Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
File:                     WM4ypXvUFp5b3bSYqlUH74NOR3I.mft (raw, json)
Hash identifier:          oRNbHHYHLJoIDmW5Byscat+XzDrc/LvyOYmvSYtdfK8=
Subject key identifier:   16:30:37:EE:E0:75:7B:60:12:76:9B:F8:60:75:6D:F0:8C:DF:8C:3B
Authority key identifier: 58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
Certificate issuer:       /CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
Certificate serial:       018F14453E6C502E4C814DADEE571B17923F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
Manifest number:          08A8
Signing time:             Thu 25 Apr 2024 08:00:33 +0000
Manifest this update:     Thu 25 Apr 2024 08:00:33 +0000
Manifest next update:     Fri 26 Apr 2024 08:00:33 +0000
Files and hashes:         1: FUhjZPGoL6CtMuucf-Ta_yQE1CI.roa (hash: dCcjppMdb5Pzpw37G/jwO4MaQjiK1DyLni6Weqi69eE=)
                          2: WM4ypXvUFp5b3bSYqlUH74NOR3I.crl (hash: BZJiRW8yiKP3OkjaobeNvwc0ZTcv9Cmitfk/qDQulEk=)
                          3: _KeLkpPXzyVQSlc-Y8eZxer2imA.roa (hash: M/Bt7/Uq1ZL7QI4mRE5BJhJruYGy89AQk6nTaAKEh74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 08:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:14:45:3e:6c:50:2e:4c:81:4d:ad:ee:57:1b:17:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
        Validity
            Not Before: Apr 25 08:00:33 2024 GMT
            Not After : Apr 26 08:00:33 2024 GMT
        Subject: CN=163037eee0757b6012769bf860756df08cdf8c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:55:3d:07:43:ad:4b:18:90:3e:32:25:80:
                    ca:fa:3a:78:f7:d4:bb:80:a6:70:ec:f6:50:d9:6a:
                    d2:15:01:14:a2:de:2a:94:5d:7b:e0:cb:96:b7:25:
                    27:86:ba:61:31:51:41:69:f8:a2:2b:27:aa:ec:03:
                    da:23:80:9f:89:9f:47:6b:6b:f6:ba:d5:ed:fe:cc:
                    bc:b8:7e:2d:e6:55:50:5c:68:02:fd:a6:35:b1:28:
                    79:75:d5:3a:8a:59:42:33:d3:83:11:0c:bc:90:70:
                    47:bf:6d:4a:23:95:6c:3c:7a:d6:6f:d2:2b:4d:c3:
                    39:72:31:fc:9a:74:4c:8f:f1:ed:de:07:b2:20:fb:
                    7b:47:36:a8:74:54:ec:ee:5b:3f:f0:40:ef:06:c1:
                    74:1d:52:3f:84:f2:dd:14:79:68:b1:64:d9:df:db:
                    ee:70:68:77:04:97:56:24:ec:1a:f3:aa:95:18:b4:
                    ea:9a:2b:0a:f9:af:c0:11:8c:8a:b7:e3:08:ee:a6:
                    c9:3e:5d:58:6c:4d:34:88:6a:e6:47:f1:9e:6b:86:
                    11:d7:2f:21:37:04:72:1f:a4:d4:dc:87:c7:3c:9f:
                    23:1a:b6:94:3b:d9:24:29:b3:f3:95:98:30:15:33:
                    5e:75:d3:6e:b6:ba:d3:54:d0:a7:d6:de:eb:56:17:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:37:EE:E0:75:7B:60:12:76:9B:F8:60:75:6D:F0:8C:DF:8C:3B
            X509v3 Authority Key Identifier:
                keyid:58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:16:f8:e4:df:02:06:4a:0c:74:39:b1:8c:73:f4:08:07:5a:
         94:88:42:96:db:2e:9d:da:55:01:41:8d:73:ba:20:cc:9f:23:
         cf:e6:ec:10:c4:67:fc:6c:53:6c:10:6a:40:e4:45:08:3c:7f:
         42:bc:5e:47:ca:72:23:2c:94:7e:88:0a:f4:d0:6a:23:ce:81:
         3a:25:ef:f0:e4:f5:42:e8:5c:71:2f:1f:ed:9f:b9:e4:f3:53:
         b5:ff:eb:be:be:78:ee:4c:f1:dc:88:c3:67:af:3b:54:80:59:
         2c:20:6b:a3:17:fd:ec:7c:9b:4b:35:66:af:5b:4f:da:f6:ae:
         35:98:fc:72:51:cc:60:8d:f2:89:ac:e6:52:de:9e:5e:7f:09:
         7c:fa:4a:d7:25:13:11:27:ca:d7:e8:99:9e:f4:ac:ce:f0:29:
         f0:90:79:0d:6e:e5:43:ec:0b:f1:6e:ae:95:43:5d:f3:8a:fd:
         d2:fd:b4:2f:18:4b:4b:55:5f:53:8d:26:9a:40:2e:86:76:7a:
         a7:4b:e3:04:fb:61:25:df:55:5a:1f:32:90:9e:a9:fc:8b:72:
         6a:17:26:7d:7c:b0:c5:98:2d:2b:1c:be:12:95:ce:da:75:0e:
         a5:8d:fd:9b:bf:73:0e:c4:b2:06:49:e4:19:ef:71:b3:74:a0:
         f7:d4:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:33:32 2024 by rpki-client on console-fra.rpki-client.org