Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          QEojiGYI7ztVPWOAvpmrcTDqPynuFLfarw6S4Z/qhsw=
Subject key identifier:   C6:75:76:65:3B:E5:7F:D5:6B:2C:0B:79:00:70:F5:FB:B6:44:7F:9F
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       01905133C802C7EF71C0D8CD79E19577C960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          0AA5
Signing time:             Tue 25 Jun 2024 21:01:06 +0000
Manifest this update:     Tue 25 Jun 2024 21:01:06 +0000
Manifest next update:     Wed 26 Jun 2024 21:01:06 +0000
Files and hashes:         1: ueCqBZVRGFBQvlxmLZ9EJ58c_5s.roa (hash: X6BudFj0n/Ymet+5k4JG9etNAapG69Q2mgXdLmRaQbk=)
                          2: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: Q34IBQsvUvrDfS1zXaUMyvjoeuvjsEVmGoKHDJvJOHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:33:c8:02:c7:ef:71:c0:d8:cd:79:e1:95:77:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: Jun 25 21:01:06 2024 GMT
            Not After : Jun 26 21:01:06 2024 GMT
        Subject: CN=c67576653be57fd56b2c0b790070f5fbb6447f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:b1:5a:55:e2:e5:29:37:19:1e:45:5b:3d:
                    45:7f:6e:38:18:1e:f0:4f:00:37:a2:23:30:a7:5b:
                    91:b0:58:2a:e4:ea:6b:57:58:0f:25:8d:f5:5d:32:
                    ac:74:ed:15:5c:91:e9:8e:60:69:50:11:e8:8c:a1:
                    27:a5:75:37:1f:72:df:c3:cc:04:65:b9:ed:8d:88:
                    df:5a:ab:f3:ef:bc:5c:43:ed:b7:54:33:6c:cc:17:
                    ca:cf:36:c0:d3:39:f4:fe:e6:97:4b:bd:76:61:f2:
                    66:ac:3a:94:2d:f8:16:ba:9e:a2:76:7f:ab:08:0f:
                    28:1b:f9:22:80:fb:80:4d:38:26:db:e8:e2:3e:25:
                    16:f9:6c:b0:c9:6d:3b:a0:b6:02:bb:68:50:3a:ed:
                    36:6d:9b:a5:de:65:44:43:4f:8e:b4:15:79:a2:21:
                    cd:ea:b2:19:de:de:23:bb:1d:2d:93:c3:dd:02:58:
                    3a:75:34:60:68:aa:64:d7:68:5f:35:06:36:3a:31:
                    25:9d:02:07:f4:db:69:96:92:e0:8f:8c:46:2c:40:
                    a3:e1:32:ec:a0:2d:d4:b9:3e:48:94:0d:f9:fb:42:
                    21:5b:8c:91:ee:40:bf:0b:c3:a3:85:8a:2e:7b:e8:
                    e4:02:bd:da:ff:61:bb:83:34:e1:04:b2:df:27:fe:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:76:65:3B:E5:7F:D5:6B:2C:0B:79:00:70:F5:FB:B6:44:7F:9F
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:06:2a:88:8a:62:68:07:19:bc:18:3d:89:b6:5b:42:3f:
         44:ce:2b:a2:00:8b:f5:b5:85:a1:c5:3b:b1:e7:fb:69:9e:f5:
         a2:c2:cd:9f:ba:ae:7a:0f:36:10:d9:62:f4:ac:d4:4f:d1:02:
         d9:eb:8a:48:f1:60:1f:45:43:72:0f:5b:48:67:36:56:14:f3:
         61:40:46:ca:66:7b:0f:a6:62:3b:56:89:95:52:fc:86:c6:0b:
         a3:56:01:6a:19:f7:2f:34:10:1f:6d:02:c5:23:67:53:00:d0:
         aa:02:03:ae:a1:53:df:b0:2c:de:c2:a8:8c:1e:73:63:3d:e0:
         8d:fd:59:1e:4d:ea:1b:f7:d1:72:bd:ca:97:b6:3e:94:4a:58:
         1e:96:e0:9d:ae:4a:32:b6:fc:73:6b:dd:9c:ba:29:0a:3d:8d:
         04:24:f4:34:9f:28:99:c2:15:cc:f3:97:7c:90:2a:a7:f9:70:
         03:27:b5:54:96:c9:2c:a3:69:c0:9b:2e:33:22:07:35:dd:9f:
         e1:7e:e1:d0:4f:6b:a4:34:1a:0e:43:d7:f8:26:48:dc:fe:b4:
         b1:92:60:00:15:1d:48:5b:fc:0a:b1:44:b8:9d:20:ed:48:9c:
         d7:ba:f0:c7:cb:4c:34:9a:dc:93:83:2b:d6:ac:3a:70:aa:4e:
         d5:06:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:11:24 2024 by rpki-client on console-ams.rpki-client.org