Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File:                     wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier:          oNWBXzJ+/8loh1dbJ8uFFqMdfqrMiK8rGLXlcq+seec=
Subject key identifier:   94:3F:C4:FA:31:03:AB:8D:A1:AA:38:C3:BB:C6:82:0B:C6:8C:73:9A
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer:       /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial:       0190459D703C4922EA8EF634173018188E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 15:01:04 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:04 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:04 +0000
Files and hashes:         1: v-drQGJ-UzsJeg89CMZ9ivRZc1A.roa (hash: r/pmXt+NZSBmvcj5hXfd+/LzBq7Ccn/Ayqp/NKxoEuw=)
                          2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: NPsSHQQMdtGRzRUCzqq5iEdWTQvvwpYMfayi0fulTvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:70:3c:49:22:ea:8e:f6:34:17:30:18:18:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
        Validity
            Not Before: Jun 23 15:01:04 2024 GMT
            Not After : Jun 24 15:01:04 2024 GMT
        Subject: CN=943fc4fa3103ab8da1aa38c3bbc6820bc68c739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:35:34:88:3c:af:1e:ec:0b:77:95:e5:4c:
                    2a:8d:46:7e:cf:d2:25:48:3b:78:9e:3e:3e:c9:02:
                    ec:28:38:f8:13:ca:ac:89:52:20:a2:28:1f:1f:83:
                    8b:15:b8:2c:56:43:de:dc:c1:70:24:d3:92:43:2c:
                    3f:44:b3:6a:5b:3e:5d:73:a3:cf:84:e5:23:2f:9f:
                    93:39:df:b2:5a:a6:60:1e:92:33:62:5a:d3:7c:39:
                    51:1c:0b:af:6a:e7:7c:60:33:2c:37:5b:98:c0:ba:
                    02:ec:22:43:44:80:fe:70:90:1f:27:a1:7f:81:2b:
                    be:03:70:b5:17:40:2c:98:78:d8:b7:fd:6e:71:78:
                    fa:84:3d:b4:ab:0a:c4:6b:f7:59:09:ea:2d:b9:47:
                    dd:aa:06:4b:eb:00:df:3a:83:af:6d:84:59:19:75:
                    95:ce:2c:56:81:6d:b0:7b:38:e7:1c:8b:37:01:7d:
                    ab:46:b9:fd:21:02:4d:23:6c:73:5b:30:eb:f7:90:
                    53:2a:66:03:d3:a0:1e:da:51:17:93:b6:c2:45:dd:
                    4e:ac:f1:de:ef:6e:b2:e5:41:0c:a3:dc:81:3d:b5:
                    37:93:67:66:75:84:93:bb:83:47:49:e1:b8:c9:09:
                    35:70:93:fc:54:e7:b4:37:cc:fc:28:ce:96:18:e6:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:C4:FA:31:03:AB:8D:A1:AA:38:C3:BB:C6:82:0B:C6:8C:73:9A
            X509v3 Authority Key Identifier:
                keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:3e:34:c4:3b:5b:8e:2c:45:9b:56:55:ae:fd:dd:a1:70:
         bd:f4:4c:4a:17:1b:80:d3:0d:df:c3:49:6e:b8:2f:26:5a:2a:
         81:82:5d:aa:ab:bd:97:3e:07:7b:6a:82:20:f3:11:f5:2c:98:
         c2:31:29:d8:59:12:e4:57:5f:f5:45:28:1f:43:f6:63:45:2b:
         13:04:51:22:a2:37:12:f3:e5:cd:47:a3:4d:c5:f2:26:6f:97:
         af:f9:fc:d6:16:02:84:71:70:58:35:17:f4:43:a5:bd:ef:cb:
         4d:d3:84:52:bb:9b:26:18:6d:5a:cc:49:a7:7a:b5:82:1c:28:
         e0:65:85:cd:0e:29:7f:f7:4b:fc:85:47:e5:9a:cd:bb:d2:a3:
         30:a1:90:32:af:07:98:6e:e5:6a:cf:dc:29:9b:2b:71:2f:53:
         cf:7f:b9:1f:38:6b:f0:d8:ce:1f:55:6e:30:9a:c3:dd:52:4b:
         3c:3d:f5:67:73:9e:1f:d9:c8:98:fe:6b:67:c1:ba:6e:fb:2d:
         75:b3:71:29:d2:b8:6d:8f:a5:eb:8d:56:2d:31:ce:df:d7:05:
         9d:89:e1:a2:1f:48:10:72:77:fc:f2:0f:aa:6a:40:2b:cd:d9:
         3e:13:3c:8f:53:51:a9:08:23:c3:03:31:f5:0d:a1:74:35:36:
         90:a3:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:11:46 2024 by rpki-client on console-fra.rpki-client.org