Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          OkpYvGGekZrapYdWuNjOGT1tqzLo8mrURhxvQhNvhKY=
Subject key identifier:   FF:AA:30:72:1E:BC:47:6B:EF:B6:D8:B7:D1:CB:96:C4:8C:56:AB:81
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       01901E595033A428BFFFA2220B4D08D8CE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 00:01:28 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:28 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:28 +0000
Files and hashes:         1: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: 5uLslEh7v0GOGN8mnj68swdH80FeDxli4bkeYlm5rHo=)
                          2: g94WQ0Tg5_urv___giFu9yWQbtE.roa (hash: U/TY4qFwZ6aTlKcV6k33mnKnxNSX9tL5wlU5Q6nKliU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:50:33:a4:28:bf:ff:a2:22:0b:4d:08:d8:ce:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Jun 16 00:01:28 2024 GMT
            Not After : Jun 17 00:01:28 2024 GMT
        Subject: CN=ffaa30721ebc476befb6d8b7d1cb96c48c56ab81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:1f:d7:c5:44:25:88:96:2e:c4:ad:b1:7b:
                    9c:35:11:fa:92:c2:61:e0:b9:de:25:99:46:87:83:
                    38:d0:25:e2:08:fb:d0:15:7f:6a:6b:3d:53:1c:2c:
                    2a:87:c4:7a:f3:39:af:d1:19:68:4e:28:87:ba:0f:
                    2d:36:ea:98:86:3d:7a:22:ee:2d:25:41:f1:7e:39:
                    4d:e1:5f:e6:91:b2:70:32:24:a0:f0:93:dd:7f:83:
                    88:77:db:11:ec:7a:bc:1b:ff:81:03:26:c7:c3:85:
                    93:99:58:dd:96:cd:1d:bd:4f:c3:99:af:bb:20:b8:
                    26:70:10:ae:9b:fb:8c:d6:51:1f:af:3b:c9:95:77:
                    1d:6a:80:cc:45:8f:8a:51:e6:de:b4:8a:0a:12:77:
                    19:0e:ae:7e:60:d9:94:7c:6a:d1:56:28:b2:f4:e8:
                    ce:80:a6:3a:b8:79:f0:17:ec:0a:e5:37:29:71:5a:
                    3d:f6:7c:1b:ce:d3:41:e7:fb:8a:c7:e8:5e:a4:96:
                    58:cc:08:d0:8c:fe:fd:dd:40:8c:a2:e5:cc:0c:69:
                    49:43:86:91:30:5c:dc:e4:58:82:32:92:15:95:f3:
                    1e:6a:32:d1:d7:e6:37:83:5f:f8:aa:47:99:36:e8:
                    1a:0d:37:60:45:c0:c2:8c:1a:99:53:6c:90:f8:0f:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:30:72:1E:BC:47:6B:EF:B6:D8:B7:D1:CB:96:C4:8C:56:AB:81
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:91:4d:c7:ff:54:50:38:f9:1b:89:fc:c9:91:7c:fa:4b:fe:
         51:6d:62:2c:ff:d2:83:06:99:b7:a9:2d:2f:a5:5b:4a:8c:d9:
         8c:3d:77:d6:b2:a0:19:7a:66:d4:f1:e8:72:0f:a6:ac:23:ec:
         49:a5:35:98:22:0d:20:13:7b:98:d7:52:52:4b:d8:b1:4b:88:
         f3:ee:3f:e0:d3:1f:32:fb:c8:3b:5b:03:7c:14:d6:6f:bd:be:
         63:1c:bf:76:bb:0f:19:4e:18:2d:1a:4c:55:e1:81:1c:d4:da:
         6f:d1:e3:25:68:e7:73:27:7a:bc:8e:44:93:84:7e:e8:ae:a4:
         22:ff:c8:bc:89:d4:3f:70:2b:ed:51:e6:c5:20:ae:6f:86:45:
         8a:8b:a0:dc:ba:66:91:ba:92:18:93:6a:0a:6c:93:32:f6:b4:
         13:5c:22:8e:86:3a:95:34:c2:82:7b:15:04:28:41:32:64:ef:
         e7:fe:8e:4e:83:3c:d0:29:94:5e:51:0f:67:11:b9:d3:e1:c4:
         9b:1c:17:67:82:db:71:9d:93:82:7a:31:a6:a0:7c:75:f5:d1:
         09:e6:0b:b0:de:23:52:95:ab:81:91:ab:27:b2:d1:87:d9:e4:
         b5:ae:3d:1a:c4:8e:24:92:e6:db:e9:fe:47:8c:c5:75:78:bc:
         f8:99:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:14 2024 by rpki-client on console-fra.rpki-client.org