Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          vVYiLiZtMsajpH7ndhLpi3Jrjbhdtd3IgiSOZgvKR38=
Subject key identifier:   25:FC:C0:D3:38:33:E8:E9:15:FF:62:6B:09:2B:FB:19:20:C2:4D:2C
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       018F87B65BC52144F8638196619B5F6F2233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: OIzQ-SLhPvyRCRHUsLgn1YxPOec.roa (hash: oz8sWE4xsHobbsiIrHV7j1uJxP4yIUwh9/Jw2+Bvfm4=)
                          2: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: WltfcjEY18hZFcp6sFvMeKEvn8eLSTYqKvFqJf1qzA0=)
                          3: b50ft_z2yJXkQsvqMMMJNBFZ3bQ.roa (hash: sW1lho8z0R2DFPTFAV2Fl+lCUefwqDTP/uREL5rxQVY=)
                          4: guLSC5KTI9wzEJ2Xs0p_oQuXtZs.roa (hash: /jWxp+cpyQYE76iwfcsMXO9EOc4zH55O4XGOYSxH71I=)
                          5: zCOlWUMuqpm1_YsPxl34G6R0zK8.roa (hash: SggsEQqGoU2P9uiGf4NXjcpm7oUBlS+P61sfRF6pmfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5b:c5:21:44:f8:63:81:96:61:9b:5f:6f:22:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=25fcc0d33833e8e915ff626b092bfb1920c24d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:e6:50:05:08:de:37:c6:e0:15:6b:55:2a:
                    1e:bd:2f:16:18:91:0a:8a:b6:5f:2b:92:90:46:4c:
                    fa:e1:3f:28:04:9e:86:cd:b5:d5:e2:a6:bc:04:3f:
                    29:e0:43:ef:74:72:c6:fa:42:ac:88:e4:40:01:8f:
                    bf:8a:a6:f3:45:5b:5c:bb:df:28:3b:dc:53:b2:1f:
                    11:80:b2:10:ff:25:4b:ca:e9:18:22:ac:18:03:c2:
                    01:28:b1:c4:e4:4a:b7:7d:7b:4e:36:6f:0b:74:3f:
                    1d:9d:84:ce:45:9b:6d:ff:67:5d:da:1d:e7:08:ad:
                    b5:13:7c:13:f7:c4:2f:8e:3a:a9:66:54:fd:01:05:
                    af:4c:44:09:f2:26:53:64:84:2a:23:13:01:3d:42:
                    cb:54:2c:64:9d:1a:9b:26:fc:9c:e3:13:e5:d7:4a:
                    42:2c:ac:fe:fb:e6:d0:e3:02:be:12:8d:89:eb:a2:
                    fb:47:72:b9:15:4a:92:d9:08:34:d2:78:e3:f1:43:
                    0c:09:03:75:48:b3:e1:6d:25:20:27:55:32:89:e7:
                    af:50:3b:4f:f5:63:af:21:62:73:6c:c0:2a:f1:11:
                    64:1a:8e:cc:fc:61:c5:48:77:a6:ca:54:0e:f2:f5:
                    78:67:21:8e:fd:b6:87:05:40:bd:1d:d6:22:89:5a:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:C0:D3:38:33:E8:E9:15:FF:62:6B:09:2B:FB:19:20:C2:4D:2C
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:ee:33:e4:59:bf:6a:12:d6:b1:db:69:da:2a:63:73:5c:
         56:df:fe:77:a4:18:b8:05:2f:fa:a0:b8:22:76:1e:f9:6a:93:
         b4:ac:bc:e0:e5:70:33:95:59:64:c4:7b:6b:b1:07:67:9f:9f:
         bd:37:32:b9:f9:59:f9:15:49:79:8b:1e:73:a9:ac:ac:68:d8:
         25:86:6c:de:3d:6a:a4:4e:c6:d9:96:2e:4c:81:a4:f9:48:b3:
         41:16:cc:4b:5d:4b:0e:6b:1d:7d:8b:fd:e0:4f:17:2e:96:8f:
         e5:e4:5d:1d:b8:fd:05:9b:6d:69:37:ca:8b:7d:06:50:3a:c0:
         c0:41:25:f3:7e:ca:d8:9f:5b:2c:07:f9:13:5c:37:55:98:85:
         a5:e9:dc:e2:5e:4b:51:50:5a:de:82:fc:98:12:c2:da:4e:f9:
         02:de:c5:ba:95:f6:49:8e:b5:e1:c0:f1:fc:56:21:77:da:48:
         e1:f2:49:85:7a:e5:12:2b:15:a8:11:a1:e0:91:20:56:3e:40:
         a2:21:6f:bb:20:00:56:24:b6:77:02:b0:d3:1d:0c:b6:f0:56:
         57:bb:73:ec:09:78:6c:15:7a:65:c8:70:d9:ab:15:a6:3d:bc:
         3a:91:ef:d8:21:df:cb:a9:aa:fa:2c:e9:f2:89:de:41:60:1a:
         e0:e9:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:55 2024 by rpki-client on console-ams.rpki-client.org