Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File:                     sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier:          GFs/TvMTndOjSdRD/ohTtdKClzaPST51anU9fzNS/8I=
Subject key identifier:   F4:A0:FD:41:8B:CA:C5:53:0C:EB:20:F5:FE:B9:B8:A5:CD:8B:8D:7A
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer:       /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial:       0190459D2E7976119C9333E357107D6BF4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number:          0559
Signing time:             Sun 23 Jun 2024 15:00:47 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:47 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:47 +0000
Files and hashes:         1: J0_hF2fSBiJ2V4NdI9p9ggToGbo.roa (hash: lSPil0tKXh6t2FTQ6q4lnIHRiaWn3KGT5uhqqSZivwE=)
                          2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: MwzmFVbUkR9BKtOlf50YRsIGZGA6npgMK40N4XEawQc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:2e:79:76:11:9c:93:33:e3:57:10:7d:6b:f4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
        Validity
            Not Before: Jun 23 15:00:47 2024 GMT
            Not After : Jun 24 15:00:47 2024 GMT
        Subject: CN=f4a0fd418bcac5530ceb20f5feb9b8a5cd8b8d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:8c:13:0f:86:7b:a2:61:7d:34:77:5e:04:
                    8d:f5:80:ef:cf:ff:e1:45:e0:e3:86:b2:0d:cc:2d:
                    2d:62:71:b7:24:03:e4:7d:09:e9:7a:e9:33:34:db:
                    2e:b4:e6:96:ba:1f:19:44:09:aa:8e:d2:f6:2f:af:
                    aa:86:aa:6d:b9:ee:3d:dc:7f:dd:f6:8e:e0:80:aa:
                    8c:04:6c:a2:ff:51:0e:79:b9:33:b6:35:05:9d:72:
                    d7:97:5b:6e:a8:8c:1b:1b:64:6f:2f:8d:c1:24:3b:
                    c7:fe:b3:02:17:c4:03:d9:63:5f:f3:05:bd:1e:86:
                    bd:7d:e4:85:18:41:fb:6b:b8:79:2e:29:e4:5f:d4:
                    95:b2:5e:35:51:64:a3:7a:70:ac:58:59:2d:ca:02:
                    09:aa:a5:b1:d2:88:bf:20:e1:48:54:79:d4:e2:a6:
                    2e:d0:d7:65:ba:79:cf:18:50:3a:10:c3:60:61:4f:
                    48:7c:d8:9f:26:79:1e:bb:9e:4f:3d:14:8e:20:4d:
                    6f:f0:e3:eb:fa:e2:a4:2d:59:50:a2:57:ce:98:76:
                    12:d9:d4:51:49:7a:c8:09:65:bc:40:60:58:c3:0d:
                    57:34:a2:a4:3b:f5:da:33:97:bf:04:8a:cb:83:11:
                    12:a3:ec:b8:8f:a1:fb:bb:82:71:7b:2a:81:61:8d:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:FD:41:8B:CA:C5:53:0C:EB:20:F5:FE:B9:B8:A5:CD:8B:8D:7A
            X509v3 Authority Key Identifier:
                keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:b0:d8:b9:c1:24:94:72:d4:92:10:64:23:43:1e:f2:c7:
         9b:dd:2a:35:07:49:64:b7:f3:29:c4:82:6e:a2:6c:55:15:a9:
         f0:0b:45:af:51:cc:c2:1b:d3:c6:ac:00:f8:11:f8:c0:f5:fd:
         ff:e3:11:27:6e:25:40:ec:2d:93:25:32:cd:78:a2:6e:42:a8:
         da:8a:20:5e:a0:2d:40:ee:07:2d:c0:12:55:57:de:be:2d:21:
         aa:e2:7c:7a:93:18:d6:1a:07:e4:cc:76:7e:a2:13:26:25:6b:
         7a:c3:d7:52:8c:c0:6a:7f:7f:fb:d1:e4:11:4c:e4:1d:c2:58:
         d7:d8:5d:3f:44:c3:4b:ef:09:96:ad:84:2f:ad:b5:05:1a:11:
         ee:90:24:bd:22:6d:84:5b:b9:84:31:ad:c5:04:c0:a2:06:9d:
         fb:31:72:cd:55:df:1b:8f:da:92:fa:24:3f:60:21:0f:7d:b9:
         fc:a8:b3:b1:94:fa:fc:36:2e:77:9b:5f:a2:d5:aa:87:7d:e9:
         ad:12:27:20:db:a7:62:e3:44:d1:6e:6c:02:3c:d1:07:89:21:
         ef:fd:b6:44:f2:6d:ed:f5:99:44:13:89:be:0f:f8:22:ca:19:
         8d:9e:ae:4e:da:51:66:fc:d2:bb:f0:18:4c:4d:30:01:91:4d:
         01:f3:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:23:06 2024 by rpki-client on console-fra.rpki-client.org