Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          p+DMH+fSRCBMyW1CbSD/zoMvz/i5tPV/PzgUUPhF9BM=
Subject key identifier:   6D:E1:46:55:61:05:F2:BF:FA:BD:33:21:11:48:52:4A:68:34:CF:6B
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       01906C73F9ECD912B513E0EBC7A320CE5E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0872
Signing time:             Mon 01 Jul 2024 04:00:58 +0000
Manifest this update:     Mon 01 Jul 2024 04:00:58 +0000
Manifest next update:     Tue 02 Jul 2024 04:00:58 +0000
Files and hashes:         1: n9sqyD7y6cANEcgqoNAha3ECp3M.roa (hash: cEuXqKFPFjYmwdiNID7aiZrvPw3hkNAGFmB9GRX/nGk=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: nLzuyJUztxhkB2BpmF+krQhT2IvhuX0gxgs4gh4nZQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:73:f9:ec:d9:12:b5:13:e0:eb:c7:a3:20:ce:5e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Jul  1 04:00:58 2024 GMT
            Not After : Jul  2 04:00:58 2024 GMT
        Subject: CN=6de146556105f2bffabd33211148524a6834cf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:dd:cd:65:e2:fc:94:e8:e6:81:6a:0f:69:
                    60:5c:0e:87:aa:57:7c:ce:16:d8:10:01:ff:d4:91:
                    62:4f:5a:22:db:1c:ab:bf:8e:ec:da:29:6e:5d:71:
                    b0:04:b2:c9:36:15:ae:92:3a:70:a1:d0:b4:69:31:
                    7c:08:ae:3f:2f:4a:47:97:1f:62:b0:72:a7:a0:5a:
                    e4:e8:2f:f6:f1:43:ec:77:1b:12:24:9f:64:36:cd:
                    b4:82:e0:ef:e7:51:76:88:f0:df:25:1a:13:a1:a6:
                    6c:e1:17:d8:b6:cc:79:d5:31:ed:c5:91:dc:25:70:
                    f7:5b:bb:45:4b:e1:dc:4e:ea:26:a0:24:4e:4b:24:
                    6e:b3:77:8f:0b:d9:99:6e:a2:50:e1:8b:3c:68:74:
                    66:ca:73:a9:90:82:ce:86:1a:e8:b7:5d:b3:0b:6c:
                    df:e4:32:67:9a:ed:79:9a:80:19:a0:73:b2:fa:3a:
                    02:53:e8:16:c5:28:ba:12:76:1a:08:0a:02:8e:b7:
                    4f:78:f1:61:08:42:1b:62:84:17:b0:1d:17:4c:44:
                    f1:d1:8e:5d:01:7a:69:08:1f:39:81:5e:0b:85:06:
                    7c:17:89:47:fb:be:44:c6:2d:fe:e5:4f:fe:34:ea:
                    1f:47:3a:9d:50:b9:8e:12:52:21:52:a4:c4:b9:c6:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:46:55:61:05:F2:BF:FA:BD:33:21:11:48:52:4A:68:34:CF:6B
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:13:04:e5:d3:5e:8b:7f:74:6a:26:91:52:1b:13:cc:1d:ad:
         37:88:b8:75:5f:89:2a:14:c1:d1:9a:f7:aa:c5:16:f3:71:cb:
         ca:ad:95:12:34:2c:8c:48:79:b9:8f:ea:3a:2f:c5:a8:9f:17:
         e3:68:03:d7:e9:4e:16:88:df:43:6a:83:6e:27:5c:4b:ea:4f:
         59:a8:ab:70:3e:7a:b1:11:5f:ef:8e:eb:4d:b4:0f:da:a6:7d:
         98:8c:fd:33:66:9d:a3:15:52:40:47:8e:c3:10:32:2e:46:8d:
         5a:53:83:cd:71:6d:c3:7a:46:31:d7:5e:1f:0b:81:5a:24:86:
         b9:f5:68:3d:86:35:4c:ce:10:9d:b7:3e:ba:cb:30:d0:99:c8:
         1e:3e:39:f4:37:59:bb:3f:98:d5:a2:0d:1e:b2:0e:72:25:98:
         00:c2:5e:dd:41:4e:5a:45:f3:79:bf:a5:a0:cb:58:6f:fb:27:
         15:52:92:1d:94:25:90:1d:ac:71:f7:45:4b:31:95:56:c8:d2:
         b1:3a:8b:42:5f:9a:20:42:4f:fa:0d:c4:19:ea:5e:16:aa:8f:
         eb:a4:63:44:bd:b8:73:68:74:75:d1:1b:dd:af:77:a8:e6:8a:
         f0:fc:b2:e8:82:d8:79:f4:46:82:7c:b4:69:c3:bb:c5:b0:dd:
         7d:4f:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:52:31 2024 by rpki-client on console-fra.rpki-client.org