Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File:                     1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier:          c3Lb21fG2OGw4ptlSiP0Aoj2skzSMFcwNjc/9BH+N/I=
Subject key identifier:   EB:2F:45:A4:2F:F3:63:97:D2:D1:23:87:23:90:9C:A8:21:18:A9:E7
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer:       /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial:       018F874B0C20BBF04C4F046A08393FB650DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number:          B5
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: r6VrlcInroFlD+qt+tk2EHnhlWGY8zyWi5FoGNgJGcA=)
                          2: BfqmmtYmqYuArDUKy7o7y3-o8cU.roa (hash: 1xNaPJGkuqt18QN9Q7a2gkIyy1ndibL0j4REaz18DyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0c:20:bb:f0:4c:4f:04:6a:08:39:3f:b6:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=eb2f45a42ff36397d2d1238723909ca82118a9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:e4:32:00:67:6b:65:80:7e:b9:f2:c8:4d:
                    e6:4a:0b:e9:30:dc:9a:93:9d:3e:d0:c5:13:24:7b:
                    2a:06:67:68:69:61:82:58:54:40:2c:d1:9f:8b:55:
                    39:da:6c:3d:a7:cf:2d:4f:bd:7f:26:0c:2a:a9:15:
                    8f:a5:e5:da:f4:f6:c7:38:d0:70:77:04:cc:aa:9b:
                    07:36:8f:66:29:25:43:03:5e:6c:a0:16:7f:fe:f7:
                    b1:25:bd:3c:a2:6e:cd:f1:7f:d6:aa:b0:81:a3:a2:
                    bf:b4:44:7d:79:a6:5e:5b:43:a7:92:47:fe:07:f2:
                    0c:5a:aa:87:07:57:50:ef:6d:a6:6e:ca:45:26:a9:
                    a0:3b:11:60:23:89:77:43:70:f6:3e:5f:8e:f6:4f:
                    14:23:59:0e:ad:4e:cb:b3:b2:d2:a8:35:a8:5d:ee:
                    f6:a1:21:e0:6a:33:bc:04:2e:80:02:0e:64:03:0b:
                    bd:11:41:1f:bf:1c:7e:a2:02:23:7d:1a:9c:22:84:
                    ab:93:48:4f:0c:c1:0e:5e:fd:a8:a5:21:50:5e:29:
                    26:d6:60:97:4e:28:df:f7:0d:f4:2b:11:45:6f:80:
                    3d:17:f9:9a:05:f6:5e:fe:9e:29:cd:5f:07:bc:00:
                    9b:b9:be:5a:af:8d:09:2f:72:f1:d6:99:bf:79:53:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:45:A4:2F:F3:63:97:D2:D1:23:87:23:90:9C:A8:21:18:A9:E7
            X509v3 Authority Key Identifier:
                keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:f1:26:1f:17:a6:30:b0:2c:79:3f:66:54:80:ea:0a:68:
         ad:bd:35:b4:d7:8e:fa:b0:c2:7b:bb:43:4d:96:ee:86:40:58:
         db:f8:6b:99:a2:c6:e1:02:ef:0e:fd:20:56:7d:5f:3d:04:1d:
         fc:06:e8:e4:80:bf:9f:89:0b:c7:bc:07:34:6a:4a:a6:1a:4a:
         30:ba:87:f1:78:03:f5:d7:62:7b:29:d0:a7:c6:27:7b:78:48:
         b2:9c:e6:02:3c:c5:88:fc:32:5c:25:7d:5c:d1:73:d5:b4:b1:
         a7:ff:dc:ee:31:3d:10:38:1b:70:18:cd:7a:11:04:c1:d8:89:
         8d:e7:cd:59:eb:66:d2:92:a4:91:0c:62:13:2d:12:7b:00:27:
         23:99:ba:56:7b:bb:58:51:ed:80:4d:ad:12:30:e9:26:a4:34:
         d7:71:5c:06:29:24:0f:c1:f1:05:10:d3:cc:69:68:a3:29:7f:
         fc:2e:4b:52:d1:aa:ee:83:98:50:ab:cc:5e:cf:1b:76:19:b0:
         82:18:ba:9f:ac:5d:77:5c:43:29:61:b9:cf:be:88:9d:58:08:
         2f:34:9f:1c:13:91:42:65:56:04:30:3d:95:a4:67:13:6c:0e:
         3a:55:2e:a6:eb:02:36:5b:d7:ca:b0:ea:93:ee:9d:ca:f4:11:
         e4:b6:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:00 2024 by rpki-client on console-fra.rpki-client.org