Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          oOep8DgWI4HrIBkyAazZz7BjdCB7meScux70C0BrE/c=
Subject key identifier:   CD:DA:A9:B7:E9:29:DF:FD:3A:16:B2:95:48:B3:72:F0:1B:4B:2D:06
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       0190719A0D09553CAA80A5C1DBB5634CE282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          11F6
Signing time:             Tue 02 Jul 2024 04:00:39 +0000
Manifest this update:     Tue 02 Jul 2024 04:00:39 +0000
Manifest next update:     Wed 03 Jul 2024 04:00:39 +0000
Files and hashes:         1: 0qkNCBt15SeN8yl75O93KHFjE1A.roa (hash: ZPHddDrEu8t9OHPeubrV5UeQ/u7KBOmVx2bZPEdeviw=)
                          2: Q0r3YKXp0tdDrYF0bSxbcLY79CI.roa (hash: Znx3sU7YybOBp/mkH1E5e2pL8SWDdsWeFEA7+cdVQ5U=)
                          3: QFmmF7BjBfnLNUYSXdIUlZu2_xk.roa (hash: rMu0MGlsVb7+dts9UDl1CjNtj7LWrds+PhBkuYRsDO8=)
                          4: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: k/gI+FrG99ZQvw3TKhX0TM89JT7Lbs5N+uKvemyHevM=)
                          5: u4earQZqT1hfpifdIo3Ea5i76Kw.roa (hash: HgNUliQu5lKGXyn/rqQZePAvUof71ifBRGdxjkB0yAk=)
                          6: yd3RcCQj0qBdh16_l3V6BBufGTg.roa (hash: 3NsqfeUQZ1n4u9Xbz83EcBmnAyuMCLmOL2Lv87WnAWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:9a:0d:09:55:3c:aa:80:a5:c1:db:b5:63:4c:e2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Jul  2 04:00:39 2024 GMT
            Not After : Jul  3 04:00:39 2024 GMT
        Subject: CN=cddaa9b7e929dffd3a16b29548b372f01b4b2d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:5f:3a:46:b0:bc:db:fe:5f:55:0b:bb:b6:
                    f2:15:6f:30:1b:09:e4:f1:de:b3:c4:45:5b:33:bf:
                    0e:0e:3a:a5:df:c2:da:ef:27:be:32:e5:62:c1:1d:
                    d8:77:3f:48:dc:29:1d:2c:35:f7:7b:c0:0a:3d:fe:
                    42:9e:b0:1f:12:4f:74:bf:21:1b:86:72:2d:fa:8f:
                    93:51:0c:84:c0:e4:9d:77:fb:89:e0:20:94:0d:8a:
                    6d:a8:be:b0:59:37:b1:64:44:63:22:15:1b:47:5e:
                    2f:ed:5c:5c:f8:ac:24:69:b9:62:cf:17:46:b7:4d:
                    e0:7a:99:d3:08:a5:9e:24:31:f3:0a:da:c1:9a:66:
                    94:ee:eb:22:29:4a:ce:ea:c2:f2:0f:c9:15:b5:af:
                    63:2c:bd:b9:4c:28:f9:eb:0e:c2:d1:14:18:52:9b:
                    19:c8:28:fd:7b:85:06:fa:1b:ea:e4:0b:1c:05:9c:
                    c9:2d:19:d9:91:34:bd:ad:6a:8e:3f:a8:13:5b:6b:
                    dd:86:90:e3:34:fa:12:74:5e:39:66:3d:8b:ca:84:
                    e2:6c:de:ba:ae:dd:45:51:ad:60:00:8f:e9:2b:63:
                    df:64:9c:7a:aa:90:a3:f2:e8:22:62:15:2f:23:6d:
                    9e:57:06:97:49:d5:6c:c8:47:77:5b:03:6e:60:c3:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DA:A9:B7:E9:29:DF:FD:3A:16:B2:95:48:B3:72:F0:1B:4B:2D:06
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:a3:68:f0:a4:ca:57:b3:8b:c7:a5:9e:bf:2e:c6:86:e5:
         81:0a:8c:e9:46:d5:ee:04:24:2a:f6:6f:2d:75:2f:bf:91:67:
         62:db:71:8c:25:f3:a9:fb:f9:43:75:83:33:21:b3:67:3c:38:
         59:a2:71:d2:9d:49:33:2c:9a:99:84:0b:8f:58:87:89:2e:4e:
         15:4f:46:fc:d0:58:66:e2:70:c2:f6:c9:e7:83:51:4a:c7:d4:
         f0:83:e9:ab:7e:76:58:d7:7b:c0:a9:eb:e9:4e:4d:00:1a:81:
         e2:f4:3d:f8:3e:46:a8:f6:1e:c5:f8:73:f5:d9:5b:0b:c1:21:
         3f:3b:a4:2f:92:39:55:31:79:2a:49:d5:ec:42:db:c6:9c:64:
         07:4a:61:ae:88:e2:28:ad:27:a7:35:38:04:1e:44:be:10:28:
         6c:6d:88:4b:1e:5d:01:27:36:19:60:7b:ce:a8:6f:35:f2:8e:
         7a:25:22:2a:1f:00:47:72:c7:71:63:29:af:7c:25:75:84:14:
         a4:bf:a6:c1:ad:5c:4d:8d:9b:01:2b:11:03:f8:18:70:d1:8c:
         e6:53:2a:bb:0c:8f:36:16:18:ca:cd:38:44:77:75:b0:f8:84:
         51:aa:9b:76:cc:bb:e4:04:2b:3e:0b:8c:ab:f9:59:86:d1:b2:
         3d:1d:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 11:38:36 2024 by rpki-client on console-fra.rpki-client.org