Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          OQU+oNDgPWBz503w8+4lGcUqm47Mc37k72Wbj+DAC8M=
Subject key identifier:   CF:03:FC:E7:24:8D:D2:81:57:49:A3:FA:3B:90:37:B6:CD:FD:81:A2
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       019048678A48B02CE8C0C43AC5C273B078B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          11DC
Signing time:             Mon 24 Jun 2024 04:01:03 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:03 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:03 +0000
Files and hashes:         1: 6Y5ZBM-hAiIwryCyGGcxvRj-mfU.roa (hash: dMWRtyVNfg9IHpoRkTYpSLpWscLW042PnLVaxYc/B78=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: hBsHgFCjeKBq9WXukafszVo+DzN/6Nsdp1eZLvx+rCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:8a:48:b0:2c:e8:c0:c4:3a:c5:c2:73:b0:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Jun 24 04:01:03 2024 GMT
            Not After : Jun 25 04:01:03 2024 GMT
        Subject: CN=cf03fce7248dd2815749a3fa3b9037b6cdfd81a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:73:3b:94:7f:a5:de:c1:24:59:fb:c6:55:
                    e8:d3:10:1b:6d:ee:c3:21:4f:d1:35:90:41:3f:98:
                    fb:e4:16:23:bb:bf:4e:43:06:1c:c1:a3:c0:82:68:
                    36:e3:d2:00:65:84:38:21:76:ee:ba:3c:29:d8:70:
                    91:7e:4f:a2:62:d9:f6:15:e2:b9:28:d3:c3:4f:15:
                    17:e4:4e:6d:70:7c:f1:80:b6:0c:1a:0a:fc:6a:cd:
                    d4:50:a2:2c:70:82:62:be:bb:32:22:e6:2f:39:ac:
                    69:97:bc:30:84:5c:8a:5d:99:33:1c:4e:19:ec:d5:
                    0b:c5:6b:69:71:dc:bc:ca:e9:d6:68:d1:be:d1:5b:
                    ef:39:26:55:1d:ba:b8:1b:65:b4:15:a9:36:c5:5c:
                    b5:17:7f:af:b9:4f:41:7b:18:44:a7:31:6a:74:90:
                    2c:80:42:71:25:a0:88:eb:05:b4:44:22:97:21:71:
                    7f:22:c7:1f:52:7c:ed:f0:67:f8:42:8a:cb:74:94:
                    41:62:19:b4:e2:2a:13:73:47:e6:a4:1a:73:58:f7:
                    e6:f9:73:26:82:78:f9:e8:12:f7:59:6f:11:cb:e8:
                    15:92:66:95:86:08:f9:76:24:d8:14:2b:cb:bc:83:
                    71:3f:2f:92:86:8c:e8:a9:f9:ed:28:a8:85:14:a2:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:FC:E7:24:8D:D2:81:57:49:A3:FA:3B:90:37:B6:CD:FD:81:A2
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:83:e8:77:92:c2:65:2e:6d:c2:e5:ab:26:ed:39:1e:69:
         fd:88:ed:34:8e:6a:ae:ed:21:4a:a5:5e:21:e5:be:40:ab:f3:
         74:67:8f:8c:ea:77:71:9f:3b:97:50:6d:94:b8:6e:55:a2:71:
         df:05:b7:2d:a0:9b:ba:38:07:b7:75:ef:95:93:7e:7d:00:a2:
         b1:64:97:02:18:b4:36:c3:29:1e:64:c4:35:b3:85:32:58:0b:
         c3:c3:ca:a7:65:56:72:66:25:d1:ef:f1:09:cb:f7:2d:4e:45:
         71:cc:ea:5f:82:45:1e:88:9d:46:a5:af:e3:92:be:30:95:fa:
         21:09:b5:f4:38:5b:71:cb:40:3a:2a:de:e4:cf:e9:b2:f0:cc:
         57:de:64:11:29:92:76:4a:41:0b:7a:65:24:bd:02:27:38:82:
         9c:85:6d:a8:c2:de:80:93:99:5c:24:3f:f3:12:4a:b8:15:99:
         25:e5:ab:f6:57:dd:b1:2e:a5:f1:93:8c:a8:a0:27:21:4f:41:
         50:1d:c8:78:db:3b:6d:33:37:62:df:ba:27:15:4f:c0:f8:ac:
         d9:f2:77:78:63:55:b7:21:c7:53:86:d7:04:a5:b1:81:eb:bf:
         b7:f9:9f:75:c2:7c:3b:77:88:cf:e4:68:36:89:50:a6:b5:7f:
         3d:11:c5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIZ4pIsCzowMQ6xcJzsHixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjQwNjI0MDQwMTAzWhcNMjQwNjI1MDQwMTAzWjAzMTEwLwYDVQQD
EyhjZjAzZmNlNzI0OGRkMjgxNTc0OWEzZmEzYjkwMzdiNmNkZmQ4MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/pzO5R/pd7BJFn7xlXo0xAbbe7D
IU/RNZBBP5j75BYju79OQwYcwaPAgmg249IAZYQ4IXbuujwp2HCRfk+iYtn2FeK5
KNPDTxUX5E5tcHzxgLYMGgr8as3UUKIscIJivrsyIuYvOaxpl7wwhFyKXZkzHE4Z
7NULxWtpcdy8yunWaNG+0VvvOSZVHbq4G2W0Fak2xVy1F3+vuU9BexhEpzFqdJAs
gEJxJaCI6wW0RCKXIXF/IscfUnzt8Gf4QorLdJRBYhm04ioTc0fmpBpzWPfm+XMm
gnj56BL3WW8Ry+gVkmaVhgj5diTYFCvLvINxPy+ShozoqfntKKiFFKIWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8D/OckjdKBV0mj+juQN7bN/YGiMB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZ6D6HeS
wmUubcLlqybtOR5p/YjtNI5qru0hSqVeIeW+QKvzdGePjOp3cZ87l1BtlLhuVaJx
3wW3LaCbujgHt3XvlZN+fQCisWSXAhi0NsMpHmTENbOFMlgLw8PKp2VWcmYl0e/x
Ccv3LU5FcczqX4JFHoidRqWv45K+MJX6IQm19DhbcctAOire5M/psvDMV95kESmS
dkpBC3plJL0CJziCnIVtqMLegJOZXCQ/8xJKuBWZJeWr9lfdsS6l8ZOMqKAnIU9B
UB3IeNs7bTM3Yt+6JxVPwPis2fJ3eGNVtyHHU4bXBKWxgeu/t/mfdcJ8O3eIz+Ro
NolQprV/PRHFxQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:54:51 2024 by rpki-client on console-fra.rpki-client.org