Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          mquCfs/4DPEN+aSwSqaXKiA+m2uzDkdAJ3O4U9H7rPc=
Subject key identifier:   07:44:B4:4D:40:0D:62:5F:FE:FB:5F:26:38:4A:F6:2A:BD:70:7B:80
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       01901EFDAEB3CB1BD1837BE9365C055AD12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:59 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: lJ5/mB9ZaFNkIJkDMplWYwA9NCpXGPGgwymjbqr8ZqU=)
                          2: KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa (hash: mtH6mT3OvtmR4ML/LV6hr5TUhQwtnZXyO9yQvHsBGEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ae:b3:cb:1b:d1:83:7b:e9:36:5c:05:5a:d1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Jun 16 03:00:59 2024 GMT
            Not After : Jun 17 03:00:59 2024 GMT
        Subject: CN=0744b44d400d625ffefb5f26384af62abd707b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:d8:34:0b:bd:fe:41:98:f1:55:a5:d5:4a:
                    c3:01:ef:6a:95:d6:e9:45:16:78:db:da:f2:a7:e6:
                    bf:d1:51:3c:d0:c5:3c:36:f1:d3:d3:8c:18:ed:75:
                    62:f1:60:40:b4:69:f4:39:0e:bb:7e:24:d2:cb:e7:
                    1b:10:e4:fb:4d:ad:55:28:93:55:fa:c4:c8:66:b3:
                    f0:ab:97:6a:1b:e3:d6:01:48:4f:e4:d5:b8:39:83:
                    4a:80:59:a6:7f:41:82:13:b8:02:30:68:b0:fd:b1:
                    f7:5a:af:84:87:ff:9a:33:b1:7c:27:1b:3d:6c:4d:
                    0d:ca:f3:56:0a:11:3a:51:7a:4d:46:8a:37:55:f5:
                    ea:01:10:34:b7:b8:f4:46:d4:a4:56:20:4b:b5:62:
                    ff:16:61:10:03:c0:01:ae:50:00:27:1a:b7:c8:b1:
                    44:8a:93:e2:ac:0f:e9:c4:77:36:53:2c:56:59:ce:
                    d9:5f:a0:f7:6b:98:7c:a4:52:dd:77:27:bd:87:e2:
                    dc:fa:df:0d:84:d8:4e:1d:bb:da:99:c6:35:2d:51:
                    ed:fd:1d:18:cb:5f:2d:da:2d:58:b1:7b:9b:89:a4:
                    e5:f5:d0:d8:8d:45:d6:7b:2e:ff:15:60:77:60:52:
                    48:2e:af:dc:c4:a9:c3:2e:13:93:a0:fe:6e:c9:56:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:B4:4D:40:0D:62:5F:FE:FB:5F:26:38:4A:F6:2A:BD:70:7B:80
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:75:54:16:92:c9:cb:3d:2b:b4:e9:f9:08:6c:cc:9d:85:
         0f:19:76:a1:e5:4c:62:10:a2:87:94:e1:79:0e:dc:a7:de:9a:
         f5:b3:99:20:d1:7e:59:55:80:4d:66:45:ef:46:b7:0b:72:a0:
         73:b3:9c:28:10:f0:e0:61:b0:56:7b:5b:aa:cc:66:4b:13:4a:
         f7:e3:99:ad:e5:e9:f1:a0:dc:3e:4a:74:36:1c:ba:9a:f9:99:
         b4:3f:43:c7:d1:e9:69:40:a1:fa:ac:5c:58:d2:c3:6a:c8:1a:
         8a:c0:9d:88:c7:c2:9d:77:6f:44:4a:aa:52:22:9a:45:4a:1b:
         22:04:2a:6d:1a:4c:3d:b1:23:de:5e:03:56:04:79:88:b4:98:
         0c:93:d6:d0:48:9e:3b:a8:1a:4f:82:aa:f9:c3:92:0b:4f:c1:
         f6:91:fb:f8:23:4d:4d:c4:8a:1b:5f:cd:3e:e4:0c:71:5b:f6:
         3f:2d:79:f1:ae:5d:67:37:b3:b8:03:71:65:77:d7:da:ef:2d:
         a1:ba:49:1b:a3:23:1e:5d:7b:3e:b5:0f:0a:ae:e9:75:2a:f8:
         b9:46:6a:9b:ca:0e:54:b5:5d:05:f9:d9:b1:21:23:8e:c0:53:
         07:8b:6e:bb:1b:82:7a:d4:ca:1f:a7:2f:6e:51:25:fe:24:df:
         ac:b5:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:11 2024 by rpki-client on console-fra.rpki-client.org