Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File:                     WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier:          ZrCOjVeX5eyOc04s7nfaOMMuJN5NC59Mg+65BDGcUEw=
Subject key identifier:   42:BE:93:2E:12:1F:2C:5D:E0:36:77:86:70:16:0A:C4:8C:23:4C:19
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer:       /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial:       018F874A24D13867F31A656681AD029C4CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number:          0793
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: FxdJGlaZ984uUQHA6jFBwqd/Q/YmyCWqnXOj2Zi0NoA=)
                          2: _scb2Hi-vJi9nUwGQW9xso44Wqc.roa (hash: 8LU5O2TpXB8UCMGu4pnxHlKP7uaZ8UhjzpIiwX+urSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:24:d1:38:67:f3:1a:65:66:81:ad:02:9c:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=42be932e121f2c5de036778670160ac48c234c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:b9:0d:b2:5d:40:dd:39:0d:74:20:59:b7:
                    3f:4b:58:c1:22:96:18:f8:a8:79:08:69:c9:0d:5f:
                    be:21:e8:be:34:48:e8:f7:f1:28:ae:43:48:26:44:
                    93:5b:19:2f:f1:5e:ee:7f:31:3d:f6:76:ca:49:af:
                    cc:c4:6e:f4:7c:ec:69:e8:9d:61:1f:c3:30:24:1d:
                    ba:9d:0f:da:96:dc:68:25:22:4a:67:6b:73:60:31:
                    24:ee:d7:8d:5c:36:65:c1:6e:37:f8:0f:07:5b:ba:
                    b6:ac:bb:ec:1c:40:8d:e4:2c:d0:1e:33:1c:c6:67:
                    b1:a5:9d:03:51:a1:f4:94:a0:b0:7f:85:c8:30:0e:
                    90:21:9a:c9:56:bb:0f:5e:eb:f5:ab:29:dc:28:59:
                    9a:e3:0d:7b:6c:fe:a9:6a:77:f1:d4:6d:21:94:f0:
                    78:c5:ee:42:97:5d:15:68:b5:29:bd:b1:f0:c8:44:
                    a2:6d:6b:3f:88:a1:39:46:21:ec:9a:8d:70:71:f4:
                    53:f6:be:2c:13:b1:90:8a:55:d0:83:95:42:25:84:
                    10:08:d0:50:46:0d:ae:1a:3b:49:45:ba:ef:6b:cc:
                    9d:63:4b:50:57:21:dc:98:36:ed:37:23:1f:88:74:
                    c6:b7:1a:de:57:bd:96:fa:b1:dc:6c:f8:56:2d:16:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:93:2E:12:1F:2C:5D:E0:36:77:86:70:16:0A:C4:8C:23:4C:19
            X509v3 Authority Key Identifier:
                keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:03:17:6b:c2:9e:44:6c:4a:97:9b:87:6b:64:91:bf:fe:c8:
         97:58:96:44:0d:b2:6a:68:17:0e:d8:bf:46:9b:7b:b3:6a:7b:
         f7:1f:ee:0d:21:f8:3e:71:76:3a:b1:be:73:19:b9:8f:28:20:
         1f:fe:a2:75:8e:08:a5:f9:6e:4c:6e:8b:fb:7c:3f:68:fa:c8:
         6b:69:fb:5c:e5:cb:08:29:74:1f:fb:8f:de:f1:78:f3:95:ef:
         e5:56:86:d9:9b:ae:31:0b:f8:03:9a:e9:bb:1a:eb:9c:18:62:
         44:ba:78:56:68:1c:a9:de:72:0e:41:31:69:7c:64:05:92:6e:
         38:76:62:56:a8:d2:15:7d:dd:93:94:be:f0:6a:f0:2b:35:2f:
         39:99:b5:eb:15:45:72:9d:33:93:b6:92:d6:08:45:a8:cd:47:
         71:7c:cb:c5:10:09:29:62:b1:67:6e:1f:b9:79:1d:76:c9:bf:
         c5:e8:20:7e:1f:1f:60:57:57:a3:db:e4:9f:9d:28:bf:f2:cd:
         03:26:05:66:84:6e:18:79:cd:22:88:94:6d:d7:4d:03:98:a0:
         9f:4d:7c:41:8e:14:5d:2b:19:7d:b8:f5:35:40:83:22:df:02:
         5c:dc:78:f1:d8:53:d5:f6:9e:2a:61:03:ae:15:b2:d2:12:8d:
         37:95:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:31 2024 by rpki-client on console-ams.rpki-client.org