Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File:                     wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier:          RcmoD2pfrlB4wZl5G6JTcB8d2nXOAgarFvQGnolaJ/o=
Subject key identifier:   B6:51:78:EC:5B:10:42:F5:5E:6A:37:84:06:F7:CB:29:CA:9A:D2:1E
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer:       /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial:       018F86DA4DBDED41EAF4829E4782E79B7BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number:          C0
Signing time:             Fri 17 May 2024 14:00:04 +0000
Manifest this update:     Fri 17 May 2024 14:00:04 +0000
Manifest next update:     Sat 18 May 2024 14:00:04 +0000
Files and hashes:         1: 8gpzEWeK5cRlmrCGBYXLhxwRW38.roa (hash: 4pZ7X0PcYz701J2d5mxjXGT0FAQaf0BYPt7RGE9HqsE=)
                          2: gtI90OIkgnnRQt42jf2Jc7L1iW4.roa (hash: ARgGo/+i0SObjWCuhOSeBI0LVHmqZlLVPX3ITAC0kvU=)
                          3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: ZRJR3oYqHLZIOJ+1iyS7GLsRBhM8HtJTQXspFAAa8HI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:4d:bd:ed:41:ea:f4:82:9e:47:82:e7:9b:7b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
        Validity
            Not Before: May 17 14:00:04 2024 GMT
            Not After : May 18 14:00:04 2024 GMT
        Subject: CN=b65178ec5b1042f55e6a378406f7cb29ca9ad21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:36:c9:08:ae:b8:04:b6:7f:35:48:42:7f:
                    62:b3:df:6c:47:4b:93:80:70:f1:a0:46:48:7a:da:
                    1c:92:35:f7:85:f8:70:49:49:0e:6d:d4:05:b5:d2:
                    48:c4:aa:ce:2f:57:56:7c:39:9b:97:7e:09:66:96:
                    80:83:90:04:3d:32:4d:98:6c:6a:58:12:b6:0b:33:
                    48:61:aa:12:66:e8:aa:b7:48:11:64:7d:2c:4f:73:
                    76:4b:72:04:09:87:22:23:72:e6:ef:1c:82:a6:f5:
                    df:15:27:77:9b:ec:d4:a4:a8:33:68:27:da:16:33:
                    d6:38:04:97:48:fd:d2:92:bd:37:d3:03:fe:49:20:
                    5f:c4:7d:67:e4:f2:1a:e5:83:4e:22:c1:f2:22:dc:
                    7b:65:fe:4a:e6:97:65:8b:3e:99:5d:ed:72:f1:c0:
                    79:a1:43:42:3c:5e:c1:1b:46:56:8d:b4:e5:24:e6:
                    d2:13:f5:40:63:e8:5f:b5:e8:31:fb:72:e5:86:3a:
                    d8:a7:b8:25:ee:6e:06:ab:d7:01:dd:d7:41:aa:ba:
                    c3:06:e9:b1:95:cf:35:fe:c7:7e:68:2e:7f:ad:76:
                    0e:af:80:ac:1c:a0:6c:9d:7d:78:1a:24:f3:2e:ee:
                    31:15:d7:45:68:3e:ca:75:d1:33:28:05:37:2b:5b:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:51:78:EC:5B:10:42:F5:5E:6A:37:84:06:F7:CB:29:CA:9A:D2:1E
            X509v3 Authority Key Identifier:
                keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:8c:b6:60:d5:92:c4:86:2e:02:f4:44:3e:f9:ff:51:54:
         fd:3f:ec:4b:5c:b7:7f:bf:f3:a8:44:07:58:19:35:4b:1a:25:
         a4:33:45:30:46:18:51:01:0e:5d:f1:64:db:b9:4a:34:08:31:
         f3:65:c9:26:4e:1f:57:1a:5b:d2:c0:99:92:ea:04:2d:81:9b:
         00:43:7b:0e:82:41:fc:30:35:68:9e:18:44:d7:98:62:c0:9c:
         a6:37:b0:00:c4:7d:bc:92:76:5f:c1:ce:c4:a3:dd:b3:04:c0:
         db:db:a6:52:7b:bf:c7:95:c8:c9:9d:91:13:8f:fc:89:5f:f9:
         10:d4:bb:07:71:af:4b:48:d9:1b:79:94:e8:1a:18:37:75:b4:
         80:5e:0e:50:59:90:1c:cb:0e:c0:b5:07:7a:5d:73:29:30:dd:
         33:ba:b0:e0:2a:9a:d4:f5:0b:99:63:53:85:5a:e0:f0:19:f9:
         35:ee:66:67:bd:85:f3:fc:b8:d1:d5:50:99:65:b2:7e:02:7a:
         02:cb:e1:4b:0c:45:8e:64:ba:de:3f:f5:de:bc:4c:19:8c:29:
         b1:d0:89:d7:ae:f1:0b:49:03:8d:1f:ce:42:65:40:60:bf:3b:
         0f:2f:cf:26:07:c1:47:40:74:75:fa:c7:df:83:3c:14:05:f3:
         e8:b6:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:38 2024 by rpki-client on console-ams.rpki-client.org