Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File:                     XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier:          O2E43v5kuZsxEMU81pvh7AmioWZBGzhXHg6y8GkPk/s=
Subject key identifier:   00:EC:C7:D4:79:B1:FC:E9:7D:EC:CF:50:B1:12:DE:65:5F:4B:8A:0C
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer:       /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial:       018F874878C3D8187EC3A9AE0F13B939F02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number:          0C12
Signing time:             Fri 17 May 2024 16:00:24 +0000
Manifest this update:     Fri 17 May 2024 16:00:24 +0000
Manifest next update:     Sat 18 May 2024 16:00:24 +0000
Files and hashes:         1: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: XZGUzN1RKeNjU5zAmCIzq2No/lVXCaJBTFHssIQh+BU=)
                          2: dVbTu2SOjU4JE9vscXTIHhfprUY.roa (hash: 6VBiel9yY0a5R16+nxgkmmj61LnnPu4Hd2sctltmoLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:78:c3:d8:18:7e:c3:a9:ae:0f:13:b9:39:f0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
        Validity
            Not Before: May 17 16:00:24 2024 GMT
            Not After : May 18 16:00:24 2024 GMT
        Subject: CN=00ecc7d479b1fce97deccf50b112de655f4b8a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:1c:4d:7b:86:f7:0c:81:f9:37:51:2c:92:
                    87:0d:d3:55:13:27:cf:99:55:50:b9:25:26:f3:5d:
                    58:d5:1d:5f:1b:b0:9e:59:9f:d5:ff:ee:f3:f9:80:
                    03:22:bb:e1:a3:38:70:e7:61:53:0f:21:71:3c:aa:
                    04:90:50:25:8b:1d:b8:b0:a0:4e:c5:a7:38:78:25:
                    28:c4:c1:23:89:79:d4:8b:71:63:db:b8:70:54:5f:
                    8f:ed:0c:e9:bc:82:65:59:af:25:dc:52:f2:d5:44:
                    c3:1a:23:8b:6f:fc:a1:b6:3f:71:f1:36:c0:5f:4b:
                    5b:11:2c:a2:c2:ad:32:c0:72:e9:71:fd:26:83:35:
                    b4:7e:69:e5:2b:56:2d:5b:0f:24:b3:0a:d7:f9:7c:
                    ac:9a:d0:4f:fb:6b:f9:29:8a:b8:6b:13:31:66:4d:
                    a9:0d:20:62:70:f2:f3:f0:2f:79:7d:f3:5a:08:f0:
                    5b:c5:ad:73:38:cf:ba:09:dc:69:ff:4c:9e:e3:f9:
                    a7:8b:34:0c:cb:10:12:6d:8a:d6:2a:e1:77:84:b9:
                    02:23:87:6e:f4:05:c5:7f:e1:9a:13:1f:a6:b3:61:
                    70:69:0a:e1:94:32:52:de:bb:ea:f8:0b:44:2d:a4:
                    cd:5a:12:f6:c2:0b:bc:85:aa:a7:12:e6:12:30:a1:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:C7:D4:79:B1:FC:E9:7D:EC:CF:50:B1:12:DE:65:5F:4B:8A:0C
            X509v3 Authority Key Identifier:
                keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:19:cb:c9:8f:fe:34:31:5f:54:03:0c:cd:6c:e6:0e:55:22:
         73:d3:8f:64:41:df:63:b7:a8:9c:93:57:42:24:2c:47:c5:b0:
         ff:db:16:15:4f:4b:ef:5f:cc:9a:dc:1c:8d:6d:76:17:d9:04:
         73:9c:ef:b5:2d:e8:fa:76:a9:eb:98:af:a5:18:0c:84:cb:7f:
         16:fa:41:23:79:17:ee:7a:db:4c:67:46:d5:5d:bd:c2:b4:04:
         68:79:8c:2a:e8:8e:ab:dd:58:12:aa:19:9a:fc:52:68:43:8f:
         9e:9d:28:d9:44:6a:e7:b3:92:4a:d6:dc:d1:5e:c1:7d:a5:33:
         03:34:0c:4b:2d:14:d5:72:29:a9:28:25:ec:f8:e8:eb:70:c6:
         00:18:36:39:66:50:42:24:1c:79:13:bc:ea:6c:d7:c1:a0:1e:
         86:08:99:b6:30:15:63:89:fc:85:d1:fa:18:b8:14:e7:92:70:
         cd:85:ff:8c:a8:95:26:f0:37:fb:6d:fe:be:1c:59:6b:47:2a:
         f4:38:d8:2d:d6:d2:5c:83:e3:4d:23:dc:34:80:d2:50:a2:65:
         b6:68:be:c6:73:da:24:a3:1c:77:49:f9:ac:64:6e:ae:cb:72:
         1b:dc:6e:48:d4:15:d1:28:d8:ff:be:2d:3e:01:85:ee:28:6e:
         7d:22:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:13 2024 by rpki-client on console-fra.rpki-client.org