Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          /YpVUmb5ZvleVERGTxNHXa/MJT7KlW+OyJm7dDUEl00=
Subject key identifier:   27:E5:2E:92:E2:E0:E6:37:4B:DA:55:0E:14:A1:8B:95:6A:6F:7C:46
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       01901DEBEBBF5F802A1E35360DFADA8E4CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:58 +0000
Files and hashes:         1: 6Y5ZBM-hAiIwryCyGGcxvRj-mfU.roa (hash: dMWRtyVNfg9IHpoRkTYpSLpWscLW042PnLVaxYc/B78=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: LZeJPmizsLK0YsSmBn9ItUER9N1VGyx4W2A9btPWMds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:eb:bf:5f:80:2a:1e:35:36:0d:fa:da:8e:4c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Jun 15 22:01:58 2024 GMT
            Not After : Jun 16 22:01:58 2024 GMT
        Subject: CN=27e52e92e2e0e6374bda550e14a18b956a6f7c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:2e:4a:dc:6e:ce:83:de:67:9a:b5:31:b7:
                    90:de:aa:0b:e5:16:6b:52:7b:bc:ca:43:3b:70:fa:
                    47:3b:f3:30:d2:49:75:e1:d7:5b:b8:3e:8e:5b:0e:
                    07:e3:e3:d6:36:e9:74:e4:80:9b:5a:6c:14:0f:db:
                    15:07:c9:2e:b6:ac:92:bb:4e:dc:4b:dd:a3:cf:64:
                    e0:d3:18:4d:0d:98:10:97:e4:f2:4f:39:e5:38:41:
                    87:41:5f:4c:24:e2:3e:5f:3e:23:66:c9:bf:d5:e6:
                    1d:59:cf:5e:dc:e6:5c:85:6b:72:4b:de:20:1e:e6:
                    00:08:5d:fd:02:30:c1:63:6e:63:c9:cf:10:44:94:
                    d2:e8:0a:42:0b:f0:12:a7:41:d1:e7:42:df:9d:b9:
                    d8:9d:b6:2a:61:ae:70:67:a1:67:fd:79:9d:e2:96:
                    1a:85:9f:48:96:0e:8f:40:97:d0:87:53:e1:26:cb:
                    5f:1a:97:da:8b:e8:23:a4:e2:6e:b1:de:c6:c9:7c:
                    82:0f:3e:cb:a4:25:db:c6:d1:6b:39:45:9e:0c:07:
                    9e:7e:44:4d:4d:1e:9b:62:3a:a2:54:a5:08:4b:86:
                    3b:8a:9f:76:9b:e5:34:63:b4:8c:84:6a:cd:14:5b:
                    b1:22:74:7e:df:5f:50:3c:e2:c2:d1:d2:82:cf:5b:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:2E:92:E2:E0:E6:37:4B:DA:55:0E:14:A1:8B:95:6A:6F:7C:46
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8b:29:2a:d4:3f:89:ec:f6:e1:19:d1:85:c9:52:50:1c:9e:
         dd:ca:a5:68:62:32:d1:9d:8c:31:16:b9:ea:79:ef:13:9a:b3:
         f1:e8:84:2c:e2:dd:fb:42:7b:40:78:cf:97:50:9a:8e:51:e8:
         72:f9:0e:1a:85:3e:24:e1:bc:9e:9e:2a:a2:a5:0a:09:d2:ff:
         e7:fc:3f:ba:e8:ea:d7:93:ed:d9:86:0f:64:5d:38:f0:38:fa:
         52:6e:a9:f6:8d:56:82:25:a8:3e:c7:f4:4c:ec:79:e6:73:fe:
         51:48:60:48:f6:32:a0:00:7d:0a:10:04:ce:4c:98:84:d0:96:
         9e:8a:cc:6d:ba:56:80:23:bb:0c:51:ea:87:af:f2:43:41:b9:
         26:6b:80:98:76:ff:53:1e:f4:1f:e6:68:8d:04:bd:3e:4a:9c:
         49:d2:33:aa:ac:3c:51:47:7f:83:07:be:af:d3:f6:9f:e7:6d:
         5d:11:6c:e9:a2:03:6b:8c:2d:7a:bf:30:4a:27:44:1c:51:f1:
         fd:e9:a9:71:61:92:c4:f8:ab:f1:fc:21:79:a8:b9:18:37:0e:
         89:a0:6a:41:29:8d:98:d8:85:a0:24:5b:ba:39:62:81:8e:6d:
         7f:b7:03:82:7a:c3:3f:32:ef:1f:63:2c:c2:fa:8b:00:df:fc:
         e5:a3:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:02 2024 by rpki-client on console-ams.rpki-client.org