Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
File:                     WX_cXffB0EeLTfoykI2f-VgYrHg.mft (raw, json)
Hash identifier:          xnfXbqrKAiAcNAXxTe2QEGVeQ7B3s+wHYbInsxV16+o=
Subject key identifier:   BC:27:4A:D8:B6:7F:2A:8C:8E:B3:81:5C:34:D8:24:EA:FA:B1:6F:47
Authority key identifier: 59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
Certificate issuer:       /CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
Certificate serial:       01901F3492A187ADA6A5B2BDDAC187FFB9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
Manifest number:          04FE
Signing time:             Sun 16 Jun 2024 04:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:57 +0000
Files and hashes:         1: WX_cXffB0EeLTfoykI2f-VgYrHg.crl (hash: c5UMlFDId2JxqtB7ohzQvRgOFnl+4M4J0mZtWLrbrfQ=)
                          2: _ifwGi4zMaSxu8ywRwQOqAx1A_w.roa (hash: xnLGll/v15O1cqSaWGEEMJahrvZNwpBk7atYbxcNKFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:92:a1:87:ad:a6:a5:b2:bd:da:c1:87:ff:b9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
        Validity
            Not Before: Jun 16 04:00:57 2024 GMT
            Not After : Jun 17 04:00:57 2024 GMT
        Subject: CN=bc274ad8b67f2a8c8eb3815c34d824eafab16f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:a1:36:88:1b:2f:39:1e:cb:fa:fe:98:d0:
                    e0:9c:ba:ba:ad:35:de:3d:d1:12:88:af:85:0a:dc:
                    0b:10:7c:ed:72:52:bf:9b:e4:69:7a:00:cd:f7:b4:
                    6b:6b:00:0e:53:50:c5:10:84:6a:2b:af:cb:51:05:
                    3c:8c:5d:c8:2d:52:cb:eb:3f:a4:06:17:97:17:23:
                    2d:20:37:52:06:b6:e9:97:3c:aa:24:3d:b5:cd:26:
                    49:cc:85:98:41:d1:77:ac:06:74:60:18:a6:99:ca:
                    09:a4:7d:51:ce:4c:6b:1a:bd:1a:d0:ee:7c:53:12:
                    af:f9:64:0e:25:c8:87:14:26:d8:4d:07:c8:56:62:
                    0d:55:33:12:14:7e:10:09:7b:46:74:87:69:bf:09:
                    eb:13:ed:c7:83:d4:49:9c:fa:bf:64:f7:78:9f:cb:
                    de:dc:c7:62:c9:dd:1e:0e:5f:2f:2c:de:f0:04:ca:
                    a6:e7:0c:83:4d:48:9d:00:44:a8:4c:4a:9e:29:bd:
                    a0:02:f1:3e:e8:98:34:83:ca:05:da:4c:ec:2e:d0:
                    df:8b:60:43:a8:47:9e:12:8e:af:62:da:39:63:19:
                    20:ba:6a:b5:9b:ae:51:0c:1e:fc:77:ec:a0:ca:ee:
                    5d:7a:39:6a:43:8e:4f:cd:ba:b0:14:c2:d8:77:9d:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:4A:D8:B6:7F:2A:8C:8E:B3:81:5C:34:D8:24:EA:FA:B1:6F:47
            X509v3 Authority Key Identifier:
                keyid:59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:77:b2:cf:17:f2:7a:79:59:0f:0c:76:38:ed:cf:fb:2e:86:
         9d:43:3e:0c:37:3f:ec:f3:3e:97:18:26:96:aa:37:5b:ec:94:
         85:91:b9:0c:84:a2:46:91:e8:79:ec:e2:e5:95:bd:1e:d4:0d:
         7f:73:48:5e:81:50:a0:b7:29:d2:1a:98:56:c4:63:3f:e5:7d:
         70:54:8a:33:c3:37:13:9b:2c:4b:5c:52:72:90:53:82:77:d8:
         94:af:bc:07:ab:d4:b3:af:4f:90:47:bf:c6:b7:4c:c0:30:d9:
         1e:68:95:12:5f:58:37:f2:9a:99:58:62:81:48:f3:08:98:5f:
         ad:f5:77:66:9f:9f:c0:07:70:23:d5:cc:9d:43:d7:4b:e0:66:
         6e:0a:50:2b:8f:ef:ec:ff:c2:f9:ba:f4:87:c5:97:be:7b:62:
         19:8c:a2:da:54:fc:7a:f4:e4:9e:d1:80:7a:e0:9d:98:41:8f:
         33:11:3e:33:4c:e6:0c:30:66:af:d8:ca:16:ed:28:a6:02:6d:
         c7:4e:74:64:63:fc:16:9b:9a:2c:3e:8a:17:ac:73:78:e6:b2:
         0d:da:a3:df:c2:d9:a3:13:f5:27:6b:c6:85:20:af:0e:56:58:
         c7:de:aa:29:32:63:7f:2e:96:63:56:f1:0e:44:5a:6d:1d:e5:
         88:f2:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:36 2024 by rpki-client on console-fra.rpki-client.org