Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File:                     WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier:          4CAZb8+pJtgSP1QrC5YHqYORoPQzgO6bdsgUBdVKAGs=
Subject key identifier:   1F:E7:F4:92:92:73:6C:5D:D8:D9:F0:3B:11:55:43:FA:31:5D:91:35
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer:       /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial:       01901DECC229D24AE4C28F023FE91133DA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number:          0148
Signing time:             Sat 15 Jun 2024 22:02:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:53 +0000
Files and hashes:         1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: dWmd12NiIo+owmlSumXOspCsX8iEF6bTOqdmKf+TzRw=)
                          2: l74AtNQ5zvX4bAO_kiGIGSned5A.roa (hash: YeJLx7FcJHRjZBWO6S0l07q2Y/2NSvB5JH42E1nOSEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c2:29:d2:4a:e4:c2:8f:02:3f:e9:11:33:da:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
        Validity
            Not Before: Jun 15 22:02:53 2024 GMT
            Not After : Jun 16 22:02:53 2024 GMT
        Subject: CN=1fe7f49292736c5dd8d9f03b115543fa315d9135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:c4:42:ae:41:7f:b7:44:72:66:9c:85:b8:
                    8c:1b:9d:66:e5:23:a7:81:f1:64:5e:56:81:83:cf:
                    a6:56:22:d8:f2:32:2c:5f:bf:e6:9d:9b:14:44:b2:
                    30:fa:6c:a1:78:39:18:43:a1:a2:54:87:b0:4a:84:
                    03:e4:02:19:a4:b7:e7:c6:ea:ca:4c:91:86:0f:d3:
                    5b:43:ca:6c:42:80:93:98:ea:7e:57:88:15:d4:4e:
                    69:78:e9:ad:af:6a:c5:b2:00:b6:5e:04:84:59:b4:
                    7c:54:72:6d:86:57:73:92:6e:cb:83:78:d5:be:28:
                    e3:5f:71:bd:79:da:fb:de:09:97:3f:f2:5c:8d:6d:
                    e4:31:37:ad:74:b4:73:52:61:f9:84:a6:0d:21:be:
                    9e:6d:0f:ce:2e:31:1c:d7:20:ba:ab:74:ca:89:79:
                    db:0f:38:eb:76:86:eb:8e:76:3e:e0:d0:b5:2b:7b:
                    b0:19:27:05:ad:ee:82:39:7e:6e:75:c7:cb:c7:b2:
                    e0:5f:ff:d0:56:49:9c:c7:96:d6:65:4e:f9:91:c4:
                    03:48:e6:c1:c5:67:fd:9d:d7:b2:ee:d8:28:cd:59:
                    04:0f:ef:93:ab:d3:29:04:1e:9a:e8:5e:ca:64:72:
                    cf:cc:9c:c2:e2:58:05:02:58:55:ca:e1:2c:21:01:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:F4:92:92:73:6C:5D:D8:D9:F0:3B:11:55:43:FA:31:5D:91:35
            X509v3 Authority Key Identifier:
                keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:5d:33:97:34:6a:14:15:44:3c:ed:3a:aa:5d:f5:3d:66:
         f2:c0:19:46:73:83:2f:48:a1:f8:e7:67:60:56:19:73:19:0d:
         1f:30:5f:52:1d:1e:24:7a:5b:ef:c8:13:95:6b:94:0a:96:a8:
         b9:a1:0c:7f:dc:97:a9:f2:e0:1a:e6:8a:90:a7:d3:ba:07:9b:
         c6:5a:bf:40:6c:85:c5:30:83:bc:65:bd:05:4f:d2:30:7e:48:
         92:bf:55:c0:21:65:9d:b7:c1:54:7b:af:cd:35:54:fb:1f:13:
         d5:40:4f:34:02:69:76:27:07:78:3f:08:ea:fa:b5:7b:c9:be:
         43:98:be:37:4d:41:57:24:d6:76:3c:d5:bb:3d:a5:c1:3c:14:
         9a:1e:18:60:10:3d:8a:1d:55:cd:fc:3b:66:ec:00:3b:60:52:
         13:5b:32:e4:97:be:51:5b:69:6d:3b:0e:37:b3:fe:f4:23:fe:
         be:71:76:e4:39:88:c0:5c:42:7f:5d:6d:ca:e9:30:75:80:e8:
         3f:3d:2a:b3:44:af:3d:31:df:19:cd:54:69:27:9f:13:65:cc:
         30:3c:15:1a:fe:7d:54:ab:73:25:d3:63:24:18:f5:b9:79:58:
         ef:84:c2:2e:50:ac:b9:aa:9c:b5:79:85:d7:de:37:3e:7a:49:
         af:75:67:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:41 2024 by rpki-client on console-ams.rpki-client.org