Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          njeVtYoo8fVP7tTxOwveNwzERrJqchsgPKIbeEyaXxI=
Subject key identifier:   5A:77:76:AC:79:35:2C:78:30:79:7C:A0:18:37:D5:B9:0E:59:B6:A3
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       01901CD8AA35F5203C4BC10EE81CB0CF4812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 17:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:19 +0000
Files and hashes:         1: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: GO4fKE4qovICWtmHwUsCg9l2RDJ9cs8IqmN9sTSwvCE=)
                          2: nip39Msco-TsQkKqgBTkypNbyZs.roa (hash: /FBsbMMSaLJTRRstDDKRHG1bapU+wS4ANGurNZ1hMfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:aa:35:f5:20:3c:4b:c1:0e:e8:1c:b0:cf:48:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Jun 15 17:01:19 2024 GMT
            Not After : Jun 16 17:01:19 2024 GMT
        Subject: CN=5a7776ac79352c7830797ca01837d5b90e59b6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:03:9d:77:1a:d4:23:d5:d9:a5:be:bb:07:37:
                    e5:38:44:0f:04:c2:4c:2e:44:43:59:64:b8:27:1c:
                    dc:e9:20:ef:84:9a:ae:16:97:df:c0:ae:2e:41:47:
                    85:f9:92:8c:15:c8:f3:e2:1c:14:24:44:22:53:a3:
                    17:a8:2f:20:99:b2:b2:06:3e:aa:ad:1b:47:2d:07:
                    a2:0e:fd:b0:89:92:d0:ba:b0:e3:1e:5a:b5:24:a7:
                    39:5e:78:ec:45:bc:ba:18:e8:9b:c5:25:d1:10:60:
                    4c:3f:d3:1b:02:cc:2b:6f:ea:61:74:ed:5f:f0:d1:
                    cf:54:f6:cc:74:87:36:67:37:c0:54:61:e6:c9:cb:
                    82:71:6c:cd:f3:e3:bd:4c:65:06:33:81:06:34:12:
                    b3:03:2f:7e:77:ac:5c:91:da:d4:d7:d9:e0:04:61:
                    54:5f:20:cc:0e:8e:c6:c2:d2:19:5b:13:8e:05:2f:
                    42:39:ca:c6:f9:5d:9a:6b:74:77:15:c7:e9:74:58:
                    0d:d8:d3:b9:9b:e9:eb:ab:73:87:9e:0f:80:32:2e:
                    73:d4:60:00:95:d3:78:76:77:62:c1:e6:33:13:14:
                    30:31:4a:0c:61:c7:d8:d9:43:5f:29:45:6e:54:27:
                    12:2c:81:7d:ac:71:36:d6:72:81:b4:af:1f:be:44:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:77:76:AC:79:35:2C:78:30:79:7C:A0:18:37:D5:B9:0E:59:B6:A3
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:44:a4:68:98:72:9e:c4:35:02:fb:ba:9e:9b:9f:a6:8b:02:
         7b:f1:5f:73:8f:ed:53:a2:77:07:bf:c3:4d:cb:95:4f:21:ec:
         af:1c:74:0c:55:45:4c:0b:35:bc:43:90:f1:4d:ea:df:0c:75:
         1c:35:c0:1b:15:d1:0e:b3:67:d0:95:23:d2:89:34:86:03:12:
         cd:42:2e:1f:c1:3c:e1:7a:c3:a5:24:f5:4a:66:19:b9:80:e1:
         10:15:8e:bf:54:e8:75:ca:09:09:37:f9:91:e3:48:53:f7:4e:
         b1:a7:5d:26:c0:af:e6:c6:5f:bf:22:93:bf:2f:66:29:9d:47:
         f0:10:19:49:02:65:e9:0d:2e:c7:a3:ad:fe:76:02:ff:d8:8e:
         9e:a0:6a:11:16:50:cc:89:8c:26:1c:a4:b1:f1:68:8b:4a:38:
         f1:84:d3:df:b2:82:2d:81:42:da:a6:b2:e4:65:70:93:a3:be:
         b7:9e:10:89:9d:51:42:03:ad:0d:21:4e:ef:7d:88:fc:92:b6:
         72:a3:0b:e6:26:dc:fe:05:c1:65:07:a9:aa:01:68:37:44:60:
         b6:e8:5b:c7:89:3d:b8:f9:03:49:49:fe:9c:1a:14:18:55:df:
         14:5b:10:2c:b9:dd:fe:23:e2:c4:d2:e7:f9:bf:95:7e:a5:1f:
         f5:81:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:56:46 2024 by rpki-client on console-ams.rpki-client.org