Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          BMesOsWrZg5G5VLy+cG+bLW4Ot5SEJKLH7Viytwg6pg=
Subject key identifier:   F4:20:BD:C3:2F:E2:8D:12:FA:51:10:CB:13:C9:38:EE:B9:79:19:01
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       01901CA16E535DA3361D31AF1630C5E63CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:59 +0000
Files and hashes:         1: P3GA6xGclohIJJ9dC9onspm2rEg.roa (hash: rZivJ6Sz3vkUMJRB+Lv3jnTvqfc+FJ2GZK3kno/Uz+k=)
                          2: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: 1RzztwYK9KpP7HeynGrU2XdRjppONqIzD4GMRoELe8s=)
                          3: fqYyES-5KmuiAbfymb2_gTkizWE.roa (hash: NhjtlTDsjY1KWPcTWZatCoA4u2tG7X0q8zUdGdf8zdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:6e:53:5d:a3:36:1d:31:af:16:30:c5:e6:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jun 15 16:00:59 2024 GMT
            Not After : Jun 16 16:00:59 2024 GMT
        Subject: CN=f420bdc32fe28d12fa5110cb13c938eeb9791901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:8a:44:5e:e0:22:e5:3a:f7:44:56:16:ea:
                    23:b1:64:23:5e:98:cd:b1:9a:08:88:ac:20:43:ff:
                    3b:96:ea:9f:84:e2:2b:fd:a9:ae:fe:41:3c:1c:72:
                    5d:af:93:50:e1:3a:f7:b3:d3:a4:62:ce:e1:54:8b:
                    37:4f:07:dd:4e:6e:3d:d9:66:5f:f7:d6:29:6a:3e:
                    2b:f9:08:6d:ca:2d:10:50:4a:59:07:8e:27:d5:a9:
                    79:f5:28:3e:0d:8d:42:52:4f:7c:9e:3f:af:eb:56:
                    d0:5b:d0:3d:9f:55:d2:e4:a6:4a:19:76:51:bd:a2:
                    a2:c7:70:d8:5d:11:72:0d:6b:ed:76:c8:25:9b:f3:
                    98:35:a5:cb:df:58:0d:a1:e7:b0:8c:b8:3f:58:5f:
                    0f:cc:47:b8:73:72:34:49:ca:8e:c4:95:c2:40:42:
                    7c:ef:5d:7d:b3:02:f2:2a:54:13:9b:b2:d5:1f:57:
                    cd:f4:16:d5:6e:ea:04:81:d2:44:ff:02:59:50:01:
                    2e:58:9b:45:d2:48:be:5a:63:cb:03:20:35:8b:75:
                    60:ab:a7:36:56:42:97:17:c5:48:c6:1e:79:c7:c6:
                    da:0f:54:58:e7:89:4a:89:1a:77:c9:44:0f:eb:19:
                    56:20:d3:da:61:67:13:5c:d2:b7:5e:70:07:61:bf:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:BD:C3:2F:E2:8D:12:FA:51:10:CB:13:C9:38:EE:B9:79:19:01
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d5:9f:17:25:70:b7:19:4b:c6:19:40:fc:79:44:b8:5b:35:
         6b:47:81:46:23:d4:08:cc:04:d4:ef:3a:53:aa:a1:ce:0e:a8:
         e4:08:ae:83:be:bd:7f:6f:d8:1a:a4:c0:5b:81:ff:e0:3c:9f:
         7f:d1:e1:2c:d9:c4:49:69:a5:25:9e:c0:48:fd:39:8c:cd:a9:
         bb:b0:97:37:3a:ae:2e:4c:81:55:09:d7:e1:f6:e1:d9:ad:88:
         ca:01:8b:0f:57:ea:63:c4:af:8a:7a:29:19:ca:ea:67:fb:8c:
         d7:aa:04:14:f2:dc:16:82:b1:60:c0:14:7d:ee:21:5e:3e:ab:
         0d:11:17:1b:e7:99:31:6d:48:fa:cb:9f:50:e7:a2:28:f2:25:
         f3:8f:6d:9e:c0:f6:00:ce:b1:af:18:73:77:82:a3:0f:12:3e:
         62:bb:c9:c2:b9:b8:68:b5:d8:ac:8b:94:73:6b:9d:a4:6f:34:
         1a:21:83:0e:b2:aa:5c:1f:46:2f:fd:77:fd:19:a1:2e:78:15:
         7b:9d:ef:60:7d:c7:a5:1c:ce:6f:00:cc:29:02:c5:ad:d8:83:
         05:72:9c:e4:24:23:1b:a2:f7:06:26:23:10:1f:aa:bb:dc:e4:
         09:1f:a5:49:e5:6b:cb:ca:43:6e:5f:2c:5a:76:66:59:d0:27:
         1d:61:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:59:52 2024 by rpki-client on console-fra.rpki-client.org