Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File:                     WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier:          gg4guiOa0tYeobOId0YgnI6KRHjpmGZRdxyzvsyLoRI=
Subject key identifier:   D5:C2:1E:DD:10:E3:65:FD:4E:B6:01:60:DF:DA:F7:95:D2:F1:85:1F
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer:       /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial:       018F874945AB52218B41B3A5BAEE8D616E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number:          FA
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: RfOfdBSoyIiGx1E3lhgZO6u2ubETKczJ+5aXFzPd9Ko=)
                          2: l74AtNQ5zvX4bAO_kiGIGSned5A.roa (hash: YeJLx7FcJHRjZBWO6S0l07q2Y/2NSvB5JH42E1nOSEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:45:ab:52:21:8b:41:b3:a5:ba:ee:8d:61:6e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=d5c21edd10e365fd4eb60160dfdaf795d2f1851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:24:0d:2a:94:3b:cc:c2:aa:a0:a1:93:db:
                    d4:f2:2b:3b:e1:fb:c4:37:c9:28:19:1b:2d:ff:86:
                    0a:54:cc:6c:38:da:0b:6a:7c:f0:4e:ab:6c:2d:a5:
                    fd:7a:55:b1:f9:d2:54:a3:0f:c2:7e:7c:52:bf:ef:
                    2c:60:5b:e9:6c:ce:7f:d8:91:d6:3b:11:ce:24:99:
                    d6:5c:c9:99:fa:06:b3:f0:09:55:91:f7:b6:9c:58:
                    01:b4:46:8f:f4:87:c9:e1:d0:cf:0e:1c:6c:c0:ff:
                    ef:c0:de:ff:31:f3:d5:15:9d:9a:4e:24:df:46:97:
                    da:77:bb:94:48:13:f5:c4:da:2e:e1:2a:42:74:68:
                    ef:35:47:68:69:6a:af:94:ab:0e:6c:db:19:1a:93:
                    3e:d7:50:c7:32:f0:ec:0e:f0:4e:7d:4a:e9:86:29:
                    49:c5:3c:44:c7:16:86:8d:b7:a8:e1:fd:e6:ba:0f:
                    29:bb:6f:30:0f:ff:72:76:ac:70:b0:35:0e:61:60:
                    eb:61:84:b6:5a:9f:83:96:a8:60:c6:b4:26:6f:ac:
                    50:b6:ff:d5:75:e6:14:5b:49:2f:94:ea:27:f5:58:
                    9b:a3:77:d3:c6:84:f4:20:e7:2a:32:6c:0b:b6:40:
                    79:75:5d:62:c0:c2:c9:64:80:03:f3:58:d9:a2:c8:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:1E:DD:10:E3:65:FD:4E:B6:01:60:DF:DA:F7:95:D2:F1:85:1F
            X509v3 Authority Key Identifier:
                keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a8:60:3b:7e:47:5c:da:db:49:88:34:00:12:7f:08:32:33:
         b9:68:18:ca:91:fb:1f:a2:8a:f3:91:bd:3d:e6:7d:41:64:bb:
         02:ff:af:83:8f:2c:ed:0e:3c:d5:fa:ef:33:82:e5:bc:59:4d:
         1d:79:a4:40:bd:8e:fb:e9:7e:4f:83:51:36:cc:5a:58:8b:9c:
         9f:a1:b8:0b:56:73:62:82:0a:66:b7:79:17:33:38:ab:59:fe:
         26:e4:cd:bd:a3:b2:ee:b4:2e:f1:9d:63:5a:27:43:af:a1:28:
         a5:69:80:7c:ed:0b:b9:76:94:96:68:b2:ad:c1:56:d8:8f:e6:
         7a:00:60:a0:81:0a:c7:94:e3:75:47:a9:da:ac:47:e9:84:20:
         62:17:91:21:3e:67:1c:d0:ea:4a:82:e5:a2:f4:57:56:62:22:
         d3:f0:a7:1e:cd:21:1b:99:c5:66:99:3b:2b:0c:18:62:4b:5b:
         bb:ae:81:16:b5:2a:98:a7:69:84:b5:59:b6:ca:1d:56:1b:90:
         2d:d5:84:f9:7d:4a:a2:52:7c:59:c2:ee:68:08:8e:69:89:65:
         f6:ee:ac:ba:06:76:a8:58:8c:da:df:3d:45:86:87:a4:59:26:
         f5:87:8b:4c:f1:e1:24:2d:91:4b:90:bb:81:3c:b7:03:46:07:
         c4:16:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:27 2024 by rpki-client on console-fra.rpki-client.org