Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          B8rk8TqKgVs7chjs2EpMjwvkJpj8wG7VMlvmysmhU3g=
Subject key identifier:   B0:46:9C:21:27:0D:1B:5C:61:23:49:0A:B9:3F:B7:4B:C3:93:0C:AB
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       019040B080F942BA7971447BA7206734D337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:03:47 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:47 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:47 +0000
Files and hashes:         1: GhAaP9Hz0wEnatGQlwUhidBvfq8.roa (hash: bGNqMy/DdU/zJm0fjcmUHvc0A1hVrAPEVCXM9INVlBw=)
                          2: ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa (hash: 2RjbLY8LhSQ3Evm/8VOdlMtGPZj54uoPjsV9kvsRDfs=)
                          3: vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa (hash: hAYdwCz621Msz/2JvhfTl8iiiwllmkHBofYph+W+rHQ=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: djXwvBiO/pKubgfkDYZpajXxz2xfkgILsB5HjrhkrfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:80:f9:42:ba:79:71:44:7b:a7:20:67:34:d3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Jun 22 16:03:47 2024 GMT
            Not After : Jun 23 16:03:47 2024 GMT
        Subject: CN=b0469c21270d1b5c6123490ab93fb74bc3930cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:c3:fc:95:d8:b6:dd:18:e0:70:ab:90:43:
                    13:6e:0d:f1:10:c4:a0:31:bb:18:c7:90:66:45:94:
                    5b:9d:11:fc:be:9c:3c:c9:cd:50:49:c2:05:ad:8b:
                    f6:ce:4c:dd:a2:ed:43:4e:9e:ec:61:d4:17:ca:28:
                    96:01:cb:4d:f6:59:4c:7c:6d:58:6e:ac:55:83:60:
                    f9:f4:5c:56:ba:9d:7d:56:e1:0f:3c:8e:56:c1:82:
                    67:7e:01:79:55:66:c7:37:4e:d3:a4:33:92:6f:32:
                    e9:06:72:fa:80:9d:e6:9f:9b:bc:da:77:23:1f:a3:
                    0e:a8:fc:7e:77:8a:ed:bc:9f:ba:ba:21:31:5d:31:
                    b8:d2:5a:23:06:80:b6:24:1c:7e:58:9b:22:12:45:
                    72:6e:51:43:f8:30:ca:e5:79:95:f9:98:89:8a:15:
                    3d:34:18:fe:61:5f:b9:1d:11:29:9c:df:dc:2d:35:
                    c4:08:fb:64:36:03:e3:9d:35:f1:2f:07:77:ce:8c:
                    c7:db:62:f7:f1:51:12:0c:0c:cb:24:49:40:b1:73:
                    ca:93:0d:47:36:18:25:0b:a3:04:48:78:d7:f4:00:
                    35:f8:29:8c:de:03:8b:8d:8d:56:ac:7a:f2:9b:3b:
                    f0:44:17:da:49:12:7c:86:40:85:5f:31:d9:63:b8:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:9C:21:27:0D:1B:5C:61:23:49:0A:B9:3F:B7:4B:C3:93:0C:AB
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:77:fc:f0:69:70:10:ff:b5:bd:28:24:35:78:04:c9:05:3e:
         e8:5c:23:7b:3a:53:e3:31:35:bf:dd:89:cd:32:0c:40:1f:7a:
         f3:49:b0:a1:bb:fb:e1:1e:82:2d:16:f3:b4:0c:2b:dc:5a:30:
         a4:50:cb:ee:84:97:93:d8:eb:a7:63:d2:62:9d:4f:95:76:db:
         da:ca:75:f4:b4:b8:2c:0e:5b:76:45:18:2d:9d:70:85:a4:0e:
         f5:13:12:bf:40:b0:87:d9:4f:a1:96:28:38:26:ab:11:04:bc:
         91:2d:1a:a3:62:7f:35:fc:c2:7c:82:79:22:ea:c7:28:ac:3a:
         43:36:a7:55:a4:35:37:c9:85:b9:44:79:67:ac:9b:d3:63:c6:
         9a:8a:aa:9d:90:0c:db:49:8c:8e:58:f2:db:09:2e:ce:04:24:
         3a:0d:3d:64:99:22:6d:c2:17:e7:fb:3f:0e:73:01:7c:dc:ae:
         1b:2e:5e:2f:1f:b0:bb:65:63:e0:1e:ea:8d:56:5f:ba:5e:05:
         59:fe:36:1c:9c:6f:e4:cd:a1:01:35:b2:24:20:ee:ea:6e:16:
         39:6e:ff:4e:80:7f:f2:3f:45:a1:e3:86:db:5c:b4:96:13:c0:
         6d:f0:6a:35:db:a4:61:35:f5:ad:e6:f0:66:cf:49:c3:d6:5f:
         c6:84:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:59 2024 by rpki-client on console-ams.rpki-client.org