Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File:                     wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier:          lbvk+edOkpuMA5fW6c0phO1zhdAtUv7FhqqBFCu6WZs=
Subject key identifier:   3B:8B:FE:C8:89:9F:C5:82:E0:0D:6B:0B:CA:59:17:D0:BA:4A:2F:DF
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer:       /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial:       01903EBFEF2C73B18EAD8A33478DAD49633D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number:          1035
Signing time:             Sat 22 Jun 2024 07:01:24 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:24 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:24 +0000
Files and hashes:         1: TH4Iw76PD_dPmMYl5-vu643ubQQ.roa (hash: iTAFy37vVAYU6HDV7zbK+JqlAyxJVfq9C9X7EXxqqKs=)
                          2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: 7XrDCThRkWnSjkrFtysJR4R0lgU5uCVH+YSeay6u09k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:bf:ef:2c:73:b1:8e:ad:8a:33:47:8d:ad:49:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
        Validity
            Not Before: Jun 22 07:01:24 2024 GMT
            Not After : Jun 23 07:01:24 2024 GMT
        Subject: CN=3b8bfec8899fc582e00d6b0bca5917d0ba4a2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:1a:45:70:ca:3f:17:8a:cd:39:26:0c:2b:
                    71:b1:01:7e:f2:cc:bb:4e:07:de:ca:96:85:5e:db:
                    46:ad:80:04:b7:8b:bf:94:eb:e3:55:2c:47:d0:97:
                    f7:45:c0:d0:6e:2d:03:4a:3b:4d:46:5b:70:c1:33:
                    60:12:1f:90:c1:25:59:85:57:ee:cc:eb:27:c0:dc:
                    af:7f:18:d3:4e:83:0d:e6:1e:3c:fc:fe:b3:56:62:
                    4f:0c:b0:a1:f2:f6:0b:4b:b3:59:6d:f1:59:b6:fe:
                    9b:7d:e8:b6:49:eb:28:f2:87:e4:dd:81:ff:6c:93:
                    9a:14:1e:8b:05:c5:79:54:35:23:99:85:66:7c:f6:
                    f5:e4:14:4c:12:93:4a:54:9a:6a:7f:fe:ae:b3:d8:
                    9c:f3:01:cb:cf:86:2a:99:3f:54:63:3d:e2:c1:e2:
                    1f:ff:39:ce:2d:06:1d:03:d1:dc:0d:6a:36:b9:14:
                    e4:5b:7f:46:9f:7e:82:68:16:05:20:06:83:63:c8:
                    7f:a3:5a:16:72:56:ff:df:e2:60:e9:1d:0c:6d:0a:
                    e7:20:48:61:60:15:9a:f2:1c:8d:23:a0:97:be:fb:
                    45:5c:5e:e0:29:ec:de:d4:50:2d:4e:de:32:54:83:
                    4b:c5:1f:70:7c:b5:5b:ef:d3:87:e4:58:03:c6:aa:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8B:FE:C8:89:9F:C5:82:E0:0D:6B:0B:CA:59:17:D0:BA:4A:2F:DF
            X509v3 Authority Key Identifier:
                keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:2d:2a:d8:06:5d:af:88:1b:49:96:63:1f:cc:b9:79:4c:
         41:fa:ae:98:fb:dc:4f:e3:58:f4:9a:12:dc:03:12:61:84:44:
         ab:33:95:d2:f6:16:00:d3:84:74:17:5e:88:ba:ab:bb:ce:32:
         14:7d:24:ee:9c:88:2d:cc:76:98:09:e1:a6:65:c7:d0:32:06:
         97:a3:04:eb:e8:61:c1:3c:ca:dd:90:c5:e9:e9:0a:90:34:fb:
         ca:20:c9:84:2b:90:ff:c2:97:6b:e2:d7:30:bd:52:a5:9e:5a:
         c8:3e:f4:b1:9c:cd:28:a9:ff:f2:7b:26:06:ff:15:ed:49:18:
         2d:e1:b8:dd:47:bd:17:7a:25:5f:1e:dd:d1:dd:0b:20:b6:07:
         97:c1:31:b3:86:f2:e7:54:5a:88:6f:f9:2d:8c:02:f9:28:12:
         d5:19:27:3c:58:b2:4f:49:e4:3c:a5:30:61:25:59:60:a7:e7:
         7f:27:36:75:25:dc:51:47:0e:89:6f:e6:a1:1a:5f:b9:94:5c:
         79:d9:68:2a:bc:0a:1c:29:2d:a9:73:b6:ed:c6:1b:12:07:b3:
         6d:21:a2:ff:08:89:8e:94:4a:f6:ff:07:13:83:3b:79:74:30:
         81:b8:2d:d9:a5:2d:a8:a8:dc:36:27:27:5e:cf:bd:76:d2:1c:
         b1:24:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:12:03 2024 by rpki-client on console-ams.rpki-client.org