Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File:                     W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier:          haZoBWgtnq0dFRjK+cZ8c6AgBjI3EsZqUhqsVXBiK80=
Subject key identifier:   FB:CF:BC:66:10:06:3F:A9:87:A7:C4:3B:5F:07:EA:41:D5:5B:F9:D6
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer:       /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial:       018F874AB9CB6A2B4F5354E6C97F1B89AC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:52 +0000
Manifest this update:     Fri 17 May 2024 16:02:52 +0000
Manifest next update:     Sat 18 May 2024 16:02:52 +0000
Files and hashes:         1: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: r9CqejpSdqDjF71CDlrIMTLLi4cyFZpIIxJgN+Fwm7g=)
                          2: gd27tVbGe-yAyIXZmobAoAMsexM.roa (hash: Ynya2/3KbG6CIntXGZccV3BJKcRGQM9vW4l8fnxkr2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b9:cb:6a:2b:4f:53:54:e6:c9:7f:1b:89:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
        Validity
            Not Before: May 17 16:02:52 2024 GMT
            Not After : May 18 16:02:52 2024 GMT
        Subject: CN=fbcfbc6610063fa987a7c43b5f07ea41d55bf9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:c7:c5:42:53:2f:23:df:ce:59:0b:e8:78:
                    0d:63:47:78:38:d3:66:1d:1c:4a:c0:2a:97:b9:11:
                    73:bc:84:32:3a:60:13:b6:2a:92:bc:b3:71:41:2b:
                    22:78:76:2a:20:23:b0:63:7f:eb:de:6b:87:46:8d:
                    e9:b7:cf:7f:17:25:12:5b:0e:bb:45:97:3d:d5:95:
                    01:c5:75:5b:d9:37:c0:fd:50:aa:a7:55:28:65:61:
                    29:00:93:b4:b3:5a:73:d6:e8:6c:38:8d:4e:5e:34:
                    b3:a9:23:a3:f0:b0:04:62:05:5e:91:f2:39:4d:12:
                    ec:70:45:a0:c2:a0:bc:0b:1a:46:23:03:84:7d:17:
                    4e:ea:fa:ec:07:8d:c5:18:fb:a0:10:fd:b5:1f:b6:
                    7b:fe:35:c7:05:8e:f0:cc:13:bd:23:fb:6f:fc:f6:
                    77:11:23:85:71:4a:31:38:2d:c1:00:24:e6:71:a7:
                    00:94:5f:69:42:46:f2:bd:56:86:8f:27:86:c6:c3:
                    28:2b:4e:d4:b8:26:f1:0d:fa:f3:80:ee:a8:98:b5:
                    cf:36:79:65:16:45:45:bd:74:22:40:3a:d6:e1:7a:
                    07:50:81:b3:ea:34:8d:22:ce:15:2e:06:a7:30:da:
                    1d:81:8b:d6:5d:cb:e0:49:ef:6c:ad:46:8d:b2:aa:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:BC:66:10:06:3F:A9:87:A7:C4:3B:5F:07:EA:41:D5:5B:F9:D6
            X509v3 Authority Key Identifier:
                keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:eb:fe:cd:52:e0:6d:93:15:a9:14:a1:f4:8b:9d:02:a1:
         ab:3a:63:be:fe:f9:3b:7b:b9:b8:30:65:6d:5b:a5:e8:72:e7:
         78:00:11:8e:5c:91:5f:89:7e:43:de:a0:3e:f1:e1:e5:cc:71:
         f3:65:08:4a:c7:d8:af:d4:d9:d5:07:3e:7e:87:cc:83:64:20:
         f7:8c:c6:da:f6:0c:d9:66:0e:34:12:70:2b:8c:61:4f:d0:db:
         be:1f:8d:92:81:22:2a:d9:cb:3b:62:56:b4:29:5f:d9:49:d1:
         74:5a:2a:41:55:66:2a:eb:2c:4e:6e:47:91:de:ee:ec:d2:a9:
         da:c2:bf:68:49:30:85:6d:dd:1a:78:65:15:ed:cb:6b:0b:d7:
         70:81:4c:2a:1a:c1:f1:47:3f:1d:45:23:23:8b:24:0b:09:52:
         ac:e0:ef:22:e1:d7:6e:13:e5:18:6a:a8:ea:ef:cb:34:ed:6c:
         a9:59:9f:78:e3:90:90:67:13:be:2b:0a:ff:89:e6:b8:4d:72:
         a8:8e:6b:6e:f1:6a:11:d6:17:d9:42:53:5f:d5:33:09:1e:51:
         c8:3a:bc:13:40:8b:63:0a:a7:a1:1f:d9:5a:09:12:60:50:a3:
         50:14:d4:7f:eb:96:f8:4d:04:36:ba:ea:e1:14:cf:25:3c:d1:
         fd:0c:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:34 2024 by rpki-client on console-ams.rpki-client.org