Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          k4brRrhN00X5ypF97oAW+jpYqK4+e05TVcDG6/98jJM=
Subject key identifier:   5A:0B:46:04:45:0C:52:6C:3C:00:D3:A3:21:0F:54:01:78:DE:32:B5
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       018F8937D3849FB60E4FBAB2334AFFFC0640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:01:28 +0000
Manifest this update:     Sat 18 May 2024 01:01:28 +0000
Manifest next update:     Sun 19 May 2024 01:01:28 +0000
Files and hashes:         1: nWvWK7k5fcpe4OiGPZnR_qmp6Gs.roa (hash: 2h3PjLiEh22QMbf+FTRREeb4jya367qlMZBeE8osTvk=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: kimOSpnrfQiktWRYV66XAEPHNv6YR+tFIXJ6Iszn1aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:d3:84:9f:b6:0e:4f:ba:b2:33:4a:ff:fc:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: May 18 01:01:28 2024 GMT
            Not After : May 19 01:01:28 2024 GMT
        Subject: CN=5a0b4604450c526c3c00d3a3210f540178de32b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:c0:1b:37:8c:a4:47:f3:d8:8a:39:7a:1e:
                    35:97:8f:cc:40:3d:c5:8a:27:29:fa:1a:48:cc:7a:
                    80:0f:7e:b2:d5:45:e2:6b:d0:11:69:4c:0b:a9:13:
                    71:62:65:3b:53:c1:3e:97:a8:59:3f:13:d7:76:6c:
                    51:6d:a7:e4:af:56:a3:fa:5b:d7:c1:cf:70:71:35:
                    26:a3:f2:8f:e2:b4:14:12:1d:6f:c0:bc:6d:2f:3d:
                    d3:b8:2c:d5:03:05:1c:8f:c6:00:ff:49:9c:9b:03:
                    4e:f6:8c:a2:3c:9e:17:d1:db:e5:75:47:90:78:fc:
                    0b:b9:f4:43:18:66:11:db:d6:e1:8b:8f:81:e9:7d:
                    21:f2:2a:00:4d:c0:ae:94:f0:81:1b:54:81:48:36:
                    45:95:2f:bb:44:11:5c:69:d8:df:f7:65:da:5b:e7:
                    8e:dd:0d:5e:85:f2:c2:13:98:15:3b:5e:bb:74:d1:
                    9e:20:40:1d:65:59:4c:a0:21:8f:83:53:af:1a:cd:
                    ca:49:0e:89:dd:b4:a4:ad:66:cd:61:56:d9:f7:8c:
                    16:87:57:68:34:3b:4f:be:b8:5b:6a:a9:e2:c1:92:
                    af:c1:e0:06:0d:35:c2:77:6d:d6:d9:e0:84:fe:b7:
                    15:23:15:71:3c:40:8e:de:8d:39:52:10:56:3d:4d:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0B:46:04:45:0C:52:6C:3C:00:D3:A3:21:0F:54:01:78:DE:32:B5
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:82:db:54:55:79:22:85:14:d9:cb:c9:73:bd:15:ec:b6:
         ac:8e:b7:29:4a:78:1e:11:5a:3c:74:56:c7:89:01:e9:73:07:
         10:63:6e:b9:ca:2d:26:ca:f2:59:20:49:ce:3a:e5:9f:f3:52:
         df:56:fb:df:4b:a0:98:c7:72:f3:1f:2b:e8:b0:78:c3:c3:f1:
         12:97:ec:96:de:72:fd:3f:8d:86:cd:d2:a3:b5:ec:32:94:3d:
         0f:8f:c7:fc:f6:b3:1c:f3:0e:4f:4e:8b:c9:a5:58:20:2e:6e:
         eb:52:fa:32:16:06:85:f8:f4:de:be:a1:cd:4b:ac:eb:6d:d3:
         27:cc:9d:7c:1b:af:26:95:3c:dc:0a:d3:65:af:bc:5e:7a:be:
         ff:21:de:1d:78:d6:99:a4:d4:3f:41:4c:51:fa:8c:d0:64:e3:
         18:26:87:95:7b:81:76:50:40:58:63:01:93:d9:57:f5:d0:54:
         b2:53:01:a9:f3:23:99:3a:fe:87:48:8e:b0:b3:4c:b6:8c:e5:
         95:51:96:1e:41:f4:39:9f:19:d7:e5:f6:89:cf:1a:cf:65:71:
         62:5b:a0:02:6e:f6:a2:8e:ca:d7:88:20:c2:93:e5:8a:7a:ca:
         3f:82:69:1b:f5:c0:8c:27:7e:c8:51:a7:7e:da:fd:33:78:9e:
         f2:38:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:46:50 2024 by rpki-client on console-fra.rpki-client.org