Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File:                     wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier:          NwtQ2IZgwDxfCxgOLfVav/Ztxup5f/YT+2N6Eb3Nq3Y=
Subject key identifier:   09:17:97:E3:35:BE:94:30:1D:79:D5:5C:20:37:6A:A8:7A:38:AE:1D
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer:       /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial:       018F874A06891D9F9A2CD1920796A7E77F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number:          0C65
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: 21XBXZjOoCaselD-5cYMf6YrjZM.roa (hash: DiItVtL7Toq8xloqGrmWLIBaMWx00isaKUvAITB8E3w=)
                          2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: 4RkSMG0P8YisRwTcpeRj+A5gv3ZRAsv1oNmj4kIfkPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:06:89:1d:9f:9a:2c:d1:92:07:96:a7:e7:7f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=091797e335be94301d79d55c20376aa87a38ae1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:bf:eb:a4:0e:ad:4d:f1:29:aa:20:94:b2:
                    54:c9:ca:38:7d:c8:6d:cf:80:3f:6f:78:4a:ea:8a:
                    9c:6d:32:f9:49:c2:01:29:36:9c:c8:37:b0:05:9e:
                    1e:db:d6:42:ea:58:b3:5a:9b:e2:14:0a:83:8b:f8:
                    8b:9e:95:e1:51:8c:a3:cf:cb:68:3f:ca:58:62:05:
                    46:66:9a:68:e2:19:92:78:bb:8e:2e:54:91:f0:f5:
                    08:a6:e0:13:14:f0:32:7e:24:0a:2a:d2:f1:47:85:
                    44:62:1f:fe:cc:a4:c4:a2:be:94:cb:8f:d4:c5:b1:
                    5c:02:8d:21:02:c2:76:04:7c:44:f0:57:34:94:b2:
                    ea:fb:03:dd:ec:f5:ab:38:d8:22:a5:3f:d9:da:f2:
                    4b:63:c5:d2:02:e6:89:fb:72:18:c1:44:35:e5:c6:
                    10:4e:28:a7:ca:35:0d:75:af:34:2a:60:bb:80:c6:
                    65:de:e8:3c:02:c7:a8:90:f6:ed:76:f5:ad:d3:e8:
                    7f:ac:40:c6:6d:b8:b3:e7:02:31:2a:4b:46:03:51:
                    79:c4:e5:76:8e:24:5c:9e:e7:83:5c:85:55:6b:d5:
                    ae:cb:65:d0:b5:2c:26:c3:fc:22:2f:a4:12:d8:a7:
                    21:ab:ef:5a:2f:42:d6:07:a6:af:05:41:0e:11:46:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:17:97:E3:35:BE:94:30:1D:79:D5:5C:20:37:6A:A8:7A:38:AE:1D
            X509v3 Authority Key Identifier:
                keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:f3:73:ca:5d:a1:9c:42:d1:ad:9a:86:c9:97:5f:f0:f5:
         43:59:9a:c2:6d:bc:9c:2e:f1:8b:03:f5:92:2d:9c:fe:9e:31:
         0d:83:f7:b0:76:eb:22:dc:54:cc:ff:4e:02:09:56:80:f5:d5:
         49:4d:da:e0:99:be:ae:1c:6e:60:8b:d9:72:49:09:0b:dc:0f:
         10:f8:17:25:9b:09:5b:91:c5:ae:45:4e:9e:41:75:6c:87:1b:
         29:2d:7c:e4:15:80:b8:4a:f0:b2:46:76:60:20:d7:6f:97:74:
         82:7c:80:1c:be:68:b6:69:75:e6:21:8e:ec:0c:ff:34:54:7e:
         d8:b7:57:f6:4a:11:e1:b7:19:d1:45:de:8a:95:0c:46:7e:7a:
         6e:e9:9f:8b:b3:36:b4:21:8e:5c:89:2d:57:8c:87:e5:f5:36:
         a5:e8:42:43:e2:15:d9:5c:92:f9:ab:8a:ad:59:70:da:76:ec:
         aa:71:c3:6f:24:80:77:37:6f:ee:2c:4c:78:cc:a3:f4:1e:5c:
         47:1a:18:49:72:89:37:ea:20:57:05:e9:6d:7d:b7:83:02:38:
         34:45:33:5f:ba:6d:4c:74:cc:59:08:b5:09:05:65:0a:b9:d3:
         aa:42:53:24:d0:19:54:c6:d7:a8:df:dd:9d:db:19:a2:f3:e6:
         31:d4:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:06 2024 by rpki-client on console-fra.rpki-client.org