Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File:                     Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier:          ll3Tk6qWSCdC7WXodwlnmODjd2ePh7msrIXPDXFDofQ=
Subject key identifier:   8B:75:2E:1E:EE:52:09:78:46:1C:D1:AA:3E:5A:82:6D:82:D6:29:9C
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer:       /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial:       01903AE5303950F83D1D7F10277B149B800B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number:          11B2
Signing time:             Fri 21 Jun 2024 13:03:36 +0000
Manifest this update:     Fri 21 Jun 2024 13:03:36 +0000
Manifest next update:     Sat 22 Jun 2024 13:03:36 +0000
Files and hashes:         1: ARLasIxVIhIljMhjctHQtARNs1g.roa (hash: rm7ZBECrET+r8wdWNgH74Qy9rzRwZ6qyqg7lr5XFDss=)
                          2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: 05GczLJNeMBEW4XLU7nsXSItld5315T8Cy4UuGEMVps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e5:30:39:50:f8:3d:1d:7f:10:27:7b:14:9b:80:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
        Validity
            Not Before: Jun 21 13:03:36 2024 GMT
            Not After : Jun 22 13:03:36 2024 GMT
        Subject: CN=8b752e1eee520978461cd1aa3e5a826d82d6299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:1d:cd:53:05:0f:94:72:ef:a3:18:53:eb:
                    da:d5:6b:17:a4:89:bf:f1:b4:68:90:c3:19:70:c7:
                    8b:14:b2:f2:55:cb:81:75:9e:c1:50:d6:23:6b:55:
                    bc:54:ca:13:11:8f:92:d9:2e:68:f7:77:a0:03:bc:
                    29:98:48:cb:ff:f8:a8:4b:51:c7:ea:01:83:b6:23:
                    80:37:23:29:d8:6b:3a:16:8b:e6:fe:1e:4e:d8:94:
                    63:56:69:73:15:5e:2d:3e:2a:c3:d4:63:2f:28:4c:
                    57:f8:e3:5a:0f:97:b6:b2:2a:26:e7:0d:94:4f:17:
                    7d:d8:06:88:92:0c:21:e2:d0:48:19:d2:00:01:6b:
                    15:29:d7:fc:f9:46:30:2f:d4:a2:79:20:6f:36:33:
                    4a:0c:27:ad:ab:67:0f:92:4c:21:b6:b3:8c:c1:d3:
                    56:9b:4d:e3:13:18:6e:ae:52:04:ed:cc:83:6b:9f:
                    25:70:5a:a8:a9:eb:90:3a:c2:ec:0c:12:45:f6:09:
                    eb:b5:42:88:8c:d8:4a:d4:0c:92:6d:ef:0d:3b:b7:
                    8c:a5:5e:0e:12:7a:75:ad:ad:f2:57:76:e8:be:aa:
                    63:cd:b4:cb:a6:d7:56:2c:62:e1:a9:87:35:5f:27:
                    9e:fb:18:a8:06:4d:63:7e:11:cb:d7:fc:27:6d:13:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:75:2E:1E:EE:52:09:78:46:1C:D1:AA:3E:5A:82:6D:82:D6:29:9C
            X509v3 Authority Key Identifier:
                keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a2:e3:66:fc:96:6a:68:5e:6a:31:91:f7:b3:82:92:b3:e5:
         9e:57:78:08:fc:45:68:41:a5:15:bc:3b:b3:68:d2:c3:26:97:
         77:d0:71:e9:05:d7:29:6c:f0:41:44:71:2e:6b:e4:d1:5d:5a:
         9a:ba:ec:05:cb:14:b3:14:4a:d6:18:4d:b3:70:11:2c:9d:f2:
         0d:fa:4e:3d:b9:c5:54:7d:ca:0f:2e:37:0a:09:a0:8b:49:f1:
         a2:4e:9d:b6:97:4c:56:91:b4:5b:5b:91:cd:67:f2:63:78:fb:
         2c:a3:30:dd:6f:f6:ba:e6:08:35:c3:e3:91:79:ad:65:4e:e7:
         82:4e:a1:0d:e2:89:9f:ad:4e:31:ee:9a:90:7f:f8:9b:09:85:
         05:ee:37:e7:4f:24:cb:4f:f8:9e:d5:04:ae:c2:9d:e7:cf:3b:
         3b:de:84:55:f4:63:50:22:ca:e1:74:d4:cd:1d:a5:ca:c9:0f:
         58:e5:54:fb:ee:83:51:c2:91:0c:75:da:bc:87:7a:56:9f:3f:
         3b:1a:ff:bc:8b:1e:62:e2:93:ad:ed:b7:08:8c:16:8a:58:c7:
         7e:18:3f:0b:a3:99:42:12:16:51:b2:a5:a3:52:ad:06:f1:5f:
         48:95:e3:91:33:cc:f3:d3:1a:6f:d5:6b:65:54:68:f8:c4:4f:
         6d:f1:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:48:28 2024 by rpki-client on console-fra.rpki-client.org