Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File:                     WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier:          cdVHHIMRRSx9OuXds0W5wk0WY2ZYSG6fVVpBrpQuYUU=
Subject key identifier:   AC:C9:55:30:76:7C:42:14:40:36:BB:1A:9B:50:89:B2:76:2D:C9:21
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer:       /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial:       018F87495E1BA347FA87C73831801A748D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number:          0C6E
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: 1-20wmgBIK0bK66W3UPaZXM6qnq0.roa (hash: 0drcEYLIiubjWIzqFcZQfAN1iQlClFqovpVRGgzGpUY=)
                          2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: g36BlZYRe7jZd8irkDwp6KCsET4kvzMB8fUHUIhzSG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5e:1b:a3:47:fa:87:c7:38:31:80:1a:74:8d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=acc95530767c42144036bb1a9b5089b2762dc921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c7:fb:ce:25:80:6c:2e:ab:c7:bb:8b:a0:70:
                    4b:a8:e7:1e:e2:94:41:b0:90:30:f3:c5:d2:4b:36:
                    5f:72:68:5c:a6:15:d3:5b:7b:44:92:fb:4f:7a:d8:
                    26:2a:15:f2:da:a0:e2:35:ae:73:da:ce:83:4d:d8:
                    a2:ac:34:74:fd:a2:63:ea:5d:91:89:d7:60:6c:b3:
                    ff:03:d6:d4:45:db:05:c3:b4:14:3a:f9:07:f8:bb:
                    86:0e:c9:20:99:23:3b:01:3e:57:78:02:38:66:e0:
                    10:2c:91:90:6d:e0:01:f9:80:a2:14:86:da:17:40:
                    8d:20:a9:e5:c0:81:84:43:a3:6c:02:f8:c8:f9:19:
                    80:c7:06:f8:9c:91:75:5f:b3:55:b0:62:8f:10:27:
                    bc:e3:b8:67:56:aa:a7:b6:c7:1d:f0:45:a3:ac:0c:
                    01:fe:62:7a:af:1d:9c:69:d1:03:c3:7a:84:70:c0:
                    c9:37:e9:f7:55:57:a4:94:86:20:cf:d3:af:f2:7d:
                    47:5a:60:d1:ac:c5:48:4a:ae:72:f9:b0:e4:c6:1e:
                    bc:33:ba:84:b6:43:d6:4a:a6:ef:b6:94:a1:ba:28:
                    58:70:6f:ae:90:fb:7a:62:ea:07:10:f9:12:eb:fb:
                    a0:6d:94:7b:08:3a:e4:86:e0:38:57:1b:d0:af:61:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:55:30:76:7C:42:14:40:36:BB:1A:9B:50:89:B2:76:2D:C9:21
            X509v3 Authority Key Identifier:
                keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:ae:da:62:50:2b:ee:b0:d3:c5:2c:56:65:2c:e2:30:a3:
         4a:24:9b:ad:a3:8d:2f:83:b2:fd:4f:19:d8:19:68:6f:34:31:
         7e:2b:79:eb:7a:82:e6:ed:8f:94:36:f9:78:41:a0:f3:09:6b:
         61:79:27:54:e6:80:1b:4e:a0:bc:f9:8f:db:a7:c2:45:10:cc:
         f4:36:4e:c7:13:23:94:47:3b:7b:0b:89:c8:7e:b6:d6:55:81:
         7f:25:ee:e3:ed:e0:9b:17:63:ff:ca:de:96:41:a9:dc:1b:1d:
         98:86:a3:9f:19:3b:43:cb:11:50:9f:9d:21:0f:a5:24:a2:81:
         b2:a7:fe:82:1a:95:4f:f9:1d:4b:bd:30:61:bf:ba:77:c2:e4:
         46:7b:62:d4:81:cd:1f:79:0c:d6:3e:85:c8:78:81:8e:35:71:
         a0:e3:23:4c:43:13:16:9a:8f:fc:f0:b4:59:79:93:d9:db:40:
         31:58:3f:ad:77:2a:19:ec:81:7d:75:f9:b4:3f:7c:be:d9:1a:
         6e:0e:bc:9e:d7:e8:84:f5:2a:78:b8:2f:12:3b:c9:63:85:6a:
         88:9f:83:cc:09:42:bf:99:27:71:ce:04:6b:d7:4c:f6:9c:98:
         09:64:7e:df:13:98:e2:53:2c:2a:bd:da:3f:1b:e5:86:0b:3d:
         d5:2e:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:05 2024 by rpki-client on console-ams.rpki-client.org