Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File:                     w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier:          2Wq8DstQ4yy7gEb1CxUY54l0N9lYo8rGClDWJAK8uMQ=
Subject key identifier:   18:B5:38:22:47:33:B4:EC:CF:C2:08:0B:7F:97:B5:D1:91:1F:5E:8D
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer:       /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial:       01903AE3BC80BA5ADA365EF21AAF015C0DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number:          11D2
Signing time:             Fri 21 Jun 2024 13:02:01 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:01 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:01 +0000
Files and hashes:         1: BzwkikCVLeNU04wuxHzowiZm6XU.roa (hash: gYtWdeY5ixoC042g4IHXGHMfUgVaUMcDgTEJ+CqrnXA=)
                          2: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: KDIreYQpLFqJJ0D/5FtD//uZzl4Ux10K8nKmcieguwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:bc:80:ba:5a:da:36:5e:f2:1a:af:01:5c:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
        Validity
            Not Before: Jun 21 13:02:01 2024 GMT
            Not After : Jun 22 13:02:01 2024 GMT
        Subject: CN=18b538224733b4eccfc2080b7f97b5d1911f5e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:18:e3:80:6a:73:70:d7:5e:a3:05:04:ae:
                    1e:04:f3:83:0f:34:e9:9e:1b:e8:e2:4d:f6:89:91:
                    99:8f:c2:ed:f2:23:d3:16:cb:a6:64:79:54:2c:11:
                    11:ef:df:42:b9:d4:c6:1a:03:0f:f2:3b:e4:19:1d:
                    6e:4b:35:72:3b:b5:79:54:d5:58:1a:69:b8:0f:b7:
                    8f:8f:dc:c0:52:10:23:1e:49:ba:0d:da:86:4b:2e:
                    dc:46:f7:6b:a6:56:ef:ae:ed:70:21:90:79:75:2a:
                    49:3e:69:a6:d0:cb:0a:9e:63:52:2e:a0:85:7f:d6:
                    be:9f:cb:16:1b:4c:85:cc:7b:38:ee:00:2e:a3:86:
                    45:41:5d:44:aa:de:28:0e:06:88:1d:b6:b4:0a:17:
                    22:ad:d0:a6:31:77:10:cb:fb:20:ea:94:10:d7:ba:
                    28:79:eb:90:16:df:fe:43:87:09:d5:a2:bd:80:66:
                    29:d7:0a:56:e7:2d:3a:32:df:cf:a6:14:af:50:2a:
                    bb:ec:00:b5:d2:f8:d8:d7:8b:e1:a8:d1:9a:c2:ec:
                    4e:c4:ef:68:57:74:84:4d:3a:64:fc:e7:4a:c3:15:
                    9f:b4:53:c8:c7:75:51:e2:03:f4:11:49:3e:2d:ee:
                    c6:83:0c:18:2f:23:5a:21:cc:00:ab:e5:6d:46:f6:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:38:22:47:33:B4:EC:CF:C2:08:0B:7F:97:B5:D1:91:1F:5E:8D
            X509v3 Authority Key Identifier:
                keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:44:a2:ce:34:7f:03:09:e2:49:4a:06:e3:90:fb:73:8c:
         e3:f1:09:8b:08:6e:7b:62:fa:99:9a:f2:99:28:28:4d:4c:2a:
         32:32:c6:35:21:fe:a8:b8:3b:57:91:69:25:9c:a1:9d:41:33:
         5e:2c:99:b2:4f:8c:2f:f1:ce:be:fb:4d:a1:9f:bf:22:8b:97:
         b5:7f:8b:f0:87:79:b4:56:ea:2d:e3:e4:59:c0:c4:1a:41:5c:
         63:92:f1:22:71:f1:d2:16:be:78:2d:f1:17:ce:87:8e:96:a5:
         bc:8f:f5:25:2b:7f:c1:39:75:4b:58:0c:4f:e2:51:40:86:01:
         9a:19:9a:91:9c:33:05:e0:99:d8:b7:e5:61:b2:ea:60:8a:6b:
         86:be:2c:f1:8a:2b:5e:46:d3:84:d2:35:31:49:fa:86:50:dc:
         f5:30:78:61:ad:2d:3c:7e:f8:d9:4e:d5:a3:20:32:08:72:8b:
         26:9d:6a:c1:9d:3c:6e:a0:ba:45:64:ab:5a:93:6b:19:92:3f:
         9f:eb:10:21:ab:bb:47:81:d3:d6:c5:c2:38:a6:e1:48:37:34:
         b8:07:17:96:e0:ce:35:0a:6a:53:24:6e:37:53:fa:6d:3d:e8:
         e9:04:0a:86:10:2c:6c:6c:d9:ba:40:8c:a4:a7:b2:3e:fa:85:
         77:0b:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:44:57 2024 by rpki-client on console-fra.rpki-client.org