Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File:                     W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier:          Eh9TihFIfMZQ4ajBS4PkWBBiPYO68igiIqjdD3h+UA4=
Subject key identifier:   44:19:70:33:E5:D8:19:9F:04:EA:40:17:55:AA:A1:B0:2F:A3:47:3C
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer:       /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial:       01906C05981B70C6255FF54EA9FB1AD52CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number:          10ED
Signing time:             Mon 01 Jul 2024 02:00:24 +0000
Manifest this update:     Mon 01 Jul 2024 02:00:24 +0000
Manifest next update:     Tue 02 Jul 2024 02:00:24 +0000
Files and hashes:         1: PS8WrtEjV8A63f5p0a7DMwCpLe8.roa (hash: OOKos+9NyL5AK9cxQtvIJgaUf48CDY2jvt4jxjCb/L8=)
                          2: QaDaa1FP4ri-ilwzFzo3xJ49i7M.roa (hash: xHgNMyJjCja3cwpzI80p/Wf0Yxct1m8byIggDqcT5QE=)
                          3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: BC6YBTrYOqwWKLIzTVnIILtBmccvZP8IfS/Y/aHVMxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:05:98:1b:70:c6:25:5f:f5:4e:a9:fb:1a:d5:2c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
        Validity
            Not Before: Jul  1 02:00:24 2024 GMT
            Not After : Jul  2 02:00:24 2024 GMT
        Subject: CN=44197033e5d8199f04ea401755aaa1b02fa3473c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:e9:8f:fc:95:62:c4:e3:b8:2c:83:f4:59:
                    70:60:29:a7:5d:35:74:f0:dd:3d:aa:8a:ac:e8:62:
                    ef:ba:57:a8:39:40:7b:e0:ce:da:bb:3c:e9:d6:2f:
                    96:c3:6c:74:b1:19:08:73:36:a4:e6:47:41:c3:46:
                    8e:90:73:82:29:62:ce:ed:0b:2b:61:1d:3b:f3:23:
                    22:a8:e8:33:58:ce:e0:b5:f8:55:6a:4f:88:f3:6a:
                    b6:e7:10:ae:92:cc:e6:03:56:eb:9f:d3:8c:4f:68:
                    c6:92:91:48:30:52:8b:1a:a7:db:50:f4:bd:6b:03:
                    bd:fc:3c:ff:42:82:04:ca:2a:ac:d8:09:70:b5:5c:
                    41:2f:34:fe:65:a3:28:3c:4c:ec:56:17:00:38:21:
                    33:4b:73:69:c4:d8:24:df:06:81:ff:0b:60:8b:ca:
                    02:bd:29:88:ab:e7:0a:9b:11:07:26:70:ca:d8:32:
                    88:07:60:66:e5:41:c1:2e:2c:ca:64:b0:7e:55:c8:
                    b4:cd:10:d6:ae:19:71:f7:50:9f:e3:7d:9a:b1:32:
                    5a:7b:ce:48:e4:26:77:b4:fb:9f:93:35:ca:f7:b1:
                    09:25:07:9a:ac:14:18:9d:75:73:37:44:32:75:f4:
                    bc:ba:56:f2:e3:8c:26:a9:d8:99:05:8a:c6:d2:5c:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:70:33:E5:D8:19:9F:04:EA:40:17:55:AA:A1:B0:2F:A3:47:3C
            X509v3 Authority Key Identifier:
                keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:11:b7:e7:74:cc:4d:9d:66:91:25:a3:b0:c0:05:90:7a:4f:
         7e:e8:59:21:8b:aa:d5:a3:dc:ba:92:26:79:05:8f:8a:d8:9d:
         47:3c:0b:69:b4:96:2b:ca:0e:cd:0b:8f:b8:9c:7d:4f:e3:3a:
         9a:17:f5:62:8f:2d:f0:8d:a0:7a:0c:69:65:86:18:ff:ec:36:
         34:86:1c:bd:e7:74:c0:e6:46:0b:ac:ca:11:fd:66:ce:ae:9a:
         2a:d3:12:de:bc:0a:1a:80:df:ea:42:c7:ff:8a:10:b6:c6:3d:
         75:29:20:90:8d:6c:b0:69:b7:ab:b9:ef:fd:0d:50:21:61:51:
         fa:72:e9:34:4f:00:d8:61:4e:0b:e8:d8:fa:cd:a2:58:f6:3c:
         5d:be:55:37:20:1d:5c:ed:03:bb:9f:42:d8:b4:7c:12:3f:e4:
         6d:3a:af:5a:98:ea:e7:88:ea:de:49:68:5c:49:5d:d1:c8:5a:
         35:e2:f1:c3:74:f9:91:bb:36:7f:22:61:6b:56:6d:0d:ff:cf:
         f4:76:53:c1:1d:f3:4c:85:de:d9:df:60:a6:69:1f:c9:f4:8b:
         7f:6a:39:a1:3b:46:87:e5:7a:be:36:d9:10:83:6e:51:3f:c5:
         85:92:9f:09:46:b6:44:ab:de:31:01:87:9d:ea:5f:ea:1e:0d:
         ba:ec:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:26:19 2024 by rpki-client on console-fra.rpki-client.org