Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          3QCkz3AE54wSeRd8OzHXHt9lsGppPXPe5pm/HmbTJug=
Subject key identifier:   F5:E8:34:AD:29:50:F7:8B:00:B2:66:41:C2:4F:EC:81:C3:50:51:8F
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       019044F88DB329B1AD12997868719F94B28E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          116C
Signing time:             Sun 23 Jun 2024 12:00:58 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:58 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:58 +0000
Files and hashes:         1: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: L9jNKrHPf0rJdUAR5NtvgWCmTCL+15BOYo6r6Z/Acp4=)
                          2: g94WQ0Tg5_urv___giFu9yWQbtE.roa (hash: U/TY4qFwZ6aTlKcV6k33mnKnxNSX9tL5wlU5Q6nKliU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:8d:b3:29:b1:ad:12:99:78:68:71:9f:94:b2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Jun 23 12:00:58 2024 GMT
            Not After : Jun 24 12:00:58 2024 GMT
        Subject: CN=f5e834ad2950f78b00b26641c24fec81c350518f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:bb:b1:13:f7:e4:97:60:a0:b3:99:a8:dc:
                    ab:48:29:f2:96:11:cd:3c:2b:37:35:a9:99:b1:90:
                    8a:0f:e6:d8:0e:2f:6a:af:2f:9a:10:34:8a:ce:c4:
                    73:f9:b5:96:6f:61:5b:1f:a5:54:d5:cf:d1:d9:6f:
                    7f:76:f3:07:16:d3:e8:90:6b:f5:7b:fc:6e:38:1b:
                    31:05:31:66:1e:8a:5b:4c:b6:30:3a:97:5e:d6:9b:
                    84:0b:f1:f3:10:1f:32:92:cd:c5:ca:97:20:e7:3c:
                    fa:d8:7c:9a:ea:ac:8a:c5:04:84:a1:58:c3:cd:aa:
                    95:77:68:5a:49:d0:03:2a:e5:0c:3c:c3:5b:7d:1d:
                    f9:97:10:91:d7:0c:e8:4f:64:8b:e3:1f:e7:ea:cc:
                    47:9b:ce:32:21:86:1d:9f:a4:da:d0:77:e0:95:bf:
                    ac:e7:4d:21:ee:12:aa:45:60:51:1b:e1:1b:de:f5:
                    07:0e:f3:10:55:5c:20:d7:a0:24:53:ee:7a:7f:7f:
                    b1:f9:93:5c:19:ea:a1:8d:7c:92:ae:1f:79:c4:73:
                    48:a9:fe:2d:cf:ae:83:02:05:1e:53:5d:d8:7a:dd:
                    82:f2:cc:5d:98:f9:fd:ef:e7:04:22:e0:1b:94:46:
                    88:1a:5c:bc:ba:88:cb:64:6e:2a:76:13:19:a8:55:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:34:AD:29:50:F7:8B:00:B2:66:41:C2:4F:EC:81:C3:50:51:8F
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:b3:fb:34:16:96:8d:9b:6a:92:c4:68:fd:b5:c1:07:d5:
         28:63:d5:c4:38:74:c1:7a:52:f1:6d:b4:83:58:2e:71:b6:4f:
         9f:7e:88:ba:06:c6:cd:6c:4b:f7:69:3b:dc:55:09:71:7f:e6:
         14:af:d9:9d:f5:c8:a9:2c:b1:a2:32:3e:d0:ad:ca:8b:70:32:
         1f:4b:f0:db:39:f9:9f:5d:bc:59:a8:49:74:95:05:df:51:43:
         a6:f3:e3:38:14:bb:54:75:de:d0:8c:0d:32:e5:69:65:7c:51:
         84:4e:db:dc:41:3b:34:fe:32:bf:44:86:18:f2:b4:7d:51:e5:
         eb:ee:46:0c:31:1e:b2:44:9a:a6:55:69:c1:66:d8:74:6f:fa:
         22:a1:13:45:bc:c1:b9:e9:e5:4d:5f:04:69:df:d4:a7:e8:53:
         9c:83:00:08:88:27:2a:f1:0a:a9:d8:82:f7:a9:d2:dd:d5:0e:
         dd:20:4e:0c:a0:f5:47:06:0a:de:69:97:b2:b8:89:42:ee:59:
         07:5b:b5:e6:d5:74:22:e4:bc:3a:ae:7a:52:f4:db:06:99:7a:
         09:31:12:8b:f1:73:5d:7c:da:ad:da:b8:d9:83:62:8e:b6:e1:
         52:13:90:91:42:0c:58:b7:e2:5f:f0:72:52:da:86:d3:37:f2:
         13:04:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:03 2024 by rpki-client on console-fra.rpki-client.org