Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          5RN5DokobAbX5hisnMX1bmkH2NjPtMexMMcG6CGjj04=
Subject key identifier:   2D:B7:AA:55:9C:B3:B4:0B:C9:5B:8A:3F:59:16:EF:47:EB:3E:CA:EA
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       018F87488F48C043315398DE292891308325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:30 +0000
Manifest this update:     Fri 17 May 2024 16:00:30 +0000
Manifest next update:     Sat 18 May 2024 16:00:30 +0000
Files and hashes:         1: BJCMNKys3kbsaZzTXkR6E7cd1uE.roa (hash: kz79ofWr9CoX0kJFImrEbwFKsbqcDPqFGhpqDSu301w=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: PzNUHdgUSEh9mWk38l8sXdeknOgyLM1jaACgbt/xgjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8f:48:c0:43:31:53:98:de:29:28:91:30:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: May 17 16:00:30 2024 GMT
            Not After : May 18 16:00:30 2024 GMT
        Subject: CN=2db7aa559cb3b40bc95b8a3f5916ef47eb3ecaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:3c:8e:ea:a7:79:88:e6:b8:a4:f0:fd:a9:
                    cb:78:44:17:a8:34:b2:de:02:3e:09:a0:4c:f4:8b:
                    54:66:37:43:d5:e6:34:5e:8a:73:f2:12:cf:0d:87:
                    b3:ba:ea:c1:9a:82:52:d9:0c:d9:61:8a:13:e9:0b:
                    77:1a:db:05:65:cb:e3:92:6c:7a:60:ee:06:b9:50:
                    69:96:f6:1f:28:05:5a:e3:97:3b:f5:17:01:4b:e5:
                    87:6f:aa:b9:47:bd:3c:e2:64:0c:b5:43:84:30:de:
                    66:58:71:97:ee:2b:57:b1:ca:81:38:3b:39:9e:44:
                    50:4c:f2:29:ed:2a:4a:d0:08:64:9c:b0:d0:e5:ca:
                    53:1a:f5:4f:c4:70:9b:d2:63:7d:76:8d:71:7d:7e:
                    f0:97:8c:0b:a7:04:27:c6:f7:39:4b:54:90:2d:b8:
                    b7:78:ee:13:8e:50:fd:9e:09:46:30:e9:0d:84:49:
                    5f:de:0a:c3:01:74:96:a6:1a:99:00:47:2d:31:82:
                    ca:a4:5c:7e:17:59:db:64:8e:ea:b0:14:4e:ed:60:
                    cc:84:f6:a1:6a:26:99:9f:fb:6a:52:a1:e6:45:d6:
                    69:fa:7b:e9:bd:7e:9f:f6:92:01:1d:92:7a:de:05:
                    73:bd:ab:a1:ff:54:12:84:74:95:ea:cc:b5:21:a8:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:AA:55:9C:B3:B4:0B:C9:5B:8A:3F:59:16:EF:47:EB:3E:CA:EA
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:b8:c5:8d:19:14:10:ed:e2:68:07:97:db:22:04:96:9e:
         f9:58:df:e9:67:53:0b:66:b2:8c:78:01:a3:f2:17:a4:5e:74:
         9d:63:68:34:e4:79:b6:82:0a:95:e8:74:8d:5f:b4:6e:f7:b2:
         e6:d0:bf:e7:b6:46:0d:c3:74:32:f3:34:bb:14:b9:a5:0b:ca:
         da:55:69:17:4a:51:34:e2:8a:b0:1d:83:ef:17:59:8a:46:db:
         ae:4f:4d:82:9a:1b:50:d5:dd:5b:e5:9a:39:0d:29:2e:fc:18:
         b6:99:79:f5:35:12:26:21:55:5a:84:5a:4b:04:68:b1:51:1c:
         91:1a:ea:b9:7e:ac:4a:dc:32:83:46:1c:72:40:48:e1:6b:7c:
         05:53:e0:36:10:bf:95:fe:61:1a:44:bd:b3:a2:db:97:76:f2:
         85:32:22:29:67:33:f7:26:c3:33:7d:d3:0c:8e:6b:81:5b:08:
         5f:92:ab:98:87:93:41:e2:a6:34:98:dd:66:50:7d:a5:28:89:
         e7:32:f5:f3:f2:38:6e:cd:df:83:ff:3d:15:d4:10:d5:4b:b4:
         df:53:8f:66:fd:28:a8:10:3e:9e:2a:d3:a5:71:a9:eb:59:97:
         be:91:ff:75:68:ee:99:3f:29:4a:98:13:12:30:17:8b:d9:60:
         66:73:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:10 2024 by rpki-client on console-fra.rpki-client.org