Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          jhwiN6v7xQZtJb8WHP1BoTizpfio+TQTPhgSqoQHaAA=
Subject key identifier:   54:1D:FF:81:87:0D:BF:C0:C6:CA:09:5E:5D:DB:44:40:9D:54:AD:25
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       0190459D43498C93AD32A2928B6BC81E888F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 15:00:52 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:52 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:52 +0000
Files and hashes:         1: 4dem9-WtM4WhcWz7i3En58hPsd8.roa (hash: a5EoPaEF2r9LgQpxGrHaSUkko4/7aENYqzeYn/LSocw=)
                          2: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: gwC36dK6+h4fGAaJLW0MM5aEG8Hj3XtadRevfvr+Chk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:43:49:8c:93:ad:32:a2:92:8b:6b:c8:1e:88:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Jun 23 15:00:52 2024 GMT
            Not After : Jun 24 15:00:52 2024 GMT
        Subject: CN=541dff81870dbfc0c6ca095e5ddb44409d54ad25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:cb:44:60:54:3d:05:3f:99:c1:1d:23:f5:
                    c0:79:b0:74:b0:b4:d5:c1:8b:ce:fa:ff:9b:d6:57:
                    e8:c8:62:dd:6d:7a:28:82:0d:fe:23:89:84:32:08:
                    8a:18:81:a5:ea:b3:de:33:95:09:69:89:3e:20:3e:
                    cc:46:31:11:86:48:c1:1d:ff:72:53:eb:51:38:96:
                    fc:6a:57:fe:46:15:20:26:1a:65:76:22:3c:46:7e:
                    a0:92:01:87:66:a5:0c:bd:2a:7e:62:2f:fc:92:64:
                    36:e1:5f:db:fe:ec:bd:96:5b:1c:7d:87:3d:20:fc:
                    1f:07:21:2b:d1:d0:7b:54:93:e1:bb:ed:d9:fc:a7:
                    9b:64:31:5a:1b:3f:65:49:64:e1:a6:52:96:3d:85:
                    17:3b:fc:78:52:b3:5d:78:88:69:9d:d5:ca:9a:96:
                    ee:96:9a:53:b5:ba:63:9e:96:a6:b0:23:8b:57:57:
                    bf:77:9a:8a:dc:ae:a2:8e:77:1d:ea:5e:30:1b:f1:
                    72:85:60:31:73:28:fd:5b:24:8a:4f:86:ca:ed:3a:
                    ef:50:1a:01:19:00:d5:90:c1:19:90:5e:98:54:7c:
                    67:dc:f1:96:0a:4b:92:68:a3:eb:8e:01:e5:be:54:
                    56:b9:2e:fd:4e:57:76:3a:dc:5e:c0:cf:b9:f8:9a:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1D:FF:81:87:0D:BF:C0:C6:CA:09:5E:5D:DB:44:40:9D:54:AD:25
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:46:e1:c8:5f:d1:83:25:9e:7a:08:9b:e7:e5:15:48:69:93:
         c8:f4:d1:5b:2e:af:a9:84:16:bb:43:1d:0e:c2:be:ae:a9:77:
         29:cc:a2:8e:7c:58:f2:01:87:71:8b:6e:f7:43:de:f9:80:6a:
         ff:58:5b:89:b3:73:ab:66:92:1e:a3:b7:1f:e9:30:06:b1:69:
         ca:4b:cc:8e:54:ee:cd:ce:39:4f:fd:f7:fe:fa:73:4b:42:a2:
         de:ef:6b:93:76:89:6d:8a:a4:d4:e5:20:2d:6f:ad:e9:5d:3c:
         66:f0:b0:d9:93:fb:e2:67:52:e6:31:e2:8e:0f:c6:86:fb:53:
         4d:c0:c8:c3:e6:bb:7d:33:df:bf:f3:7d:94:c0:44:c3:25:6e:
         3c:bd:1c:22:61:6d:a9:61:2f:d2:94:9d:e3:f2:6f:08:1c:55:
         99:74:2e:40:19:8f:81:74:55:e3:16:90:ae:88:85:8e:bc:7f:
         60:60:24:ad:46:20:22:36:53:d8:e6:a7:24:66:cb:9d:ba:73:
         59:f3:ee:98:e1:4e:2b:60:f9:ee:7f:14:a5:e1:23:78:b3:f3:
         4b:4a:92:d1:06:15:99:bb:fe:74:96:80:61:d5:4e:f7:56:c0:
         35:f9:39:5b:1e:86:a4:5a:aa:56:bd:bd:a5:4d:26:36:a2:e0:
         3f:4f:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:25 2024 by rpki-client on console-ams.rpki-client.org