:53:ae:70:7b:5f:60:a5:99:57:dc:53:14:
         69:aa:dd:18:02:1e:3f:9f:01:7d:2f:92:ff:5e:bc:83:8b:31:
         50:c4:cc:0b:58:9c:cd:30:b4:e7:aa:04:53:29:60:15:a6:03:
         c5:41:e6:b1:81:f3:93:80:7b:84:08:e5:03:9f:27:e0:2c:bd:
         59:c1:d6:1c:04:cf:99:c6:cd:3f:ad:95:37:f6:c3:63:97:c4:
         34:c7:c1:ba:8e:18:ab:c2:7a:e1:45:66:b6:11:bc:85:a9:07:
         33:de:b2:08:c0:c3:f1:d8:cb:f5:0d:b6:8a:9d:ac:70:3a:ed:
         3a:5f:bf:53:27:7f:35:61:b5:e2:26:13:85:ab:fa:f5:b9:b9:
         00:c8:b8:c2:9a:ed:e0:c3:e1:18:b9:4a:6e:c5:13:23:9e:31:
         28:b9:d4:9e:be:59:9d:9a:17:fe:5b:ae:ca:a2:78:fb:ec:d2:
         e9:54:c9:82:d7:cc:56:b1:55:1f:ee:2e:5d:a0:68:16:e8:fa:
         b0:a2:26:27:a3:86:ac:08:48:39:65:c9:b9:42:01:ca:64:c8:
         28:58:91:c1:7f:7c:04:60:6a:53:d4:2c:21:07:1f:fc:3c:3f:
         24:cd:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:30 2024 by rpki-client on console-ams.rpki-client.org