Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File:                     WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier:          gg49h/1ABeYhVb5rv4BXsPdQhbGzlo7qe/O+RvqevPA=
Subject key identifier:   6A:02:2C:C3:66:C1:E9:4C:61:BF:CE:36:89:98:A2:5E:93:B7:8C:7E
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer:       /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial:       01903AE523EB14555DD8CB307B481AF12F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number:          06A7
Signing time:             Fri 21 Jun 2024 13:03:33 +0000
Manifest this update:     Fri 21 Jun 2024 13:03:33 +0000
Manifest next update:     Sat 22 Jun 2024 13:03:33 +0000
Files and hashes:         1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: DICad4ejhaDZLCGgKUY+5SRuw9ihGpPdYh8Yp6oZ3DE=)
                          2: b3UsCmXQ5pwPOOactdEo-6zojUI.roa (hash: MM+5vgXjQtlDDQb0cuCZ+yuDblXz68p3MzbYE2fq7Cw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e5:23:eb:14:55:5d:d8:cb:30:7b:48:1a:f1:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
        Validity
            Not Before: Jun 21 13:03:33 2024 GMT
            Not After : Jun 22 13:03:33 2024 GMT
        Subject: CN=6a022cc366c1e94c61bfce368998a25e93b78c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:da:ad:45:e5:0b:55:2a:db:af:d5:32:41:
                    02:1d:da:f2:a0:0f:e1:ec:a7:37:60:48:7a:9b:82:
                    ce:e5:9e:74:0d:64:f5:6f:85:c9:cb:06:e3:9f:04:
                    e6:ef:96:1d:b2:32:88:6b:fb:56:af:b0:09:23:4b:
                    83:3e:e0:6d:18:85:72:3e:b0:07:d7:40:05:ab:b5:
                    0c:7e:8c:45:a1:77:65:3a:e5:45:8e:25:50:72:28:
                    b5:8e:50:fc:bd:55:6c:e0:d5:85:d6:f6:c5:8d:a8:
                    a1:7c:3c:45:9b:d3:73:81:c7:97:8a:a3:df:91:a5:
                    13:b8:f7:64:8f:5e:3f:bf:0f:dd:5f:4f:c7:06:18:
                    0b:38:04:78:f5:f8:d7:99:b4:4a:66:80:ef:1d:e4:
                    11:81:42:5b:62:e4:a7:1f:a6:f5:00:5c:a0:0a:45:
                    03:32:a3:20:ed:20:56:90:7c:1c:ea:51:08:97:9f:
                    96:2a:da:14:1a:f4:01:c4:84:83:1e:e2:eb:c0:2d:
                    32:37:37:ae:19:16:9c:e8:a1:38:b9:fc:a9:3b:d7:
                    6a:6e:24:61:e5:32:10:93:d0:dd:9a:1d:07:51:76:
                    7e:15:5e:89:3d:64:cc:0f:f1:1d:f2:28:c2:6b:b7:
                    6f:89:e6:19:30:1b:09:2e:8d:41:06:2e:af:6e:02:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:2C:C3:66:C1:E9:4C:61:BF:CE:36:89:98:A2:5E:93:B7:8C:7E
            X509v3 Authority Key Identifier:
                keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:a6:c1:b4:25:35:0b:77:ea:aa:ad:ba:b7:e1:f2:e6:8d:
         1e:9a:c1:f8:d6:d1:2a:b6:d8:ee:0c:f6:f2:1a:e9:b9:f5:51:
         c4:de:2f:ac:92:e1:b1:0b:c6:ca:17:3c:18:b2:82:6e:4a:e8:
         97:91:04:59:49:a0:49:48:1f:1e:03:d6:92:3d:88:cc:01:ee:
         fd:1f:e7:bf:88:da:f9:fb:7a:14:64:b3:db:03:c5:37:37:53:
         c9:c5:8c:96:79:d2:c1:78:53:08:6d:02:c8:20:16:2c:eb:c0:
         81:e6:ce:ff:03:bb:36:71:f1:26:05:49:a6:d4:ee:bb:16:b2:
         eb:d6:92:ee:51:8b:a4:16:dd:72:ad:44:03:9f:42:2f:f6:ad:
         00:d5:fd:e7:64:fd:f0:9a:82:ec:11:4e:3d:ad:01:94:6f:83:
         17:2b:4e:25:e4:c6:0d:a1:bf:47:b9:ea:cb:8d:ad:1a:94:b3:
         05:4c:3e:2c:d0:e5:62:2a:8f:e6:1f:50:67:b9:7f:26:fd:8f:
         d2:9f:89:cd:43:6b:bd:62:6d:0d:97:b0:c8:f7:fa:46:b3:46:
         24:25:04:ef:c0:53:9e:ce:c2:c6:03:f9:5d:22:da:26:31:b6:
         a5:d8:bc:3c:b6:d2:aa:6e:a5:41:24:29:3c:2b:7b:2a:fd:dd:
         1c:d5:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:36:16 2024 by rpki-client on console-ams.rpki-client.org