Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          vk6Uq4T78sSoUXSxGEGqHhbibMfDM676dznbWwCKccA=
Subject key identifier:   32:42:0F:52:F4:7A:AB:5F:71:56:43:C0:63:31:B1:4E:E8:DA:F9:46
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       018F581449963F7F5C514E3512807A967878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1163
Signing time:             Wed 08 May 2024 12:01:15 +0000
Manifest this update:     Wed 08 May 2024 12:01:15 +0000
Manifest next update:     Thu 09 May 2024 12:01:15 +0000
Files and hashes:         1: 9N7rVK9sVeCCSaW55rXdnovM4mU.roa (hash: nahZTc9wkR4wQ1Q34NJGLh1zb7hIigcT1EckCWCRKYM=)
                          2: FXsBMHT8GMR9DxRaKPfirydKdTE.roa (hash: 6aQA+Nvc6Kcv4h7MqC/vu0C8p+/We4hvD08ZeotzaB4=)
                          3: _gwaheNkUtx9BBWenbCVyjQTTPQ.roa (hash: m8R0BbZ3qvKevX/xBTKqNmmB7NYYv6xM4saot5BRY9E=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: kOQffXowdFNrcQAlwHkOmF0R5hLbCjhEscQt1TGK9Bk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:14:49:96:3f:7f:5c:51:4e:35:12:80:7a:96:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: May  8 12:01:15 2024 GMT
            Not After : May  9 12:01:15 2024 GMT
        Subject: CN=32420f52f47aab5f715643c06331b14ee8daf946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:10:71:da:68:8c:2a:4e:c7:b8:4a:80:0d:
                    07:fe:35:b0:d6:00:10:f2:a6:ce:63:a3:04:d0:8b:
                    55:1c:d6:13:27:c0:ad:30:34:45:fe:f5:75:11:0e:
                    ef:91:6f:48:73:0e:e1:fd:c7:dc:2c:ba:0b:a9:21:
                    d8:8f:86:11:70:b5:8f:90:e7:7a:9c:62:77:b4:a4:
                    e2:f1:6f:ec:2d:41:23:52:bd:28:a8:37:43:1f:d2:
                    64:4f:2b:00:a0:9f:11:84:3a:e7:58:48:2f:48:4a:
                    0e:ae:92:c5:60:b9:db:e4:9c:a0:89:6e:b9:85:b0:
                    ea:cc:c1:22:b4:89:ae:a7:3e:36:f7:13:0c:c9:19:
                    51:ea:2a:d0:16:78:38:ed:eb:8b:d9:88:9c:80:ba:
                    df:70:7b:10:c1:9e:ca:af:a6:8b:7c:96:f0:d2:2a:
                    32:7d:da:4a:1f:1a:b6:05:68:ad:57:f0:4e:88:71:
                    7b:e6:5b:c5:4d:16:0d:a2:76:9e:21:12:ce:84:a2:
                    fb:4e:36:de:28:8e:62:e3:52:52:53:5e:b7:00:b7:
                    cb:55:7d:36:3b:1d:57:f5:9d:53:e2:d1:fc:19:53:
                    f0:0d:bd:b3:3a:23:48:7e:8d:58:9b:65:2e:59:c1:
                    47:05:e6:3a:57:ef:6c:89:dd:20:80:ac:70:fa:5a:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:42:0F:52:F4:7A:AB:5F:71:56:43:C0:63:31:B1:4E:E8:DA:F9:46
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:98:23:04:5d:d6:11:43:53:7d:9e:25:9e:ce:cc:18:a8:
         38:05:67:bb:e0:50:23:ce:65:ff:20:30:39:ed:51:6e:21:f4:
         3b:cf:18:06:f8:93:06:81:49:91:3f:01:b4:8a:be:56:45:d1:
         6b:f4:a2:6e:77:94:52:96:a2:35:a2:84:ce:bc:db:1f:0f:26:
         7e:9d:cf:1b:b1:05:a6:08:92:0d:e3:7e:a7:53:bd:c6:70:d4:
         99:8d:8f:16:96:75:6e:d4:c1:45:7d:ca:7d:ad:f7:9b:39:bb:
         66:19:4f:16:83:42:b9:39:77:80:e1:4d:dc:71:18:2c:0a:c8:
         e4:e0:33:d8:97:bc:2d:c9:ff:8f:4e:fe:05:d1:27:e9:1d:dc:
         60:97:88:f7:2a:39:9e:f0:92:57:c6:b1:1d:c1:76:77:59:9d:
         41:80:e5:a1:f5:47:64:a3:6c:b9:70:2c:20:3e:ce:e2:6c:3d:
         6a:73:87:7d:07:81:25:b9:2a:cc:b4:b2:6b:2f:93:c7:43:1b:
         f5:9a:ff:96:92:91:fa:cf:ef:b9:1c:81:e1:7e:c7:e3:d6:41:
         9e:82:64:de:bc:28:3d:b0:1f:d0:87:ad:88:2d:c0:64:8d:88:
         00:91:6c:e4:61:20:8f:bb:82:e6:8c:f2:1a:d0:bb:83:f0:39:
         fc:6d:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:48:50 2024 by rpki-client on console-fra.rpki-client.org