Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          tWmi6Bj9rWFvzgyZCGzT69zb47wE5KQcBNHGbZu49p0=
Subject key identifier:   18:2D:2A:60:97:56:08:A6:45:42:A9:C3:A7:49:C9:1E:D8:F6:A4:50
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       018F8891F5F8C7653CEE712BC4E7BFB17ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0311
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: sMC75iWp8Ljd9LRCblJJgt_on8g.roa (hash: /aHl623Cxhb+GEeyfjZ2zytXXTEHuub/KXUWoU3nmCQ=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: oNsfmCcZs/bN2NOv9+KgEfo7ANaI5+9e1SoQLl6ILqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f5:f8:c7:65:3c:ee:71:2b:c4:e7:bf:b1:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=182d2a60975608a64542a9c3a749c91ed8f6a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:e2:06:2d:89:84:a2:bf:84:86:9c:08:42:
                    ad:21:fe:d3:88:3d:18:65:95:f2:bc:3e:e6:23:09:
                    71:09:9d:73:2b:2d:5b:e4:3a:1d:dc:bc:78:76:18:
                    9e:28:49:cd:b7:17:91:5d:55:4c:12:18:a3:49:e3:
                    17:1b:2f:33:00:62:25:a3:f9:38:10:a0:75:87:85:
                    bd:87:2b:d9:4d:07:18:6a:df:47:a4:d4:4e:b8:4b:
                    77:cd:89:14:15:c4:bd:42:26:93:1a:6f:12:23:f3:
                    93:d4:61:6b:9d:ed:fd:9f:47:bf:ac:27:ec:a4:c3:
                    dc:40:10:f0:17:fd:92:0e:7f:98:0f:e5:e0:36:af:
                    ed:3d:cd:17:8a:c3:f9:a0:ec:82:84:a0:21:a6:67:
                    93:af:8a:1b:40:87:b3:92:d2:ea:15:38:9c:01:86:
                    87:42:96:59:c7:36:a7:92:6a:3a:e2:d4:84:d5:16:
                    72:6e:42:82:81:b5:10:4e:48:ed:fa:ea:3a:08:74:
                    85:66:bc:79:b7:5f:b4:0e:5a:b3:3b:91:35:4d:da:
                    24:9b:e3:ee:f4:63:7a:b6:0c:80:0f:57:24:be:1a:
                    84:d7:5c:d9:4e:27:56:19:9e:ed:ea:52:63:d7:5f:
                    63:b4:1b:ab:e7:e9:bf:2c:08:d5:42:1d:07:ef:23:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2D:2A:60:97:56:08:A6:45:42:A9:C3:A7:49:C9:1E:D8:F6:A4:50
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:38:8a:5c:5a:64:f6:84:a5:77:f8:7a:1c:a7:23:48:d3:f7:
         f9:38:39:47:6e:14:0f:e8:f5:cb:35:6c:4f:8d:33:af:e5:f2:
         9d:b7:e3:8e:db:10:8b:15:94:9b:ae:bd:79:87:a6:ad:3f:f6:
         a2:bf:0a:00:89:2b:1c:0b:71:df:5b:c5:e5:cd:b2:d8:df:e5:
         7a:eb:4a:40:4d:e6:be:5f:f8:ce:02:1a:fd:e7:76:04:99:d1:
         70:80:92:7b:5a:37:c5:cd:5c:b2:7b:2e:1a:c2:c1:d9:c0:2c:
         59:81:92:6e:76:12:23:62:04:86:1b:d5:f4:6c:fb:48:b7:a4:
         74:8b:b3:f4:9f:1c:ad:be:d5:ca:80:81:8f:ef:59:60:d4:fc:
         7a:05:d9:d9:8d:51:03:f2:21:76:99:d1:32:76:05:ff:77:61:
         19:9a:ea:24:d4:c7:cb:43:7d:1d:63:17:d6:be:88:f2:f1:b3:
         e3:59:2e:23:48:cd:1a:b6:68:0f:cd:bf:47:fd:99:45:39:d5:
         38:01:2e:3e:42:63:e8:f4:62:fb:c7:a3:a6:05:de:3f:ba:03:
         b5:f9:14:13:05:aa:8e:6b:36:c2:fd:71:98:25:3d:54:c4:90:
         78:09:44:3e:5e:77:36:13:0c:18:03:b7:f9:e6:8d:7c:ac:0d:
         06:72:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:25:05 2024 by rpki-client on console-fra.rpki-client.org