Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File:                     WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier:          jGVweRq6U4M0OA3IikdbGHs2+vhWYghhUC9jm+4lb8c=
Subject key identifier:   6C:C7:95:84:EB:9B:4D:12:44:B4:0A:87:FF:78:9C:57:27:9B:5C:E7
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer:       /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial:       01903AE333EAB1B5FBFCB38EC63C50A113B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number:          11D5
Signing time:             Fri 21 Jun 2024 13:01:26 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:26 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:26 +0000
Files and hashes:         1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: ApnsVdD8qeMqECC/VGafQfnYrlTzBuUG3S8kG8sQoG4=)
                          2: ggHL7E8xocdvR2Wkoj4DkdUmnXI.roa (hash: C85jmLr3jaGGjh3HRSNMK8usD16B8LJMDCk/j9tGYIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:33:ea:b1:b5:fb:fc:b3:8e:c6:3c:50:a1:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
        Validity
            Not Before: Jun 21 13:01:26 2024 GMT
            Not After : Jun 22 13:01:26 2024 GMT
        Subject: CN=6cc79584eb9b4d1244b40a87ff789c57279b5ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:85:7b:69:f5:75:d7:d8:29:85:03:b9:84:
                    ee:69:c6:1a:1d:e9:ee:6f:19:96:a6:02:4f:c5:ac:
                    2e:7a:48:d1:51:e2:cd:8b:46:d0:27:00:a3:3a:81:
                    51:ec:88:93:d7:b3:a4:98:2b:6d:13:5d:b6:8d:3a:
                    2d:58:8a:68:55:27:c7:71:4d:86:f3:e4:ad:1f:8a:
                    59:3e:b2:33:ee:9f:8c:4b:35:5e:20:65:03:2e:5f:
                    5f:ad:bf:48:53:31:fb:a0:80:8f:ac:54:11:fd:6a:
                    a9:f5:b5:ab:6e:74:3b:b0:6b:ef:ba:a8:7d:03:53:
                    01:7d:65:14:77:24:4b:aa:b0:28:e7:01:9e:1e:b1:
                    fb:36:de:e0:bc:b5:c0:e5:5c:21:ee:c9:61:0c:6f:
                    0f:6c:32:a7:0f:a6:d9:e2:ee:d6:12:2b:9e:f2:70:
                    3a:7c:28:e0:4d:53:23:14:98:ab:ea:8d:4d:dc:93:
                    67:51:2b:66:91:6d:22:d3:4d:54:79:21:ff:7f:e3:
                    8c:cc:b0:dd:83:eb:42:0d:fe:d9:4b:b0:0d:4c:f1:
                    eb:ed:5d:43:c4:d4:1c:d2:63:ef:dc:eb:74:f7:31:
                    8b:38:1d:92:2b:55:6c:46:79:b4:72:b2:4f:df:a3:
                    de:e4:1a:8d:9e:5d:5d:3f:dd:90:04:78:07:2c:53:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:95:84:EB:9B:4D:12:44:B4:0A:87:FF:78:9C:57:27:9B:5C:E7
            X509v3 Authority Key Identifier:
                keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ea:38:c9:27:9d:b2:c8:b5:6c:9c:73:be:f2:5c:dc:95:0c:
         96:90:6f:36:c8:00:fc:29:94:92:e0:80:af:0c:b1:fc:91:8c:
         16:fb:28:48:50:04:8d:77:e4:96:a4:f9:55:44:ca:66:c3:7f:
         11:6b:6f:7a:7d:6c:ee:54:73:31:c1:bc:6f:76:3b:51:f7:39:
         cc:f8:d1:4b:07:3a:60:e4:83:fc:40:2b:69:51:8e:c1:02:f8:
         f3:3b:71:c6:2f:84:3e:5a:91:de:fc:db:a8:ec:a9:60:8b:23:
         6d:89:e8:ed:ab:c8:a2:72:05:4f:d7:09:e6:a4:bf:6e:83:87:
         09:7b:9a:79:98:22:ba:84:3f:27:4f:31:05:dc:36:a9:89:a2:
         ba:3c:d7:a6:02:6f:d6:02:06:2b:cc:d4:1f:2e:69:5f:4f:6e:
         4d:04:fd:75:f5:c3:59:52:6a:57:34:48:87:fb:22:14:4e:d0:
         2a:f9:0d:01:59:73:31:40:e1:b9:4b:98:01:83:8a:42:21:68:
         64:75:a8:d3:87:10:8b:89:6e:4e:98:53:c6:49:39:bd:e3:81:
         c1:b1:8a:ee:d5:ec:7b:08:d2:28:11:63:ad:9c:25:48:61:30:
         6f:e1:51:63:ab:bb:89:b2:04:13:1b:79:2f:bd:84:fe:2e:8b:
         e5:7a:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:18:42 2024 by rpki-client on console-ams.rpki-client.org