Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
File:                     WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft (raw, json)
Hash identifier:          KiFVIyD5P2WwJPodMIgq/2yRvoV3rM8RKGhJ7pUEwtw=
Subject key identifier:   D1:DA:BE:5C:93:86:20:47:29:9D:14:28:AD:9A:E8:9F:17:69:BD:F8
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Certificate issuer:       /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial:       01901E8FC1E6CE613B4A43257C0EEDAEBCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
Manifest number:          0261
Signing time:             Sun 16 Jun 2024 01:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:56 +0000
Files and hashes:         1: WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl (hash: RCq3GPFtA81eFcPXICtc3lguuokJ0an8WvdbOYMCnM0=)
                          2: qjGUPXc_PEeELmkdntoQg5QskLs.roa (hash: 9oI4kftv9JEIB3aby9ZD6p11JSOKtfj7BLjPTZ7ve90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c1:e6:ce:61:3b:4a:43:25:7c:0e:ed:ae:bc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
        Validity
            Not Before: Jun 16 01:00:56 2024 GMT
            Not After : Jun 17 01:00:56 2024 GMT
        Subject: CN=d1dabe5c93862047299d1428ad9ae89f1769bdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:a8:8e:5b:ab:bc:61:e4:ce:74:18:4c:d3:
                    49:5c:e1:45:12:f6:b1:27:aa:63:2e:d2:86:2b:5c:
                    48:a1:6b:a7:ce:85:80:e2:9c:66:3b:77:30:03:a2:
                    06:23:b6:61:c5:f8:08:01:7c:e6:6d:b4:91:26:c1:
                    6f:32:63:49:ca:94:1a:93:f1:da:5b:8b:f5:fb:2b:
                    17:96:20:e8:a9:89:49:85:83:07:71:3a:9e:bc:89:
                    6e:9c:00:01:1e:15:e1:bc:5c:75:ab:a4:06:34:db:
                    c5:39:b2:19:3b:b2:70:89:5d:e4:ef:59:e3:f4:d3:
                    6d:76:94:b9:19:2a:cc:49:0c:1f:b6:f2:a7:f8:c1:
                    2a:23:48:5f:7b:57:9d:ed:db:af:53:e6:08:21:24:
                    d3:34:fd:9d:d6:96:a0:49:6a:d7:31:5d:ee:9f:ef:
                    7f:e6:dc:96:84:50:5d:2c:b5:1f:ad:ee:b7:35:48:
                    94:07:ef:4b:b4:df:5f:6a:50:6e:b3:9d:72:c0:90:
                    4b:1c:8e:da:83:3c:4e:cc:2b:2b:b7:53:c2:19:a0:
                    fc:bc:13:d9:c5:95:e2:a4:26:41:28:3c:4e:5a:79:
                    fd:bd:06:f5:b7:c5:37:ce:d1:45:cf:cb:5c:ba:58:
                    11:ac:c3:fe:99:61:5d:1c:8e:3a:b3:70:ab:1b:3c:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:BE:5C:93:86:20:47:29:9D:14:28:AD:9A:E8:9F:17:69:BD:F8
            X509v3 Authority Key Identifier:
                keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d4:77:e7:92:6d:b1:60:e0:a4:d6:ee:25:b0:3c:e6:5b:7e:
         33:1e:32:f4:36:71:ab:40:1d:bd:b9:27:a3:b0:5e:06:00:cd:
         2d:f3:a9:ca:a9:38:66:d4:fb:e9:2a:00:e6:c4:23:54:a9:06:
         1c:06:8c:71:92:e8:e8:b0:ae:99:79:3c:da:1a:12:ba:d1:19:
         44:48:dd:2c:8e:6c:52:e9:96:41:07:69:7c:aa:24:a9:ae:3c:
         b3:b3:01:c0:83:f4:cc:88:21:4e:b3:ce:d1:53:67:89:13:66:
         f7:dc:ea:cd:3e:75:fc:bd:b7:eb:8c:eb:43:11:31:d9:24:42:
         62:23:24:b5:7a:90:71:6b:91:54:a5:3e:6c:ed:5b:91:98:1e:
         08:59:ec:4a:7d:a2:a5:66:55:7b:5f:61:af:8f:2f:95:83:8f:
         f7:60:3f:25:15:81:31:a3:e0:42:6c:4b:8a:1e:1a:e3:9a:57:
         68:db:61:da:04:d3:31:9a:17:af:47:8e:75:44:12:1f:16:29:
         ce:e6:ee:d0:9c:a4:95:1d:b8:ed:3c:59:42:77:19:59:f6:d4:
         f7:af:9b:2a:25:b6:74:13:cf:1a:50:af:3f:83:bf:cc:5e:c9:
         b4:8e:de:05:67:3c:54:9d:d7:70:f6:44:91:8b:c3:85:16:8f:
         e9:4e:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:27 2024 by rpki-client on console-fra.rpki-client.org