Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File:                     WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier:          n6h2X/+Q1NqptSK5MEIFUXBjW+Zjh1XMNtSBi7OSLpY=
Subject key identifier:   A5:36:1F:45:8B:1E:D2:C5:56:82:8C:8D:4A:33:6B:1B:B3:5A:BA:72
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer:       /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial:       0190532227DC4DBBDAFA4300A7E13C96D5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number:          0A7B
Signing time:             Wed 26 Jun 2024 06:01:05 +0000
Manifest this update:     Wed 26 Jun 2024 06:01:05 +0000
Manifest next update:     Thu 27 Jun 2024 06:01:05 +0000
Files and hashes:         1: K1WDS9HBMBBT4Rg_Fno5nlmf2Hk.roa (hash: WceQavy9CBGQwkw5sudBh9rozWId3XXyvqB7RHEZaes=)
                          2: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: TtjzeYV7g4UxNTCr1cWW/g3vcJU6GxJYA8kMP3W9y4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:22:27:dc:4d:bb:da:fa:43:00:a7:e1:3c:96:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
        Validity
            Not Before: Jun 26 06:01:05 2024 GMT
            Not After : Jun 27 06:01:05 2024 GMT
        Subject: CN=a5361f458b1ed2c556828c8d4a336b1bb35aba72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:f7:ae:b5:90:cc:05:4b:ab:13:a8:2e:cc:
                    bc:8a:89:06:4b:37:af:ed:9a:ad:72:17:fa:08:cc:
                    85:9a:69:87:02:4c:f9:46:47:47:95:fd:ee:ac:66:
                    35:29:40:ff:3e:1a:05:c6:9e:e2:98:45:44:fa:03:
                    e4:a2:10:52:6d:c1:53:ee:0d:8a:e8:f2:21:ae:04:
                    89:be:f5:ba:5a:01:c7:cb:42:78:f2:07:61:fd:e4:
                    e0:8d:a0:b7:89:df:2a:63:e8:93:9a:12:1f:e5:6f:
                    b5:bf:0e:ea:63:73:43:9f:68:26:fa:26:ef:1b:fd:
                    05:c8:f2:12:98:be:3b:97:a1:63:28:2b:d8:10:3b:
                    c3:b5:6c:28:45:e3:7a:bd:89:e2:a4:59:5d:17:94:
                    1c:a2:2b:bf:80:6b:31:66:1e:b9:86:1e:b2:26:fc:
                    84:c7:0a:8e:61:76:ec:e7:ec:56:2f:db:f3:fb:14:
                    d8:47:5c:33:a3:38:b5:8d:40:0d:80:a2:55:73:78:
                    c5:f4:c3:53:ca:09:e1:fc:64:ac:1f:f6:a4:64:05:
                    83:b0:c3:28:95:0e:8a:e7:d4:80:cb:be:e4:c3:15:
                    ae:5e:90:c6:9f:53:dd:a6:e8:75:b1:81:aa:fd:e6:
                    51:c2:3e:02:a7:de:5a:6a:ff:37:4c:68:a4:5d:c7:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:1F:45:8B:1E:D2:C5:56:82:8C:8D:4A:33:6B:1B:B3:5A:BA:72
            X509v3 Authority Key Identifier:
                keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:2a:a5:d8:2d:55:1a:a8:cc:d9:46:3f:0e:21:8b:09:a0:
         76:b3:60:cf:d9:82:1b:49:cb:0a:a1:2d:96:33:ce:05:c2:09:
         e6:06:98:67:9b:90:fa:43:bf:d8:3d:80:f5:df:91:95:80:3f:
         9d:b5:96:47:10:53:dc:de:3d:6f:b0:1f:4e:5b:5d:dc:e4:8e:
         a4:bc:97:9f:17:e4:9a:4a:70:9d:0b:9e:e9:1f:be:bd:81:fe:
         c5:5e:cc:42:73:f0:b9:b6:6c:3e:d1:dd:9d:6d:02:4c:18:83:
         db:98:67:bc:e5:6c:e7:8f:a9:ca:b9:bf:78:10:de:63:58:b8:
         03:1c:ab:ce:da:08:fb:66:2a:75:c4:63:9b:7c:88:f3:7d:58:
         6c:a7:d3:fb:d3:f9:f4:db:2c:d2:cf:a6:80:c2:e5:77:6f:fd:
         42:9f:cd:0a:e3:fb:ff:18:1e:93:8e:66:a8:ef:ef:ec:a4:8f:
         2c:97:83:e5:39:18:74:84:61:ab:de:b1:f6:ad:59:20:9b:dd:
         bb:cd:c4:9f:0a:1d:b5:7f:7b:f7:b2:07:8c:85:d3:7a:de:84:
         c2:9c:8c:83:dc:7d:7c:0c:f8:fa:57:03:77:41:12:5f:bf:65:
         68:c2:96:c2:f6:ca:4a:95:33:94:2e:93:e5:b2:c0:c6:3c:22:
         3b:7b:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:22:11 2024 by rpki-client on console-fra.rpki-client.org