Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          63jfAElcSGQjGaLJUhj/+npSoznsy/1kz13YrRAoTmw=
Subject key identifier:   9A:7C:AC:64:31:66:BD:A1:DE:C5:3E:33:AF:73:7E:45:32:62:29:00
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       01901E8FE524F876E47CA9171C729D1F2B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          06CF
Signing time:             Sun 16 Jun 2024 01:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:05 +0000
Files and hashes:         1: 1uMzcLzL4KFJYmw6sV1FKHszR38.roa (hash: KsSJFTEHziP1rhhbH73L1uTvffh3naR1voy3433crig=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: fPaZtTO0G88A8fH+kEx9pv0+eE2C0L1WIdpM0Q29qxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e5:24:f8:76:e4:7c:a9:17:1c:72:9d:1f:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: Jun 16 01:01:05 2024 GMT
            Not After : Jun 17 01:01:05 2024 GMT
        Subject: CN=9a7cac643166bda1dec53e33af737e4532622900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:d5:55:6b:89:ef:49:0b:76:cc:77:d5:9c:
                    29:74:3f:65:13:7e:f4:73:b4:dd:b8:6f:2e:87:08:
                    76:b1:12:e1:da:15:5f:46:f2:63:4e:cf:de:4b:06:
                    f9:f8:7f:1a:b2:4f:0f:20:6d:78:b2:89:fe:03:af:
                    eb:84:77:b6:93:5f:36:91:be:de:67:5c:bb:e8:46:
                    c5:89:fc:dd:d3:ca:7b:d3:b5:3b:c7:41:1e:c7:12:
                    91:22:6c:2e:d4:48:0a:04:5d:df:14:ca:70:d1:5e:
                    42:e5:c3:97:8c:62:d9:0e:40:d4:cd:11:08:8b:e7:
                    73:df:d4:ec:71:a4:1a:71:69:04:37:d6:2b:6e:df:
                    b8:82:4e:ef:ff:a2:0f:80:2d:dd:ff:0d:a6:fe:cc:
                    1d:91:d2:9d:b2:72:86:94:d5:7f:f7:7f:5c:e4:55:
                    16:23:30:03:2d:67:01:a7:46:5f:38:9d:f6:34:e7:
                    c1:76:dc:48:ce:1f:c3:41:9f:5a:b8:8c:09:e5:cd:
                    25:35:43:0d:e7:2c:58:6f:b0:72:e0:36:28:29:ca:
                    0d:da:d4:a2:46:db:4e:4d:79:4e:39:db:be:24:85:
                    32:af:43:73:95:92:d5:42:f5:25:d0:49:50:05:3d:
                    76:47:73:9d:d5:e1:db:5d:f8:61:9c:ca:82:05:49:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7C:AC:64:31:66:BD:A1:DE:C5:3E:33:AF:73:7E:45:32:62:29:00
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:86:c4:13:9c:22:18:50:16:71:4b:ea:32:56:9e:37:2d:12:
         d0:c4:dd:c0:50:09:cd:f3:da:bb:92:84:54:97:6c:3c:3a:f2:
         64:e0:f6:9a:28:66:2c:d4:b9:f2:09:ad:e0:c2:58:2e:99:01:
         4b:f9:e5:36:72:b0:62:4b:0f:37:27:03:7f:8c:bb:59:0b:8c:
         92:a0:c7:75:f8:3d:18:c6:ea:a0:80:b9:08:15:b8:43:2c:4b:
         5f:79:f7:df:bc:9b:f6:53:b4:49:49:4f:3f:7f:00:6a:7f:1d:
         92:7a:e0:f2:b8:7a:91:f0:50:d9:6f:2e:e7:82:02:12:6e:26:
         53:3c:1c:88:28:bf:c9:18:cc:4c:0b:c6:83:be:c2:97:30:d9:
         92:d1:b1:a6:7c:8f:9c:46:c1:46:29:8a:f9:e3:7e:c6:0b:43:
         81:2d:1d:94:cf:1e:06:7d:f1:76:35:8b:50:87:fe:5f:09:1a:
         f3:c5:6d:a5:e5:d1:2b:32:b2:f4:c7:84:56:be:0e:81:79:77:
         32:34:af:2c:b2:46:3a:e6:5c:21:42:f1:42:26:48:54:e0:9e:
         8c:ad:a3:02:eb:a9:ae:df:f7:73:7a:77:88:66:9e:54:60:ac:
         e8:1a:f9:21:9c:1b:74:6e:2b:46:89:99:e0:10:59:67:d2:ca:
         59:ce:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:11:22 2024 by rpki-client on console-ams.rpki-client.org