Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          OYOsLlZ0nA4jIsGaWmZqMQwcZn/hzY8KI/I7H0zErCo=
Subject key identifier:   E1:05:49:B7:8A:47:36:27:08:C8:86:7D:C1:B1:C6:A5:14:17:BB:48
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       01901E594D368477D6D47679525BAABFB763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          0AB1
Signing time:             Sun 16 Jun 2024 00:01:27 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:27 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:27 +0000
Files and hashes:         1: Djd5CtNeKvjwPjVqbyrR0hvTKD4.roa (hash: QJht+nnnu26q0Qm9GHgdzuV6k7bMQfZplq/eCdcVPzA=)
                          2: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: cl2YgrQh044N4pweRMFZF/ErEDXn25DRWSFZAdDv8HU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:4d:36:84:77:d6:d4:76:79:52:5b:aa:bf:b7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Jun 16 00:01:27 2024 GMT
            Not After : Jun 17 00:01:27 2024 GMT
        Subject: CN=e10549b78a47362708c8867dc1b1c6a51417bb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:ca:91:14:8e:d5:39:30:fb:62:9d:98:31:
                    40:7a:a4:22:a3:7c:95:7d:ca:a3:e5:34:a0:f8:a0:
                    2f:12:7f:d0:1d:2d:a5:f1:30:9c:e9:b0:6e:45:98:
                    93:f0:31:a6:04:f2:53:26:4a:0f:3e:f1:d3:9f:c1:
                    36:1e:f3:76:37:29:30:a6:b3:5c:01:86:9e:4a:16:
                    b1:51:3b:50:39:4f:41:06:53:b8:b1:90:59:2a:88:
                    a9:fc:5b:0d:ae:89:bc:8a:25:4a:f1:40:00:d3:dd:
                    8f:8b:59:c3:7b:d9:e3:76:9b:3e:fa:da:65:a3:09:
                    dd:7a:8c:08:08:df:70:99:f2:e5:4a:9d:29:b2:e9:
                    7f:07:2e:74:c7:56:ee:56:be:82:97:cc:5b:73:1f:
                    79:de:21:b3:0b:8f:f4:ba:33:d8:f1:11:f0:19:cf:
                    55:b5:0b:1e:c6:d7:26:9c:79:3e:5c:a0:91:82:42:
                    33:d4:92:c0:42:ff:28:a2:18:09:1c:ce:34:2f:77:
                    bb:af:11:84:aa:d4:11:a0:29:7f:d1:e4:48:64:d0:
                    01:4b:d0:ed:cd:af:ba:1d:cd:40:3c:ed:35:7b:5c:
                    ae:07:ae:f6:ca:c2:1f:03:af:57:db:b9:56:9e:8c:
                    3d:37:40:99:fe:0d:ba:fc:ca:56:5e:1f:77:90:e0:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:49:B7:8A:47:36:27:08:C8:86:7D:C1:B1:C6:A5:14:17:BB:48
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:bc:40:4b:94:66:22:cb:18:11:52:f7:4b:97:3a:bf:2c:
         fa:0e:d4:aa:89:a8:20:0a:85:15:2b:6a:7d:25:02:de:a6:10:
         6b:de:80:63:42:f9:a1:6d:b4:3d:7a:28:ed:59:eb:40:a0:48:
         2b:b5:fb:19:73:2a:c7:71:db:0d:5e:83:d3:58:99:02:5d:fe:
         f8:31:5c:20:47:8c:af:a0:f5:17:84:fb:ac:4c:22:f2:42:ee:
         df:ad:5a:2f:37:b3:4c:d8:59:3a:98:3a:30:5a:48:98:25:c4:
         2b:ed:b8:53:40:f9:bd:a1:c2:64:f6:9b:d7:c9:5e:da:5e:6e:
         ae:c9:45:c4:6f:12:e0:4d:f1:43:1c:7a:f9:bb:2e:19:f9:7c:
         97:6d:e5:10:eb:63:09:be:52:b1:7a:98:a5:dd:50:30:18:73:
         c7:00:21:b1:5a:48:a0:b0:31:ff:e3:5f:1c:02:d4:0d:f1:61:
         43:54:a5:43:a8:a5:c0:11:5c:57:d0:e0:e9:e0:20:8e:b5:06:
         80:59:8e:a0:94:98:c9:3b:e7:30:81:cb:8c:96:85:52:b0:1e:
         62:07:49:c6:4e:59:85:3b:3f:45:10:cb:b8:22:f4:4e:80:0c:
         d0:03:04:ed:d8:1d:cd:34:1b:7c:d1:25:32:2e:19:15:06:97:
         9d:46:52:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWU02hHfW1HZ5Uluqv7djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzRjZmJkODcxYzQyZGQ1NWE1N2JkMGZmNTY3MTM0ZjMy
MmIyM2UwHhcNMjQwNjE2MDAwMTI3WhcNMjQwNjE3MDAwMTI3WjAzMTEwLwYDVQQD
EyhlMTA1NDliNzhhNDczNjI3MDhjODg2N2RjMWIxYzZhNTE0MTdiYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24fKkRSO1Tkw+2KdmDFAeqQio3yV
fcqj5TSg+KAvEn/QHS2l8TCc6bBuRZiT8DGmBPJTJkoPPvHTn8E2HvN2NykwprNc
AYaeShaxUTtQOU9BBlO4sZBZKoip/FsNrom8iiVK8UAA092Pi1nDe9njdps++tpl
owndeowICN9wmfLlSp0psul/By50x1buVr6Cl8xbcx953iGzC4/0ujPY8RHwGc9V
tQsextcmnHk+XKCRgkIz1JLAQv8oohgJHM40L3e7rxGEqtQRoCl/0eRIZNABS9Dt
za+6Hc1APO01e1yuB672ysIfA69X27lWnow9N0CZ/g26/MpWXh93kODzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEFSbeKRzYnCMiGfcGxxqUUF7tIMB8GA1UdIwQY
MBaAFFnEz72HHELdVaV70P9WcTTzIrI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMt
ODk5ZjFlMWI3MzYwLzEvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMtODk5ZjFlMWI3MzYw
LzEvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8a8QEuU
ZiLLGBFS90uXOr8s+g7UqomoIAqFFStqfSUC3qYQa96AY0L5oW20PXoo7VnrQKBI
K7X7GXMqx3HbDV6D01iZAl3++DFcIEeMr6D1F4T7rEwi8kLu361aLzezTNhZOpg6
MFpImCXEK+24U0D5vaHCZPab18le2l5urslFxG8S4E3xQxx6+bsuGfl8l23lEOtj
Cb5SsXqYpd1QMBhzxwAhsVpIoLAx/+NfHALUDfFhQ1SlQ6ilwBFcV9Dg6eAgjrUG
gFmOoJSYyTvnMIHLjJaFUrAeYgdJxk5ZhTs/RRDLuCL0ToAM0AME7dgdzTQbfNEl
Mi4ZFQaXnUZSbw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:04 2024 by rpki-client on console-fra.rpki-client.org