Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File:                     85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier:          ESLgRzYkVv5eLo+BEB4X8qQpDlIjBkEK2F4+ASsGPDU=
Subject key identifier:   55:C9:1B:0D:14:7E:A3:2E:41:BF:17:7B:09:84:C5:E8:70:1E:B2:D9
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer:       /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial:       01901DEBF3E2B53B71F21338C855EF16FA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number:          0CEF
Signing time:             Sat 15 Jun 2024 22:02:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:00 +0000
Files and hashes:         1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: YGxj5+7cYa7iAvowyH4kBdiYn88e+gWvu8U/RgESB/c=)
                          2: ctw9YLzgRXMYSy67z80tOpXR-ZE.roa (hash: l7R3Okhlrh6EG/2/SZJd3elBbTyC4ZZbayDt5+8WIUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f3:e2:b5:3b:71:f2:13:38:c8:55:ef:16:fa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
        Validity
            Not Before: Jun 15 22:02:00 2024 GMT
            Not After : Jun 16 22:02:00 2024 GMT
        Subject: CN=55c91b0d147ea32e41bf177b0984c5e8701eb2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:aa:7e:4f:d2:68:95:6c:8d:84:2d:d5:73:
                    5d:bb:ce:69:4f:05:4f:4b:1f:36:91:fe:6b:24:69:
                    f2:b7:96:76:47:f6:2e:76:f5:71:43:02:32:ea:a8:
                    80:19:f2:5d:df:e2:63:96:4e:f5:f2:5c:2d:82:6e:
                    98:84:87:78:49:d9:90:ed:0b:87:77:7a:87:cf:3e:
                    72:39:96:0d:8f:c5:73:f8:2a:4e:55:7f:28:f6:71:
                    f2:cf:b1:ad:8d:07:57:df:3e:d0:0c:fc:b2:c6:05:
                    70:26:36:83:c2:70:4e:b7:ac:e5:64:30:22:89:b5:
                    37:d7:79:00:14:87:fb:47:cc:b1:2c:be:42:ad:34:
                    c1:62:18:5b:0b:4e:eb:23:a8:09:24:67:1c:22:d8:
                    f1:23:be:14:2d:fe:31:05:ae:e9:ca:31:a3:1d:2e:
                    ce:46:05:68:65:cc:79:c3:d5:bb:62:fd:09:3a:72:
                    f1:5f:c7:65:d2:d4:20:65:66:5b:0e:22:da:0d:0d:
                    c7:81:67:93:f3:84:7e:95:76:c6:ba:51:ca:51:be:
                    ef:3e:e8:46:58:b5:21:d5:25:82:ca:92:f8:a4:cb:
                    97:fe:0b:cf:f9:1a:7c:01:5f:d2:4a:d2:72:c9:86:
                    ed:23:7a:d6:85:15:44:56:dc:a8:40:48:d6:34:70:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C9:1B:0D:14:7E:A3:2E:41:BF:17:7B:09:84:C5:E8:70:1E:B2:D9
            X509v3 Authority Key Identifier:
                keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:11:5a:19:ce:34:a4:d3:74:95:bd:27:b6:e4:d2:93:24:
         10:4d:f2:96:79:ec:24:30:2e:c4:e6:2e:4f:a2:c9:71:32:12:
         9a:4c:d8:9e:63:30:74:80:fc:95:c1:53:63:3a:d1:ff:5c:a3:
         08:98:9d:32:40:7d:80:64:f8:f9:88:ea:c2:d8:09:df:ac:aa:
         60:bb:83:c3:cd:d3:04:80:be:af:a2:b9:4c:d0:95:6d:2e:33:
         57:e2:b8:61:6c:b3:9d:5c:5b:60:d1:4d:bd:ed:da:7d:d3:10:
         13:0f:9e:83:28:63:c5:da:35:a7:6e:51:03:e0:48:ec:a0:b4:
         40:38:c4:3d:3d:05:8f:aa:21:e7:b2:5b:3b:2f:c4:4b:55:1b:
         c6:f9:63:b5:22:85:14:b0:fa:2e:d0:24:33:8a:07:c0:71:c7:
         07:be:b1:ae:6f:e8:58:70:88:8a:51:db:74:13:32:05:1b:70:
         e7:10:15:5d:e0:0a:ef:40:7b:da:4c:3b:3a:31:d0:e5:02:2b:
         e0:24:28:f3:6f:e4:9e:f4:2b:50:1e:5e:ae:9d:47:7c:9c:4a:
         bc:38:09:0c:47:7a:79:d9:2a:68:19:e8:f0:75:04:a5:cb:6c:
         3e:df:53:d7:3c:fb:39:49:78:c7:81:f3:eb:59:da:f3:71:a3:
         86:b8:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:28 2024 by rpki-client on console-fra.rpki-client.org