Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File:                     wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier:          Xvafac7WmnqGlqRiDmSN5OhO4oHp7Li1DN7yYBCkzO8=
Subject key identifier:   96:87:58:31:69:F2:B1:4B:FB:AD:9B:ED:48:FE:FC:4E:1D:28:7F:7A
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer:       /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial:       018F8749B0235B41BE613C40B03B9E42C5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number:          0273
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: a7r43nSeeFkucPZdOIY_ccU3h9w.roa (hash: eqskUS+WB+IzzDa+JNssKTWqfGmm3nTWPX9Gh40Wbkc=)
                          2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: VRZ2E2FBqmWFLu3lTkPHYT7oiPtb1sVDyzwG2uM+QsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b0:23:5b:41:be:61:3c:40:b0:3b:9e:42:c5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=9687583169f2b14bfbad9bed48fefc4e1d287f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:d8:9b:de:b6:58:47:46:a6:e8:3c:f7:16:
                    e1:23:3a:9e:91:07:68:4d:19:4c:02:60:95:95:e1:
                    0c:f8:b1:1c:1c:6e:89:33:b3:a7:f4:e8:e2:4b:7d:
                    f8:69:fa:d2:a2:4f:31:22:1f:31:8e:6a:c9:9f:00:
                    d1:6c:50:38:b0:a4:16:95:16:9e:99:20:6f:47:e9:
                    40:dc:51:1a:30:b6:09:92:8a:f2:45:15:19:79:d2:
                    22:8a:f0:79:84:4e:90:91:e3:fc:a1:f9:4d:bf:b5:
                    38:c3:03:85:8d:3a:7c:81:22:f0:93:7b:0d:14:cc:
                    ce:17:9a:f6:4c:28:2d:01:53:fe:26:92:25:c8:fc:
                    96:71:0b:ae:b8:b6:68:61:f3:49:c9:2d:2d:a3:3b:
                    d2:35:2a:b2:36:9f:62:70:f8:2f:b1:c8:cf:06:fa:
                    d1:60:3d:62:9b:b6:8b:87:c6:f2:b2:ff:cd:b8:49:
                    91:14:b0:1d:5c:bd:75:c5:da:39:cd:c9:ca:f5:87:
                    26:80:6b:69:28:06:fb:5f:d8:f8:83:c0:c9:d1:59:
                    6f:c2:69:73:52:2a:dd:35:ce:af:6f:52:2b:c4:80:
                    66:7f:38:0f:4b:6e:07:25:09:ef:2d:ad:1e:3c:b4:
                    69:a5:ae:0d:b5:3e:10:9e:4f:dd:53:30:45:84:88:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:58:31:69:F2:B1:4B:FB:AD:9B:ED:48:FE:FC:4E:1D:28:7F:7A
            X509v3 Authority Key Identifier:
                keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:c0:f3:f0:27:ea:65:e1:17:e1:2a:56:ad:4b:47:ac:12:
         73:28:b6:cb:66:84:c2:0f:ee:1f:f1:10:8f:d9:d8:6c:dd:c7:
         ea:52:a5:54:00:c8:a8:eb:36:cb:58:28:fe:57:04:de:35:ba:
         44:3e:be:f2:d0:57:ad:6d:39:9f:bf:b3:4e:4f:f6:28:9f:7e:
         d3:2e:53:9d:08:46:ec:d7:12:40:b2:b6:cf:ef:af:0e:30:c7:
         af:79:e4:42:32:f2:e1:0d:c0:f8:f9:cc:87:6d:fe:37:e5:af:
         5d:48:05:6c:75:8b:99:75:a2:95:19:e7:33:5c:66:59:6d:55:
         df:6e:47:5f:a8:63:be:e6:5c:dd:dc:0c:be:d5:a3:18:5f:be:
         bb:a1:0f:eb:24:22:9d:c9:06:d3:19:88:34:49:d8:c6:00:fc:
         aa:91:c8:2e:20:7f:b8:6f:a3:b6:15:bb:ef:dc:52:11:65:54:
         6f:2f:09:84:8f:cb:6d:4f:a1:42:25:89:61:a4:00:c8:0b:34:
         55:da:46:47:a3:2c:fd:5f:57:58:c7:37:10:71:4f:73:90:a6:
         5d:50:76:ce:4c:c7:60:52:48:12:e9:3a:0e:2e:44:ec:7c:6d:
         7b:86:9c:fd:d6:c6:69:09:d1:91:2d:87:fa:0e:30:4e:8a:b5:
         1a:95:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:19 2024 by rpki-client on console-ams.rpki-client.org