Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
File:                     _waWcZQB67Hdu6mtT7jGbxTvcKU.mft (raw, json)
Hash identifier:          jd7U3NsxRpnRbsi65EH0qwcqkZQu4ewL3xtu4zxzBzQ=
Subject key identifier:   65:01:27:D0:CE:5D:10:A7:4D:C3:0B:95:71:5E:96:DF:D1:7E:66:FF
Authority key identifier: FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
Certificate issuer:       /CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
Certificate serial:       01901BFC4F747F5FADCE1B1E89B5A9712E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
Manifest number:          0656
Signing time:             Sat 15 Jun 2024 13:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:38 +0000
Files and hashes:         1: AOLZSHvfpjhNqjWCSjD0TE9Wufc.roa (hash: /DnyMebhNBpuE58/HwUch9gRC/e2Ly6Ox4udE89hvZ8=)
                          2: _waWcZQB67Hdu6mtT7jGbxTvcKU.crl (hash: su+KzSchsXiGnDFzXWA/mj3pnGx8c+1Uss01LW6EHZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:4f:74:7f:5f:ad:ce:1b:1e:89:b5:a9:71:2e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
        Validity
            Not Before: Jun 15 13:00:38 2024 GMT
            Not After : Jun 16 13:00:38 2024 GMT
        Subject: CN=650127d0ce5d10a74dc30b95715e96dfd17e66ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:03:6a:b3:44:71:d6:33:3a:6e:21:fe:11:
                    e5:63:5b:ba:8b:8e:92:90:51:dc:4d:82:ec:15:76:
                    7d:1f:3d:4b:80:f8:82:84:0f:7d:21:09:5e:56:fb:
                    2b:c2:fc:71:f7:cd:c6:61:09:9f:26:f1:73:e6:f8:
                    4c:1a:1e:38:fb:cd:0c:44:35:d9:f9:fc:33:41:38:
                    df:09:60:36:eb:90:f7:62:f6:ae:92:bb:b6:f8:33:
                    6b:16:53:d6:90:d3:3f:10:6e:ed:54:99:c0:97:05:
                    f0:88:e8:a0:fc:41:a9:95:64:97:73:a9:bf:28:67:
                    75:ce:8e:46:16:42:0e:42:e0:9d:1b:65:a9:72:42:
                    7c:5d:f9:67:2c:ff:f6:8e:68:60:50:7d:86:4b:8b:
                    35:d3:2a:ca:bd:74:ce:29:19:dc:e5:fe:b5:41:d8:
                    82:89:c0:e7:7c:33:2b:f9:e9:ba:d5:57:cd:e1:6d:
                    10:bd:d0:2f:ea:39:27:1d:f9:90:03:91:e8:97:6f:
                    2e:65:99:1a:6c:bf:81:04:42:83:d8:1b:86:22:ff:
                    18:72:2d:7e:a0:cd:bb:7f:61:e4:86:10:b8:11:87:
                    e4:dc:a1:c7:db:19:5a:a2:95:8e:29:c3:47:c9:5b:
                    53:23:de:47:b4:5f:1e:6e:e4:35:cd:9a:b7:d9:80:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:01:27:D0:CE:5D:10:A7:4D:C3:0B:95:71:5E:96:DF:D1:7E:66:FF
            X509v3 Authority Key Identifier:
                keyid:FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:ff:b2:d7:fd:97:06:a1:1b:f0:6f:12:96:0e:93:a2:7f:
         90:d2:24:48:92:f1:47:97:07:d1:97:07:03:4e:d0:9a:6c:ee:
         46:00:b8:9d:92:75:a5:50:c3:ca:84:7a:31:e9:a9:33:7f:71:
         e8:4d:1b:63:4c:92:b2:3e:7d:f3:7f:38:4c:75:22:cd:55:84:
         98:5c:53:6c:b1:e8:e5:96:0d:4b:ea:68:2a:c6:02:3e:43:17:
         d7:3d:3b:03:94:15:f6:4f:8b:94:e5:0e:50:95:ce:e3:81:cb:
         2b:16:9b:53:54:cf:5c:c5:e3:55:13:db:f1:1b:da:68:16:1f:
         9b:38:55:7c:70:11:16:5d:67:59:10:dc:b0:9d:aa:f5:14:3a:
         9b:a5:b5:de:d6:a8:3d:2a:f1:ed:3a:37:8d:dc:8f:47:4b:91:
         6f:13:6a:d9:02:c5:04:5a:2c:43:26:d8:09:15:e7:1a:d2:bf:
         d7:a6:f7:1d:ba:4a:82:e2:f5:c4:af:b2:c1:18:48:d6:16:68:
         c7:aa:61:65:41:b2:17:bd:de:8c:e1:05:b7:e7:9e:2b:ec:0b:
         8f:25:36:20:9e:94:e6:1f:ae:c4:8d:94:3e:c5:e4:04:fe:62:
         8c:b3:a7:3f:9f:b7:b8:f3:e7:30:f2:72:c2:75:6f:67:0f:a6:
         0b:2d:bd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:39 2024 by rpki-client on console-fra.rpki-client.org