Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File:                     Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier:          J73Vl6a+6DoqvfM2G7Gk1PckQWe+MUIjVQoA+0x5Afo=
Subject key identifier:   70:A2:B5:0D:CB:AE:9C:B0:65:DE:EF:23:1C:8F:83:4C:9F:6A:71:70
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer:       /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial:       01901DEB7BC8D53C3961A4817750F509385C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number:          1158
Signing time:             Sat 15 Jun 2024 22:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:30 +0000
Files and hashes:         1: OEcZ9mEmxhfZrA2KKd9v0JfA9Ck.roa (hash: jEuP9ls2WQ2vrKk1BUAIOpeoIjxbbbALNyKp9eKmNZg=)
                          2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: CwuIswNMkT+DzkIk2B3S4h7ACetJ24WH2QZadd9SYe4=)
                          3: cUFvA56f_emCQOO0ZHgoLv6FL1g.roa (hash: 64wBcfmOcDhVdBownilZBKb25aMaD+8uEqjSHQOSWp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:7b:c8:d5:3c:39:61:a4:81:77:50:f5:09:38:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
        Validity
            Not Before: Jun 15 22:01:30 2024 GMT
            Not After : Jun 16 22:01:30 2024 GMT
        Subject: CN=70a2b50dcbae9cb065deef231c8f834c9f6a7170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:79:2d:e4:ff:40:e0:c0:d6:ec:42:2d:bf:
                    ca:8d:55:85:d9:68:50:a4:47:f5:7a:a2:30:f6:73:
                    93:a9:e0:6d:af:88:c8:2c:b7:9c:b8:d4:22:de:f6:
                    58:e6:d9:52:ae:66:aa:44:08:a8:ad:62:ad:53:5f:
                    03:e7:c7:e0:0c:0e:f6:15:9c:bd:45:ba:4e:f5:08:
                    6d:11:de:fa:4c:5f:c5:9e:36:1c:91:5d:cc:a2:76:
                    c3:d1:29:df:55:e5:e6:6c:08:cc:68:c2:cc:1d:ba:
                    3d:8f:24:95:99:c4:f8:de:b2:1e:ce:e2:47:25:03:
                    cd:6b:be:46:62:4d:db:3f:bb:65:44:59:8f:b0:97:
                    38:44:fd:1b:5f:93:2a:03:ef:00:7e:f7:9b:99:84:
                    c8:11:96:d2:8d:13:a0:64:8f:b9:1e:1d:b8:e5:94:
                    1a:69:b3:22:b2:fc:dc:d6:9b:10:09:d0:05:48:f2:
                    dd:89:59:67:38:d3:9b:5b:c4:cc:3f:a1:0f:ef:b7:
                    aa:94:17:a4:05:0c:ff:b1:3e:d4:61:cd:9b:de:ea:
                    57:05:8f:45:aa:9c:d9:9f:b0:4d:ae:ea:84:47:8b:
                    b3:31:5b:af:49:3e:e4:4e:7b:e2:d8:bd:98:a7:00:
                    b7:a6:6e:7f:98:34:44:b7:c8:05:f7:c3:ae:9d:88:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:B5:0D:CB:AE:9C:B0:65:DE:EF:23:1C:8F:83:4C:9F:6A:71:70
            X509v3 Authority Key Identifier:
                keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c3:db:8d:43:b7:14:03:d6:c7:10:1d:51:3c:53:5d:d6:02:
         f1:02:51:c4:33:8f:6a:f0:52:2a:98:27:60:58:1f:58:c3:33:
         89:cb:ea:61:23:cf:d7:ec:59:c2:5c:62:17:85:43:15:99:ef:
         56:62:95:f5:f3:b6:48:b8:89:35:95:62:e3:49:54:47:77:e8:
         41:9c:c1:98:e2:8a:27:ba:18:49:ab:f0:27:fd:e9:f9:67:ea:
         34:9c:fb:52:71:89:7c:3d:a2:1c:6d:49:c1:76:09:c8:12:93:
         69:dd:a8:90:b2:cd:7a:3e:be:8d:a3:a9:d4:4b:6d:66:87:9d:
         39:d3:bc:bd:f8:7d:23:ce:a3:59:2c:c6:b6:03:56:06:fa:12:
         7f:fa:93:70:8e:08:89:75:c0:4c:3c:a8:e8:e7:8d:52:93:a8:
         d8:ea:62:ea:20:6f:44:dd:aa:a5:b4:2b:0b:61:24:f9:76:41:
         69:99:a2:43:3a:44:fc:23:47:b8:ca:35:bd:ce:4c:6e:a6:f3:
         aa:31:fb:29:25:d6:c1:2d:d4:65:18:77:19:4d:81:37:11:61:
         a9:5a:14:81:61:bd:56:41:8b:4c:d3:9c:f3:58:70:3b:2b:ae:
         42:bb:43:6d:a7:ae:9b:91:a6:8d:30:1f:6a:86:38:af:dc:3f:
         20:17:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:41 2024 by rpki-client on console-fra.rpki-client.org