Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File:                     WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier:          NfK3YLmK029rMs+csKEAWuskAK1DmIxRXkinf3fjN1o=
Subject key identifier:   30:77:CE:1D:95:C5:D9:E9:BF:FC:D1:55:7F:9D:0C:40:6C:97:6B:0E
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer:       /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial:       01901DEC253A1A21727CD15D6F827EEAB3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number:          071E
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: 1-DjR6uHroKUjdKjtQ4TurZZRNJw.roa (hash: QQfKHQLKnUgeRhE462efgzBisElj/Hz/hUyK1peTFEQ=)
                          2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: NAO6oDSJxnp9+Z1SqBCPc2AEjDdny0X8btv0sSMgnhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:25:3a:1a:21:72:7c:d1:5d:6f:82:7e:ea:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=3077ce1d95c5d9e9bffcd1557f9d0c406c976b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:07:dc:a6:85:ae:97:d1:96:41:a0:0f:dd:
                    6b:74:76:2b:6e:65:5b:ac:8d:fb:dd:3c:4f:58:ab:
                    28:dd:cd:79:d5:7e:0d:aa:f2:33:ac:0d:14:fd:12:
                    b2:e6:b6:8e:35:c1:20:71:d9:51:61:0e:3c:79:6b:
                    c5:19:8c:95:b9:e2:e7:67:35:55:77:04:05:0f:7f:
                    a0:c0:d2:9e:4f:5d:3e:ec:eb:e7:db:a2:c9:8f:7a:
                    db:cd:66:f6:c9:16:2d:ec:f9:d8:df:d4:a4:2b:01:
                    1f:67:80:6f:05:11:07:09:f6:bd:11:8e:64:d5:91:
                    fa:21:a0:35:15:a1:ca:38:01:d7:69:d0:f6:cb:cd:
                    59:f8:ee:fb:c5:a8:f3:a1:8a:c0:25:ce:40:7a:f7:
                    42:e6:eb:90:30:97:68:0a:13:9a:8c:42:37:94:e4:
                    08:03:c5:9e:76:a6:0c:03:ed:8b:17:71:43:2b:45:
                    b7:80:5b:24:29:b8:6e:ab:36:dd:2d:e4:3a:64:19:
                    e2:91:06:7f:1e:5c:20:79:fc:01:a5:95:0b:d6:31:
                    6f:48:a6:d8:10:37:a4:12:5e:54:8a:54:e5:39:c7:
                    e5:3e:e8:f9:8e:61:64:a9:af:ae:9c:43:01:eb:1d:
                    71:89:ba:85:19:85:0b:63:e5:0e:32:32:a7:f4:b5:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:CE:1D:95:C5:D9:E9:BF:FC:D1:55:7F:9D:0C:40:6C:97:6B:0E
            X509v3 Authority Key Identifier:
                keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:c3:4d:4c:70:a4:43:e2:97:08:9d:3e:b9:f3:8b:b6:ee:
         2b:f9:12:c7:d4:fb:b8:f1:6e:e1:78:55:5b:57:bd:4a:6a:fb:
         37:72:5d:5b:9f:f4:00:b7:e6:ca:ce:36:5b:6f:e0:53:2f:e8:
         c0:69:b0:41:03:97:4c:c2:77:f3:9e:73:ac:9a:ea:51:a4:e3:
         d0:16:71:94:f1:54:68:dc:2d:6e:ea:6d:94:62:c0:b6:65:d3:
         20:2d:89:55:7f:ff:d2:29:1f:51:70:b8:79:9c:91:73:9d:5f:
         0b:9e:7e:dd:07:1d:66:c5:8b:33:e8:e3:80:13:48:c7:04:d3:
         14:1a:d4:65:c0:a8:4d:30:d4:6a:0c:d0:2c:25:82:a8:a6:c4:
         57:21:ae:43:5c:f2:3c:61:9f:02:dd:d5:59:db:96:72:b9:3c:
         7e:0a:f9:70:ad:36:23:d4:cc:3e:2b:1c:1e:90:4c:c8:29:cc:
         d9:80:ca:a5:71:14:74:f4:37:d6:53:0a:50:48:9f:1a:f4:57:
         b0:8e:ac:2f:9f:fd:a5:5b:15:ea:65:e9:b1:27:3d:b9:39:fb:
         a3:c5:79:43:5c:6b:21:91:15:e9:48:a5:fa:37:0a:ff:c7:24:
         ce:bd:ca:05:29:04:5e:08:69:d8:ae:d7:35:ab:ed:99:b7:96:
         ec:02:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:01 2024 by rpki-client on console-ams.rpki-client.org