Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File:                     Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier:          q0t6LO7Aylw+zwgFNm0/DrMfKb6DaoRxptsPhzcaeyk=
Subject key identifier:   E9:10:47:E7:9B:B3:DD:81:6A:9E:AC:34:5E:2C:68:FF:6C:FF:7C:56
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer:       /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial:       01901CD8B5C6B86EEA03BB17CB94AAC786A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number:          11D6
Signing time:             Sat 15 Jun 2024 17:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:22 +0000
Files and hashes:         1: 3pYvxrURdbDRsgYov_DBxZNOc4c.roa (hash: 71GnozLpgck45lDfx3MW/WMIdqpk7wZ9uNxMQsnZds8=)
                          2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: 0fChpXp47rSrg8WT2K0kb33rkxSgecNdC6QbZFGCW6I=)
                          3: bbqHAPhsKZdJXuunVKehq1ETPaA.roa (hash: WkxOjwMO7Y3nIU+8/mbSBbBEbIkmHR8wvAEwiAccMsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:b5:c6:b8:6e:ea:03:bb:17:cb:94:aa:c7:86:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
        Validity
            Not Before: Jun 15 17:01:22 2024 GMT
            Not After : Jun 16 17:01:22 2024 GMT
        Subject: CN=e91047e79bb3dd816a9eac345e2c68ff6cff7c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:89:7f:2f:49:67:aa:ef:68:3b:70:9f:ae:
                    26:8c:f9:96:75:e8:8b:fb:4e:2f:c3:e3:68:6a:ff:
                    56:82:9a:27:da:46:6c:3c:ea:20:63:76:f3:51:9f:
                    08:bf:ef:e5:3a:44:41:24:08:2e:d7:75:91:7d:a1:
                    bc:58:a9:f9:43:2c:07:3f:f8:ef:d9:ce:9f:d0:2f:
                    58:e7:c6:d3:23:d6:c8:03:6a:6c:3f:38:0e:f9:b7:
                    c0:cc:c3:3b:be:13:6d:0c:12:f5:86:f4:d3:6a:bf:
                    3a:f8:ac:ba:3d:3e:9b:0a:52:76:2c:80:2c:b7:7f:
                    48:f1:1b:ee:4d:e2:72:6b:96:46:82:63:06:e9:c2:
                    ec:7f:0e:2d:0b:eb:6d:41:bb:eb:a5:f9:16:85:71:
                    54:29:c7:58:bc:c1:bd:6a:db:56:4a:e9:be:97:42:
                    99:54:88:9e:48:f4:1f:f1:0f:a3:5a:26:e5:7b:64:
                    b7:17:42:eb:55:e6:a2:b8:c2:ba:d3:c7:ad:90:44:
                    26:49:65:c0:db:a7:e9:6b:39:03:01:c5:81:72:28:
                    46:a0:89:93:61:11:54:19:f5:43:36:ac:e8:a8:d7:
                    b2:a2:c5:37:22:08:d0:11:cc:5d:56:b9:ba:09:0d:
                    7d:fb:45:28:ec:bc:f7:41:dc:06:6f:50:83:5f:4a:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:10:47:E7:9B:B3:DD:81:6A:9E:AC:34:5E:2C:68:FF:6C:FF:7C:56
            X509v3 Authority Key Identifier:
                keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:8f:39:02:4b:a8:d2:9d:2a:b3:b5:96:bb:fd:6f:76:e1:
         c5:f3:bc:5a:05:1f:fd:3d:f5:3f:82:b3:7e:3c:b0:99:ee:2e:
         e2:fb:29:25:37:fa:03:60:8a:ef:9c:f5:a0:bd:03:2b:d2:e8:
         5a:96:7d:8c:a8:c9:36:55:c7:d2:95:f3:87:c4:73:d1:80:5c:
         7a:ef:20:44:27:c6:5d:d6:7c:3f:86:0a:7b:81:5d:69:81:26:
         fd:3b:3a:ca:1d:dc:5d:ba:e6:54:6a:20:75:dc:e9:9e:08:33:
         4c:93:fe:5f:8a:de:ca:13:ca:4f:f7:7f:06:5e:8f:0e:a5:48:
         19:d6:23:3e:d6:7b:cb:a8:38:9b:aa:f6:c1:2f:73:9a:15:5d:
         51:69:68:d5:e8:8e:82:cc:49:a6:85:b7:23:e2:e8:20:26:4a:
         99:3a:9d:a0:3e:f4:c5:5e:02:6b:24:1b:38:ee:1d:71:ad:77:
         b0:50:83:fc:32:56:e1:e7:e0:fa:1c:ee:47:40:f4:8c:f0:3f:
         f7:e9:92:0d:f9:1e:34:81:2a:dc:1e:2e:02:0c:95:90:89:92:
         cb:3c:b3:ee:92:48:07:84:2f:ad:59:3b:e7:85:e2:3f:34:69:
         6b:33:21:ad:20:3e:f5:fb:e1:dd:fc:36:9a:d8:d3:44:70:b8:
         76:f1:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:32:49 2024 by rpki-client on console-fra.rpki-client.org