Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          pqfWD4Betop5tOSG1kmdWWkzyQ+EhiXmDseq/OOi51s=
Subject key identifier:   E0:AE:F6:32:87:C7:8F:A8:79:51:FD:4B:0F:1B:52:2E:5D:18:67:BC
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       018F874A11FF1196D6A180EFAA3D19158D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 16:02:09 +0000
Manifest this update:     Fri 17 May 2024 16:02:09 +0000
Manifest next update:     Sat 18 May 2024 16:02:09 +0000
Files and hashes:         1: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: 6IXdJbwgv1PpfGgCf5/VWJU0+rRAAwLeBQpvl2LtHzQ=)
                          2: iGFigVreO2ICYjtUJtEHHqPrkgA.roa (hash: 8Gq6CK2LoCC8Gk/BJ6JhZNomLj1QWgj351PaHtxRE+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:11:ff:11:96:d6:a1:80:ef:aa:3d:19:15:8d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: May 17 16:02:09 2024 GMT
            Not After : May 18 16:02:09 2024 GMT
        Subject: CN=e0aef63287c78fa87951fd4b0f1b522e5d1867bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:36:a4:eb:75:88:ab:27:d7:c1:e2:ba:53:
                    41:12:75:01:27:60:9c:57:01:84:b2:19:b7:cc:4a:
                    6c:14:10:a5:c2:d6:58:c9:2e:26:b0:81:fc:87:e3:
                    7f:9d:63:49:d2:11:7e:42:fb:83:53:a4:e8:ea:13:
                    aa:82:df:d7:d3:df:48:fc:65:46:5b:81:7a:8a:73:
                    fc:b6:e1:3b:38:7d:7b:56:0c:fc:de:00:e8:95:e0:
                    55:85:a6:ef:6f:86:76:be:e5:47:ff:4b:ea:e8:04:
                    4c:85:46:20:fc:db:09:28:0a:9b:60:7f:4a:18:19:
                    7c:68:a7:58:b3:e3:cd:2f:55:07:3a:2e:21:79:d4:
                    de:5d:83:09:f2:49:36:81:1e:89:6c:50:fd:d4:36:
                    da:94:91:e2:72:c7:9d:33:75:28:85:82:3a:a2:ab:
                    2d:fa:ba:90:1e:c3:17:97:7c:5d:d4:77:24:31:ec:
                    3a:7c:61:32:4a:bf:ab:c0:6c:98:2d:d8:8e:4e:ed:
                    92:9d:1e:5a:47:b3:b2:be:7e:ef:8b:49:e6:00:37:
                    e6:94:33:9f:94:20:33:46:34:9d:ef:d5:07:88:e0:
                    f9:95:e6:c9:4b:ec:91:35:48:81:b8:0d:62:51:73:
                    c6:28:47:27:92:5a:37:08:26:e0:d3:6e:91:f2:54:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AE:F6:32:87:C7:8F:A8:79:51:FD:4B:0F:1B:52:2E:5D:18:67:BC
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:e2:f1:a5:e1:fc:68:f1:68:0d:8b:2c:05:e0:b9:03:bd:
         ea:c9:59:6b:b2:0e:3e:37:44:4f:75:69:ec:ad:e5:39:89:43:
         59:ba:b6:4c:d5:5e:d5:3e:d9:5d:74:03:30:5e:9f:f3:f5:1f:
         05:7c:15:3c:41:71:cb:64:e2:4c:9e:01:ef:2b:32:ff:63:de:
         e8:a1:34:d8:6b:1b:9d:a9:e9:fa:f9:e5:43:4a:a3:0f:4b:36:
         5b:3a:82:bb:17:c2:7d:48:b8:7d:72:86:14:64:52:f0:8b:b5:
         41:9b:cb:5d:72:a8:8e:00:60:ab:d3:cd:e0:f9:46:23:75:81:
         8f:c0:5f:a5:0b:0e:8e:fc:eb:48:0d:75:10:24:74:1b:d8:70:
         2d:4c:d1:ed:13:b8:69:26:3c:6f:77:6f:86:8f:3a:fb:1a:c6:
         28:1d:e7:0f:e7:ee:8e:7f:82:e9:67:41:05:4a:1c:fd:31:ec:
         05:d6:72:d8:36:bc:95:b6:21:52:d2:82:dc:bc:13:5b:0f:82:
         b1:89:1f:85:1c:b4:ab:ae:e3:54:6c:0b:8a:d2:67:5e:38:4f:
         65:ab:52:d5:71:82:4d:34:e2:4f:e5:ed:59:08:c4:96:aa:4c:
         03:a1:1c:21:7d:f2:5b:42:38:86:03:2b:0f:eb:67:b4:2d:88:
         d0:ae:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:14 2024 by rpki-client on console-fra.rpki-client.org