Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File:                     WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier:          mqfgtYxf+l5pBq1FUCyRX7fQjVak34KeMOWEt/phlO0=
Subject key identifier:   46:93:3C:AD:5F:69:C0:CB:37:29:F5:75:C5:E3:0D:34:47:FD:D7:2F
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer:       /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial:       018F87491A61E1F60868AA561A9E8A1E13EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number:          110B
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: 9L8cLTRV5dWqtEZxxMwC6cIxFbw.roa (hash: uOst1jEvtvR4Fw1CNdIOPHqrP6FjR/aTU5pBzUC4ykI=)
                          2: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: RRGPdfz0vU+a6yvNHi5/TXX8vxZpV0MGC5no95AvtTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1a:61:e1:f6:08:68:aa:56:1a:9e:8a:1e:13:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=46933cad5f69c0cb3729f575c5e30d3447fdd72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:a4:0f:d7:6f:f1:42:25:0f:3b:ee:c9:ff:
                    d5:4f:41:d1:33:05:e3:1c:39:42:56:6a:d0:86:38:
                    b1:02:65:c2:85:15:39:6c:f4:a1:b3:2f:c3:bf:c4:
                    d8:e9:9a:f4:60:a2:89:9f:16:68:6a:27:7d:9b:4c:
                    1d:38:5b:63:95:3a:ad:c9:4b:ea:b5:b8:ee:2c:b5:
                    33:d9:85:d9:82:35:55:b0:02:ef:66:78:ed:eb:98:
                    f0:49:0e:80:d1:b9:82:5a:c8:e0:0b:89:99:db:d6:
                    59:2e:7a:fb:3c:21:1b:13:49:94:ab:d7:98:71:cf:
                    90:0f:ea:3f:78:da:8b:1b:f1:34:8c:5b:2b:7e:86:
                    88:bf:cb:89:f4:85:e9:f8:37:a7:51:c7:7d:0a:a1:
                    2b:28:26:39:fd:2b:9e:22:22:83:58:ab:62:cc:cc:
                    95:dd:34:83:df:21:1b:a9:0a:3f:f3:42:db:f2:52:
                    45:49:97:21:88:62:26:67:86:eb:41:55:48:e2:92:
                    a3:16:70:6c:b0:08:30:0f:e7:35:e4:0d:de:a5:26:
                    01:c3:43:61:4e:aa:b4:e2:75:51:21:e9:d3:82:d0:
                    aa:40:8e:dc:11:86:0e:57:1a:6a:82:b2:d6:2b:63:
                    48:86:63:c7:fc:8e:72:f4:b3:50:f7:bc:8e:41:e5:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:93:3C:AD:5F:69:C0:CB:37:29:F5:75:C5:E3:0D:34:47:FD:D7:2F
            X509v3 Authority Key Identifier:
                keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9d:dc:3e:ef:91:f2:f1:3d:e3:62:9c:73:62:18:68:92:d5:
         99:7c:01:3c:80:c8:45:68:4b:ff:93:ad:9a:68:01:8d:83:59:
         8f:2b:de:d9:55:6f:e1:94:d7:01:2e:0d:9d:02:4e:2b:72:23:
         25:4e:27:65:f6:a1:bf:03:fa:28:0a:ea:d0:fb:d7:86:e6:6e:
         96:fd:5e:b5:5f:16:b6:f0:f1:d0:c5:01:5f:68:a0:38:8f:45:
         00:d8:96:a7:16:78:de:3e:b7:85:50:3c:50:c7:7d:d2:6b:cf:
         18:ab:14:ae:33:7a:9f:30:69:b9:ff:31:f6:5d:ed:c1:e0:eb:
         df:90:fd:bd:46:ef:b7:6f:6b:c8:7d:49:ec:6f:fe:af:4e:99:
         73:2b:9a:5c:0b:de:dc:7f:fb:d8:65:7a:e4:b3:17:f3:c6:22:
         b2:b7:ee:12:f6:c5:90:50:f3:0b:75:5a:d0:ad:d3:dc:b7:b3:
         6f:19:24:d3:77:d9:d1:fe:0a:2e:a1:6b:01:c3:47:a4:ba:24:
         e7:18:67:fd:e0:4e:49:db:43:2f:c2:a0:07:b7:66:1e:5c:7e:
         9a:f2:c1:ef:7d:40:bb:22:f3:26:eb:01:8c:63:92:de:be:d7:
         1c:8e:82:17:b9:2d:ce:67:e3:f8:64:a8:41:3d:67:35:5e:9e:
         26:00:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:37 2024 by rpki-client on console-ams.rpki-client.org