Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File:                     wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier:          YB6a1MnaBfh7wsfNGzbeLprmxaeMfVIq5SOgD88H1jI=
Subject key identifier:   1E:86:39:94:7E:0A:71:CF:8B:7A:F2:C4:D5:10:BA:78:54:64:4E:F6
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer:       /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial:       018F87B6AFBFF9FE038CD531B2CCAD15EE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number:          10FA
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: 1-pmA2Z6hQ__PPJ4UmZr7W_ECufQ.roa (hash: b9o+0Ot2P51iVuYsYLDckr3AeuXFx4IrSbV3O5WiCio=)
                          2: ZzHXYQ_C2PzXppFMt9ZZTAuq288.roa (hash: cj3ZuNTfjpR9c49Hx1CKk8LSmvJAoiO6B52mldX0Uz4=)
                          3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: vvWlbRYmu3D8gGUnlf0g+AcYqFqbNT9SGuS6RCOuPdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:af:bf:f9:fe:03:8c:d5:31:b2:cc:ad:15:ee:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=1e8639947e0a71cf8b7af2c4d510ba7854644ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:45:19:9f:68:1d:17:71:b5:74:10:05:5a:
                    fe:3c:45:fb:fc:6d:60:0e:63:70:93:91:b5:1f:c6:
                    1b:2b:5d:b3:75:a3:e7:f7:c7:88:df:85:d4:a8:dd:
                    0e:fb:3c:92:4a:0c:c5:a9:63:1a:9f:1e:80:8d:76:
                    ae:f1:60:eb:98:fb:0c:9e:88:95:f6:6a:4c:4d:d1:
                    f5:54:a3:be:1e:24:6a:27:fe:cc:33:19:ed:9a:3b:
                    12:7d:4a:24:e6:5f:a6:72:94:69:ab:e1:e4:10:34:
                    5f:2a:3e:97:8f:3c:8d:7a:75:5b:8b:eb:6f:0e:0a:
                    93:29:08:ed:6e:99:f6:94:b4:a8:9e:58:cb:96:e6:
                    05:8a:c3:aa:75:ee:4b:76:2e:fd:73:eb:de:70:e7:
                    c3:ef:4f:2a:d8:08:96:e3:5c:dd:a8:af:d0:97:94:
                    53:af:33:e3:00:85:27:aa:1a:e1:99:68:c1:4a:36:
                    27:df:81:70:f2:96:7e:8b:f9:a5:3e:99:1d:70:a0:
                    26:92:7d:97:82:ff:e7:d0:6b:78:7b:e6:7a:7b:e7:
                    68:31:53:4a:79:03:77:ec:77:47:42:b4:98:08:8c:
                    72:b0:b3:93:a4:30:7f:71:7c:54:74:e6:0b:31:ea:
                    d1:a1:98:18:bc:a0:0a:75:8d:8b:7c:0a:37:2c:1b:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:86:39:94:7E:0A:71:CF:8B:7A:F2:C4:D5:10:BA:78:54:64:4E:F6
            X509v3 Authority Key Identifier:
                keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:e2:c7:08:55:95:0f:a4:3b:73:ab:88:7e:f3:89:28:de:
         7b:7e:b2:4a:b1:d2:f9:38:a0:8c:3f:12:6b:2f:30:05:f2:e5:
         f2:45:d3:3e:ca:21:35:0f:bf:cf:3f:b7:d9:c2:c2:9d:fd:16:
         89:83:4f:e9:4b:e0:93:83:88:d1:9d:d0:b4:2b:fb:f2:20:0e:
         8a:18:d9:5c:4f:77:42:41:8f:99:d0:52:88:f6:9c:3a:be:58:
         b2:07:ed:88:45:7a:ab:03:59:df:68:e0:a9:15:94:da:69:08:
         31:1a:66:f0:7f:d6:02:63:2e:07:6d:d2:16:11:10:20:e5:82:
         d8:96:07:b3:c6:37:f2:9a:6c:03:c0:80:0a:05:ab:53:3e:7e:
         38:4f:29:e4:ef:62:89:f6:e1:72:81:ae:fb:13:c1:a1:6a:48:
         b2:11:e5:18:01:2e:13:a6:cf:41:ff:84:3b:6e:d8:cf:92:f7:
         54:56:ac:9f:07:54:f8:ef:97:46:ee:ff:cb:d6:12:27:c7:f9:
         ae:2e:5f:4a:aa:d5:0b:77:1a:9e:11:06:ed:be:8b:03:77:06:
         07:97:a1:7c:25:51:f3:7a:10:5f:96:9c:60:54:6e:a4:0c:00:
         95:25:d5:18:81:a0:38:52:c6:5d:0b:9c:29:e5:de:bd:cc:a0:
         62:3c:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:59:52 2024 by rpki-client on console-ams.rpki-client.org