Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File:                     WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier:          XksrcwtJBSdDvCALBc2dY2OlefD8Gvm48Hf7X3xrU/0=
Subject key identifier:   38:6E:47:E7:02:C6:88:FC:16:1A:DB:22:E1:B8:E1:AB:56:B1:32:5C
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       019045D4055D9D1306CC801E0A4C9A3AAC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number:          108F
Signing time:             Sun 23 Jun 2024 16:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:40 +0000
Files and hashes:         1: 8fG3A8YqFIQ3Slsjxq2MSbjhzoQ.roa (hash: SuVsmLr1Zw7GxbYWnfcz13b6keFMx+YVI2JysvBfnoA=)
                          2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: mmEB/CbNK6+sxJ7h9ZSebXCxaIYFgOi0m49JiKK5lp8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:05:5d:9d:13:06:cc:80:1e:0a:4c:9a:3a:ac:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: Jun 23 16:00:40 2024 GMT
            Not After : Jun 24 16:00:40 2024 GMT
        Subject: CN=386e47e702c688fc161adb22e1b8e1ab56b1325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:3c:a4:1a:b8:90:fb:a6:c8:da:ba:fe:c2:
                    44:a8:a9:f7:b1:e2:80:f9:52:9a:8d:c1:6d:58:40:
                    35:fd:61:fe:16:ba:eb:23:a1:23:1f:98:19:a9:e6:
                    84:c0:6b:53:4d:a5:59:ec:e1:69:8f:2c:9c:9d:e8:
                    c6:cc:69:bd:83:9f:03:21:a3:67:0d:da:f5:7c:58:
                    e3:d7:b3:9a:30:ae:a2:4b:05:c0:9d:e8:c0:6e:24:
                    64:65:4f:30:7c:c6:d0:b9:e1:09:c9:df:1e:06:de:
                    f7:2b:86:27:e2:58:04:af:dd:8f:38:3f:38:bd:54:
                    12:17:d4:87:f0:d5:f8:75:d5:94:03:93:4b:54:b9:
                    78:31:34:c8:8a:0f:23:e5:9f:ff:69:fc:85:00:d5:
                    f5:10:35:cc:d6:ab:e0:54:0e:08:e2:8a:21:69:47:
                    64:b7:61:b5:41:56:10:f3:7f:5b:3c:68:e7:a3:9c:
                    45:ec:47:31:07:dd:8a:4e:0e:f8:d0:cf:e1:08:71:
                    76:2d:54:dd:80:ed:24:6d:04:2c:01:73:86:55:b4:
                    59:9a:6a:3a:c3:de:2e:4f:9c:46:4d:39:0a:79:1c:
                    8e:33:39:2a:32:31:3d:bb:b9:ac:94:f6:f3:d1:13:
                    e2:ba:13:42:16:2b:60:dc:2e:96:76:0a:43:1f:29:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6E:47:E7:02:C6:88:FC:16:1A:DB:22:E1:B8:E1:AB:56:B1:32:5C
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:10:ad:b0:ab:c6:73:27:38:f4:69:4c:05:1a:7e:dd:13:
         b2:b8:64:dd:02:cf:c6:e4:57:fc:52:96:c5:71:f7:bf:84:87:
         15:fe:9b:73:c9:9b:86:87:38:0c:15:e8:76:e3:76:1e:79:47:
         7f:1f:08:a5:07:12:65:27:2f:6e:7b:6c:6b:c8:0b:f3:92:77:
         fe:29:07:6e:69:61:3b:43:a5:b1:36:3c:a3:38:5c:e6:38:f7:
         39:74:f1:25:ea:5e:28:4f:6b:45:23:ab:02:65:ff:84:29:5f:
         a2:3b:93:60:9b:41:08:b1:01:84:ca:fe:a6:e1:4d:51:75:eb:
         6c:5c:15:61:86:07:e4:3b:52:c5:a0:9c:33:2f:b3:3e:76:c7:
         18:ef:fd:fd:43:e1:26:d9:8c:4b:4d:ff:d3:a6:82:6d:40:c8:
         81:b1:3a:42:90:1f:20:f1:07:09:cd:f7:61:5d:3e:ce:0c:95:
         3f:97:47:f2:ea:87:52:42:a4:0d:87:7f:e7:a3:0e:5a:a8:e5:
         4f:5d:5d:bb:46:48:97:b4:db:d3:82:73:df:b1:bb:c5:ed:4f:
         bb:7e:1b:ca:95:13:50:08:09:e6:d9:59:f5:82:a1:ee:42:bd:
         ac:e5:8c:33:e3:a8:1f:fc:4c:05:38:ce:fe:8f:08:62:a4:27:
         a4:54:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:51 2024 by rpki-client on console-ams.rpki-client.org