Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File:                     WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier:          sm2udAhFCGR+JnWmkwC8kfY6cMg3E6TLhjcUSSO/IUg=
Subject key identifier:   74:85:C9:80:CC:25:87:A7:43:27:8B:1C:99:77:54:6F:F2:9B:1B:34
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer:       /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial:       018F87499EBFBBA428693E1FFE12E74193E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number:          0822
Signing time:             Fri 17 May 2024 16:01:39 +0000
Manifest this update:     Fri 17 May 2024 16:01:39 +0000
Manifest next update:     Sat 18 May 2024 16:01:39 +0000
Files and hashes:         1: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: yzYYnuJI5jmU95lmLnCaci/aaAiLGZltO/ED/qL8hm0=)
                          2: oE7ABMfyqctm1VJm5yJYbyxjbkI.roa (hash: hg6CZsmOceHllG+6pkzseaEDuwLWfKo4DSHlY7oK+Kk=)
                          3: xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa (hash: vPqgni9u/CqAU1A0z5gt105WEPyzDAjL6iFMZF0hd1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9e:bf:bb:a4:28:69:3e:1f:fe:12:e7:41:93:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
        Validity
            Not Before: May 17 16:01:39 2024 GMT
            Not After : May 18 16:01:39 2024 GMT
        Subject: CN=7485c980cc2587a743278b1c9977546ff29b1b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:67:03:ac:45:ed:17:b2:2d:3c:aa:e5:6c:f7:
                    28:bc:0d:3e:bb:bf:45:c0:64:9a:4e:4c:b3:f5:0e:
                    af:51:5f:65:67:ad:62:31:42:1c:59:49:f6:1d:09:
                    5d:3a:bf:14:d3:ee:52:46:09:0a:2c:62:8d:c3:ac:
                    82:4c:a6:c5:46:54:fc:a1:8d:cd:6a:2c:54:64:d5:
                    70:9d:61:c6:1a:44:80:8a:fd:ca:c3:0b:d2:92:75:
                    8f:18:f2:f1:0a:b3:26:27:e2:02:ac:23:60:02:20:
                    df:2f:1d:1d:46:2e:a1:62:f6:33:4f:57:57:85:8f:
                    4e:87:0b:e4:38:9e:0e:e7:af:9e:b6:e7:55:0d:ff:
                    c8:26:cb:08:26:ad:40:9c:1e:32:25:61:af:2e:49:
                    07:de:90:b8:08:e6:2d:20:87:e7:74:5b:51:1e:2a:
                    d6:ba:17:a3:ab:fc:f2:2f:82:23:21:2e:81:cf:af:
                    5c:8e:97:36:d7:a9:c6:64:c2:d2:e7:49:12:26:7b:
                    57:96:ad:ad:86:22:0b:f9:cd:80:1d:4e:22:c1:51:
                    c2:8c:47:40:a3:ed:ab:d3:98:a0:4a:f8:b0:f4:0f:
                    e9:6c:9c:b9:f2:d9:27:94:4d:2c:1f:10:ff:11:40:
                    b6:ac:93:5f:b9:05:06:8e:a4:3b:1b:75:4c:a0:c2:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:85:C9:80:CC:25:87:A7:43:27:8B:1C:99:77:54:6F:F2:9B:1B:34
            X509v3 Authority Key Identifier:
                keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:b5:01:0c:4b:ad:9b:30:01:8a:ab:ca:d3:90:0b:30:83:
         af:93:ae:e3:49:3b:a9:1a:e6:4f:11:96:4c:ee:27:a3:69:83:
         3a:da:24:15:e9:99:b6:1f:3a:02:75:66:03:fa:17:2d:aa:8c:
         ee:a7:9c:7b:29:a0:1a:d1:22:31:b3:38:aa:6c:02:ef:c6:91:
         ee:de:72:35:39:cc:f3:be:3d:4d:36:ad:b0:51:f8:94:85:34:
         e0:92:c8:06:b4:da:5e:1f:b2:52:f2:28:b7:63:32:42:a1:a6:
         2a:3b:57:2a:09:e5:05:16:92:60:67:69:6a:ad:f3:8f:01:45:
         04:8e:3f:5e:4c:9f:9b:05:d0:93:d7:8a:a1:25:52:93:e1:63:
         2d:a9:c5:ca:e1:c1:9f:f8:61:97:f8:2b:a1:7c:86:b7:fe:f7:
         81:c6:29:7f:52:1b:2e:8b:b9:dc:24:79:2c:75:7f:b5:3c:60:
         79:f6:73:02:3f:79:1d:f7:d5:db:a0:7b:8a:96:5a:2b:50:0c:
         19:a8:5f:93:67:64:89:73:c3:8f:62:7b:1e:19:bc:0a:b6:b4:
         7d:63:18:0c:ea:07:41:fe:aa:b6:37:d2:53:dd:f1:b3:52:52:
         79:9c:a5:e0:fa:dd:f0:0d:3b:87:b9:fb:5a:df:df:57:df:7f:
         87:72:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:34 2024 by rpki-client on console-fra.rpki-client.org