Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File:                     WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier:          xzvg34bzNiLu0HnG7br2Lj3x9VpG69tIniW7BWonpSw=
Subject key identifier:   69:BB:C0:EB:7A:05:6C:2D:2C:DA:C0:6B:50:BE:E4:26:8D:97:E8:B3
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer:       /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial:       018F882494C167754AC789BBB50CCDB3653C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number:          0520
Signing time:             Fri 17 May 2024 20:00:49 +0000
Manifest this update:     Fri 17 May 2024 20:00:49 +0000
Manifest next update:     Sat 18 May 2024 20:00:49 +0000
Files and hashes:         1: U2aE4TKgGspLQNBJynv8rVbIvN4.roa (hash: p5LBUR3NkU8Pi9hJjCHnzlHEXx5i4Wq1hHRlyFtmeaA=)
                          2: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: Wd9Ic3V3I4pttJGeF9lkL5eO+/Es16OxN+k5dzHKXI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:94:c1:67:75:4a:c7:89:bb:b5:0c:cd:b3:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
        Validity
            Not Before: May 17 20:00:49 2024 GMT
            Not After : May 18 20:00:49 2024 GMT
        Subject: CN=69bbc0eb7a056c2d2cdac06b50bee4268d97e8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:cc:35:1b:91:0c:48:cb:0b:a3:2d:05:9e:
                    98:1a:37:59:af:c1:b3:ab:6b:37:39:be:e0:6c:6b:
                    ea:eb:e3:09:63:d1:c6:23:51:40:c4:37:40:9f:5a:
                    ac:1c:fd:62:2a:32:d6:04:39:f0:6b:2c:63:22:3f:
                    fa:cf:f8:f9:da:ab:8e:d6:72:41:62:96:87:6a:33:
                    35:03:16:94:07:26:c6:49:45:90:57:09:fe:ec:31:
                    61:b1:4c:7d:76:ff:de:bb:99:d0:31:ba:1d:66:34:
                    18:28:9b:c1:03:a4:e1:ad:51:97:5c:5e:f7:ab:a0:
                    b4:87:85:20:7f:a1:4f:5c:78:aa:d5:2b:57:27:1f:
                    85:b3:fc:c7:73:e8:b1:f4:58:f4:2a:c1:c6:4c:04:
                    b1:f3:14:6f:2d:85:9f:0f:68:20:e7:0d:c4:5c:35:
                    42:5d:db:b8:e7:76:97:36:b2:9c:fd:4d:be:dc:52:
                    ea:23:39:34:7e:2a:0e:04:2e:57:6b:97:71:71:10:
                    82:b4:f1:ca:0e:81:c6:8b:d3:65:0e:c0:87:cb:07:
                    6a:48:c6:8f:51:73:fe:3d:18:70:a9:66:0e:59:81:
                    51:5f:b3:e5:94:76:3d:c1:9b:84:4b:36:3c:c6:0b:
                    ed:5e:81:f5:9e:c8:b2:bb:15:db:e2:ab:a1:29:5e:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:C0:EB:7A:05:6C:2D:2C:DA:C0:6B:50:BE:E4:26:8D:97:E8:B3
            X509v3 Authority Key Identifier:
                keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:11:15:a4:3e:91:b7:70:c5:41:90:76:66:14:03:7c:76:
         85:30:32:e6:eb:e0:dd:48:b4:60:f6:38:cc:22:88:3c:e1:0c:
         4e:6d:67:91:3e:1e:cb:50:d2:1d:53:67:92:bc:90:d1:29:fb:
         a4:cd:91:d1:ae:96:7c:18:eb:15:90:3d:7f:f4:23:46:30:65:
         c9:a5:6e:d6:15:6f:6b:6a:60:d3:ff:d2:14:57:49:bd:83:87:
         ec:27:a0:ef:11:4d:71:c4:e8:8d:97:41:5b:18:b5:0c:d7:8d:
         77:58:dc:f5:2e:df:64:2f:34:51:f9:8f:c1:8c:62:f5:e1:ce:
         71:da:e7:0a:76:92:b8:cd:4a:c8:c3:8a:86:13:c4:25:c8:35:
         c6:77:83:03:b5:66:3b:84:69:d8:b1:23:76:3d:95:6e:02:cf:
         78:44:26:54:b6:27:40:3b:cd:c6:44:48:34:85:f8:42:ce:a9:
         c3:20:4c:4c:e4:7b:bb:80:fc:e3:63:f9:38:ef:c2:d8:d6:9e:
         b0:57:0b:84:c4:31:a9:ed:48:4d:d3:40:a4:07:17:51:27:21:
         15:07:b7:e1:ea:b0:36:4b:9f:96:4d:56:5f:18:a0:64:59:4c:
         95:ed:c4:4e:f1:d5:44:41:ec:f0:4c:5d:9b:70:44:fb:6a:3a:
         61:f1:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:23 2024 by rpki-client on console-fra.rpki-client.org