Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          YvG6I2d0C2hK1ZHWs9tNgeksid6pO0gqIBkGxjVZ/yM=
Subject key identifier:   A1:60:F0:4B:08:34:59:2A:F4:9E:DF:B0:29:29:CE:45:97:52:E6:3F
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       018F8891F03BAB6B1DC0213379ED25197AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:16 +0000
Manifest this update:     Fri 17 May 2024 22:00:16 +0000
Manifest next update:     Sat 18 May 2024 22:00:16 +0000
Files and hashes:         1: qkXWPg5ppzzsVfgnFjM1VYXrADU.roa (hash: z4Jwf28zPNTmZDGLpM9rALOWSr9heiVRt/6z3pVGEEs=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: 6NOdyvy3yXACS75V6+uXf/Qd8OAcQAEDxWGDeinxy3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f0:3b:ab:6b:1d:c0:21:33:79:ed:25:19:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: May 17 22:00:16 2024 GMT
            Not After : May 18 22:00:16 2024 GMT
        Subject: CN=a160f04b0834592af49edfb02929ce459752e63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:d7:d8:ed:56:b1:90:f0:3c:46:18:9e:0e:
                    45:6a:41:ff:5b:45:89:ea:92:1e:58:5b:c0:02:12:
                    55:34:0b:11:25:c7:6d:15:74:6c:ac:68:cf:5e:88:
                    fe:08:54:73:30:a9:f9:43:ac:2f:db:e4:90:22:66:
                    58:e7:c4:5a:6a:45:bc:78:19:cd:b9:42:b1:29:4a:
                    2f:4a:ec:07:37:43:95:bf:2d:99:b0:0a:2f:ed:7d:
                    b5:9c:bf:c7:e0:b2:9f:a8:d2:39:b3:3a:e5:6b:09:
                    70:a1:96:21:c6:19:e6:b3:8c:b4:4e:20:60:d8:87:
                    6c:15:7a:28:ba:4c:e5:60:e1:d0:5e:54:4b:e7:40:
                    b6:99:da:87:3d:82:40:c7:1b:4e:48:3d:51:84:62:
                    66:c1:c2:6e:26:81:3b:1d:89:10:cd:4e:37:89:d3:
                    c3:08:d7:da:ff:4e:0c:71:fe:ad:56:46:2f:72:4a:
                    b0:9d:f5:d2:85:65:21:1d:df:f6:73:67:82:c4:11:
                    57:fc:45:35:1d:74:85:58:11:a9:94:f2:9d:f4:6e:
                    93:aa:ca:5e:f7:5a:f1:06:64:30:e7:00:da:db:3b:
                    72:b5:05:9c:ef:29:01:7d:cc:8c:76:6c:71:ca:e8:
                    07:2c:45:e0:dd:d7:4b:d9:8f:5d:d0:d0:fa:57:f7:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:F0:4B:08:34:59:2A:F4:9E:DF:B0:29:29:CE:45:97:52:E6:3F
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:21:84:8f:e3:62:95:be:cb:de:34:5b:17:11:6a:d6:18:
         c0:42:1a:9f:8a:39:c5:f8:44:ea:2f:82:33:0b:6c:36:3d:96:
         53:e4:54:20:ec:36:05:b0:52:37:ae:9d:fd:e8:d1:fd:b7:75:
         55:2e:e0:c6:f2:fa:46:04:95:c2:5a:34:83:29:54:71:97:95:
         24:dc:bf:3b:55:3a:50:33:d5:4f:4f:ad:e7:b2:f2:94:42:51:
         c3:b5:8b:f2:24:2d:08:00:04:05:25:fa:23:3a:47:56:d7:e5:
         a8:70:fb:76:62:48:02:71:0d:0f:6a:d2:5e:db:54:aa:cc:22:
         3e:39:fb:4d:6e:1d:76:b9:08:7e:8e:15:3a:34:27:11:ca:e9:
         dd:4c:7d:61:b4:ee:8c:da:e9:05:43:b4:c7:9c:f8:b9:84:eb:
         4f:26:6a:1d:ed:71:40:0c:c5:67:e7:7d:11:16:3e:b3:8a:c7:
         93:53:36:fa:f5:89:55:15:06:72:37:67:3c:cd:25:8f:b2:32:
         2f:7b:3c:e4:6a:ea:bb:e7:bf:b2:8b:89:04:58:ae:19:82:30:
         fc:cb:8e:62:af:36:a7:01:31:12:a0:5c:be:42:ca:7a:89:57:
         13:2d:88:d2:d0:8a:f4:b5:ba:29:67:7d:a1:88:a4:9d:ea:6e:
         18:b1:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:58:50 2024 by rpki-client on console-fra.rpki-client.org