Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
File:                     0_wrb9dUv48iTSicz2XDjewnKz0.mft (raw, json)
Hash identifier:          KpHYedZH8Qg/AncBS0fn+tPVbg4w5IKGeOD7XyRLLA0=
Subject key identifier:   B9:A4:58:C9:AA:E0:8A:C7:60:B8:DA:47:89:91:35:0D:78:91:03:63
Authority key identifier: D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
Certificate issuer:       /CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Certificate serial:       01901DECE07021F3A6DAAE0AF101A5523607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
Manifest number:          016E
Signing time:             Sat 15 Jun 2024 22:03:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:01 +0000
Files and hashes:         1: 0_wrb9dUv48iTSicz2XDjewnKz0.crl (hash: X1VnnUVENszikpKZcs8UB/xsnDpoRqeF2fU21fXQv7I=)
                          2: JXA1xtoeSmUMJXek7H5hk0VQusg.roa (hash: dYavNU4PJm6hfeeA84nQQWVgkaFfH5jkV6JuX0mfH0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:e0:70:21:f3:a6:da:ae:0a:f1:01:a5:52:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
        Validity
            Not Before: Jun 15 22:03:01 2024 GMT
            Not After : Jun 16 22:03:01 2024 GMT
        Subject: CN=b9a458c9aae08ac760b8da478991350d78910363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:1a:82:91:4b:76:99:f7:77:7f:fc:43:e7:
                    c0:06:ee:df:dd:a9:20:7f:69:d3:aa:b6:29:8f:45:
                    e7:d8:ec:e7:27:9d:f1:db:25:10:4e:45:af:79:a7:
                    5c:81:d2:58:61:08:82:29:51:85:49:aa:63:0d:91:
                    69:9d:26:04:a5:c6:42:50:14:78:6b:5e:2a:d3:f4:
                    c1:6b:3f:3f:42:f6:cb:f5:97:63:b3:64:0a:f5:4b:
                    ab:0c:69:04:78:ac:1f:50:82:e2:ba:aa:f7:45:1c:
                    45:0a:36:5c:e0:bb:11:81:57:39:4d:31:9c:53:69:
                    b6:3f:57:b0:89:1e:1b:f0:1d:b8:d6:2d:6b:88:14:
                    97:04:87:24:84:e8:38:e1:8f:d1:51:5c:59:40:02:
                    52:f7:80:fa:ec:bd:26:c7:79:50:c3:d7:13:97:ed:
                    7b:c3:1a:c5:ec:35:33:de:80:c0:19:39:b0:68:cc:
                    6d:d6:c6:47:dd:af:0d:86:30:46:43:2d:c9:9b:f5:
                    70:33:2d:0e:00:2e:59:34:0e:e2:40:3f:a5:66:d2:
                    18:77:c0:36:ef:ab:a6:13:8e:98:c3:c9:56:eb:43:
                    2a:0f:aa:b5:03:c3:8a:40:a6:e5:61:dc:f0:6a:01:
                    0f:d8:6a:5c:90:0f:d5:a1:9d:07:36:80:f7:7f:6a:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:58:C9:AA:E0:8A:C7:60:B8:DA:47:89:91:35:0D:78:91:03:63
            X509v3 Authority Key Identifier:
                keyid:D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:48:76:05:26:c5:48:ab:5f:48:32:9f:d1:d7:ea:72:4b:
         4c:35:96:8e:ca:70:cb:56:ac:1b:fa:a8:a3:e6:5d:27:3f:7f:
         8b:1e:c6:1e:3a:64:54:21:3c:b8:11:a1:e2:5c:39:55:4b:e5:
         28:6f:b9:0c:63:46:ba:8e:a8:85:6a:75:37:a0:5f:c3:22:29:
         4a:c3:9b:c0:5e:3d:4f:74:f3:ce:f8:5b:17:60:8a:d4:8c:99:
         1f:34:4b:81:c8:b1:6f:01:9a:0b:3e:93:76:84:cf:24:6e:24:
         ad:05:16:81:65:75:34:c6:d9:94:f8:98:c8:3a:4f:8c:dc:90:
         6b:34:8e:25:79:d3:de:b1:fe:b8:14:ba:1f:b6:9f:16:fd:c4:
         b5:f8:3f:bf:b3:bf:9c:df:aa:c1:3a:97:5b:b1:3a:82:b2:48:
         f1:98:43:25:6d:51:59:3b:2f:a4:f1:7c:9f:c4:03:14:f8:ff:
         8f:8a:cf:13:c8:69:0e:f0:ec:ee:cb:e9:53:5c:42:44:ac:2c:
         9f:56:c1:4f:e9:5d:21:67:93:e0:57:1e:8b:9e:53:36:1c:fd:
         39:57:54:3b:71:c8:ac:7a:19:3e:8b:10:e2:ea:cb:5c:27:b9:
         7e:6d:a8:07:e1:19:4a:18:c2:9d:a0:dc:da:9c:e8:36:e9:4a:
         85:5a:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:11 2024 by rpki-client on console-ams.rpki-client.org