Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          GWLSq0MPFn66qHieJBeOUnuPkN9eMsPCcRFZFDUlg0k=
Subject key identifier:   DF:3D:6D:C1:BD:03:F5:2B:CD:57:F2:8C:56:79:C0:E5:4D:BE:86:5B
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       01901BFED96F8CE5C5EF04B7C45B8F53F808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          0E1C
Signing time:             Sat 15 Jun 2024 13:03:24 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:24 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:24 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: /qT5nzYr8poOC+jOaIdRoT6/wlo2zP1LWQ4LjfJglqc=)
                          2: 3uMPw4QzcsJnWnl7S7T4FI18XI4.roa (hash: jUPZTGddgxdT5pxuaWIzMy/7LuJSPXtRCgLrJxcYVuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:d9:6f:8c:e5:c5:ef:04:b7:c4:5b:8f:53:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: Jun 15 13:03:24 2024 GMT
            Not After : Jun 16 13:03:24 2024 GMT
        Subject: CN=df3d6dc1bd03f52bcd57f28c5679c0e54dbe865b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:bb:5d:b4:e6:e6:e2:cf:50:93:9d:2f:74:
                    9b:f6:7c:c0:7a:df:d6:0e:f5:e5:e9:b5:11:65:8d:
                    0b:e4:da:c3:2a:a9:9d:94:6f:ef:fa:49:9b:c4:ff:
                    e2:67:66:e6:77:10:92:86:0e:1e:1a:f0:eb:84:70:
                    67:4c:5a:83:0d:40:20:1e:75:0b:88:d8:ae:9e:6e:
                    7f:81:bf:80:2e:97:6e:1c:ca:0d:a1:ea:3a:89:15:
                    d8:3e:48:f9:1a:2f:2c:c8:62:66:78:4b:c5:b3:88:
                    46:11:b2:d2:f5:ba:8a:b5:bd:5d:23:5c:c9:b7:38:
                    37:2a:d0:48:f2:e2:2a:c0:d6:b8:56:d6:2c:4d:49:
                    09:7a:c7:f4:03:83:3d:5e:1e:4a:3e:49:12:af:52:
                    79:37:66:50:97:d8:62:ed:45:41:7e:05:73:c4:31:
                    62:55:45:29:a1:05:fc:b0:41:48:ad:ed:01:5f:46:
                    02:48:c3:0d:fc:d7:68:6b:ae:88:15:99:46:d8:d7:
                    53:0b:bb:e2:5b:ad:a9:86:68:63:6d:d6:e9:ce:84:
                    88:69:3e:76:ae:eb:49:ac:8b:e3:3c:48:e8:90:80:
                    9d:10:2d:85:b8:38:07:23:c5:2e:c5:ce:f2:a8:08:
                    b3:b3:b7:49:28:10:87:fe:ef:92:b8:2c:6d:09:26:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3D:6D:C1:BD:03:F5:2B:CD:57:F2:8C:56:79:C0:E5:4D:BE:86:5B
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:a6:37:20:b0:13:2f:ab:0f:a6:df:a5:9f:ce:7f:64:74:
         8a:73:d1:6d:63:1e:c7:f6:c2:f8:cf:ae:8f:ab:cd:51:5a:cb:
         23:93:84:d6:c3:59:ba:fa:67:4b:61:a6:b7:1d:89:8b:e1:d6:
         b1:54:1a:cd:6d:4e:82:fb:dc:29:67:a9:b9:1b:56:f0:f3:e8:
         7e:f0:7a:53:01:91:ad:21:a8:06:37:b7:3f:41:d7:66:5e:2e:
         09:1f:4b:22:9d:50:7d:d0:3e:cf:43:30:99:92:6f:a1:d1:80:
         3b:b9:4d:7b:d2:14:68:d6:56:7e:40:96:be:dd:89:84:02:46:
         04:45:43:1a:a4:8f:50:02:b4:e3:a9:bc:be:68:e5:c3:a3:60:
         8f:54:64:1f:e9:3e:00:9e:be:e6:8d:75:d2:51:56:5c:3f:85:
         28:3f:e9:72:88:ad:8f:b2:75:42:bb:06:9b:40:d2:d4:c4:c0:
         b8:15:5c:bd:d2:ca:cb:9c:5d:bd:74:6b:1a:b1:4f:79:31:ae:
         e4:5b:7e:b8:a9:56:64:5e:52:07:81:97:33:80:07:7e:4d:f6:
         9d:df:52:cd:3d:a6:96:43:7b:a9:19:ce:2d:6a:ee:e6:b9:6f:
         2a:b0:3a:a6:e1:f3:41:28:88:f4:a9:b0:87:13:d5:5f:41:6f:
         c2:38:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:27:11 2024 by rpki-client on console-fra.rpki-client.org