Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File:                     w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier:          fOF53U3yWUsZw1zlq6o4CAHo+zlDrTCej0NDuvAsLFE=
Subject key identifier:   15:BA:11:12:6B:B3:C6:E4:F7:CA:D8:B6:8F:F5:BD:AF:14:D6:AF:42
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer:       /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial:       01901E58FC2528FA81B0A685A32835BA4D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 00:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:06 +0000
Files and hashes:         1: mjK2-IvECOhowGlXUSDOKkzCEq4.roa (hash: WxFNt3K11nwNNWpdxRLmx/DqbpyCRBBnCBRicxiTUKg=)
                          2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: G3cG1/3mBtf91PYDXOeL6jdfZqQsLS2uu+rJF66ukk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:fc:25:28:fa:81:b0:a6:85:a3:28:35:ba:4d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
        Validity
            Not Before: Jun 16 00:01:06 2024 GMT
            Not After : Jun 17 00:01:06 2024 GMT
        Subject: CN=15ba11126bb3c6e4f7cad8b68ff5bdaf14d6af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:9b:d1:e8:d3:93:94:d9:73:80:33:63:af:
                    c0:c4:aa:35:b8:91:11:d0:aa:91:0b:a1:45:6f:ce:
                    0d:23:39:ca:a0:c9:c4:ed:93:c0:12:84:94:14:7e:
                    45:a2:ee:53:7a:18:0e:40:a8:c0:83:e2:a9:14:57:
                    36:ff:45:8a:e7:d9:2c:77:f1:d3:65:46:a7:e0:9d:
                    7b:89:ce:4b:04:9c:57:14:5f:24:4a:0d:9f:07:b2:
                    94:db:b0:60:ab:25:8c:da:88:2d:f6:f0:64:8e:12:
                    82:09:54:4f:59:58:03:23:a5:b0:cd:61:6f:27:22:
                    83:7a:47:4d:52:bf:59:29:5c:61:7f:3c:89:be:23:
                    20:99:aa:ac:91:47:97:d2:ba:c1:15:3e:69:89:7f:
                    e7:8e:d1:96:41:37:d1:a2:4b:98:b3:19:3a:65:2f:
                    58:a9:ed:43:8b:b1:73:52:52:a4:e3:3a:f6:7f:81:
                    79:8d:56:46:79:2b:15:d5:2f:24:f5:c0:15:a7:2d:
                    d2:b5:13:10:8d:9d:05:dc:62:22:c5:25:92:44:e5:
                    98:b9:66:58:42:e5:06:84:51:62:eb:f1:7a:af:fb:
                    fe:52:62:58:07:8d:a2:cc:94:3b:60:48:04:09:9e:
                    12:64:cc:e2:68:91:e5:d7:5b:09:9f:b6:16:af:97:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:11:12:6B:B3:C6:E4:F7:CA:D8:B6:8F:F5:BD:AF:14:D6:AF:42
            X509v3 Authority Key Identifier:
                keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:ea:32:13:e1:1f:a1:32:1b:1d:21:2d:53:17:1a:66:71:
         cc:a6:48:34:bb:5b:f8:ec:7e:56:01:7b:7d:cd:0f:eb:66:c3:
         cd:92:0c:3d:b1:58:e7:69:82:8b:43:22:8c:57:37:59:13:c5:
         a3:c0:6f:ec:bf:04:a1:00:dd:95:ee:f9:5d:f6:24:dd:e5:03:
         bc:bc:6d:22:13:cf:12:8b:02:5c:e4:1f:16:41:87:c1:69:23:
         e5:43:72:b2:33:1e:d5:37:6f:b9:f9:85:2c:72:40:ef:7b:58:
         77:3e:cc:73:6e:78:e2:12:e1:14:4b:f3:c6:0f:f3:7a:fc:83:
         97:91:95:63:f3:65:29:52:75:f5:37:36:e8:a9:27:5b:18:83:
         f1:e1:9c:92:7a:7b:29:6d:de:bc:c8:83:ed:61:a1:73:cf:34:
         11:cf:cc:75:ce:4e:f4:6f:ba:2d:4c:17:c1:16:4e:da:28:d1:
         fc:6c:a5:1b:8b:d3:c9:a6:2c:26:b5:bd:1c:3f:44:37:ee:87:
         71:8d:70:32:2d:8b:a0:4b:13:61:9b:6c:61:ff:68:d9:08:76:
         dd:c0:ec:3d:9c:a1:4c:b8:8e:fe:c8:d4:35:da:27:73:d2:de:
         fa:f8:a2:2f:2d:d6:f5:61:19:6a:2e:4b:49:a5:fa:63:b5:35:
         ed:a6:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:44 2024 by rpki-client on console-fra.rpki-client.org