Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft
File:                     W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft (raw, json)
Hash identifier:          IN+vJyH6NuVqRJ+wDWqpo/tNPy5HHJmX7f+8Cj6Bs3w=
Subject key identifier:   DC:11:84:E1:A0:EC:6A:A2:98:D9:C8:0A:DE:32:81:F2:2A:2B:05:80
Authority key identifier: 5B:78:C5:11:A6:2C:2E:5B:94:F0:69:3D:F6:AF:94:7E:5D:E2:10:C0
Certificate issuer:       /CN=5b78c511a62c2e5b94f0693df6af947e5de210c0
Certificate serial:       018F874989556CA73F40427EB4C858051EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3jFEaYsLluU8Gk99q-Ufl3iEMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft
Manifest number:          06FC
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: W3jFEaYsLluU8Gk99q-Ufl3iEMA.crl (hash: lwiv/6K53m6kbt8pAmMlCpfguMojc7dlm9xvEFDACdI=)
                          2: _7g4esXxGIxS-ErNGqEeA-Z5kDM.roa (hash: I7Pg98pvGoa56nM5RHPWEp9fADPBgssy/gnQhw+G+VU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3jFEaYsLluU8Gk99q-Ufl3iEMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:89:55:6c:a7:3f:40:42:7e:b4:c8:58:05:1e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b78c511a62c2e5b94f0693df6af947e5de210c0
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=dc1184e1a0ec6aa298d9c80ade3281f22a2b0580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:b7:4b:eb:96:55:6e:60:ec:35:1f:35:f0:
                    62:ab:07:94:f6:aa:fa:d8:8f:1c:72:f8:1d:9d:66:
                    fa:86:c7:79:f3:4b:b3:b8:fd:c0:72:6c:43:4c:c0:
                    f1:d3:9b:18:fe:3c:b4:57:28:7c:44:ab:94:b4:b7:
                    4b:1c:21:5c:3b:6c:db:f5:0e:98:15:81:d1:3f:24:
                    a5:5b:d8:04:8f:1d:7f:ad:47:0b:92:06:55:5e:e0:
                    bc:01:e3:15:cd:6a:05:96:b8:4f:2a:7d:eb:21:44:
                    4d:17:68:26:62:d7:f1:81:85:1b:aa:54:88:69:20:
                    d6:5f:e4:1f:8e:12:5a:eb:df:25:8b:6c:a5:2f:2c:
                    76:fd:b4:bb:96:58:08:1d:66:e0:a3:09:d3:ce:99:
                    85:3f:82:f7:e2:3e:e7:93:fd:d1:e6:ac:ed:16:10:
                    5b:d3:2a:ea:4c:bd:dc:fd:e2:51:6e:7e:3d:3d:c4:
                    0e:b9:48:c5:fa:8b:21:ed:76:09:13:f4:1c:f0:f2:
                    91:57:5e:86:d6:a0:96:fb:16:12:fe:83:80:d5:a8:
                    36:e0:f0:14:1c:7b:f0:3c:1a:8a:47:23:f1:e7:28:
                    33:bd:03:6f:d8:fa:bc:4e:e7:d7:3a:3b:e3:3a:e2:
                    03:fe:70:8a:cf:e7:55:1c:5c:d5:03:3a:60:b5:1c:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:84:E1:A0:EC:6A:A2:98:D9:C8:0A:DE:32:81:F2:2A:2B:05:80
            X509v3 Authority Key Identifier:
                keyid:5B:78:C5:11:A6:2C:2E:5B:94:F0:69:3D:F6:AF:94:7E:5D:E2:10:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3jFEaYsLluU8Gk99q-Ufl3iEMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fbf160-63c8-4e04-9100-e6343c34a0be/1/W3jFEaYsLluU8Gk99q-Ufl3iEMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:95:78:34:bf:e7:bd:65:af:28:0c:06:a3:af:40:67:e0:7e:
         82:6e:95:e0:52:6e:57:b3:2a:72:7c:7c:ce:60:fe:92:22:19:
         cd:7f:a7:7a:be:40:2c:c9:f2:8e:b9:e0:50:ba:dc:92:6a:9a:
         dc:dc:75:44:55:fe:3e:ad:e6:6e:f2:0e:ee:b9:17:20:ea:eb:
         50:cf:ae:02:64:e6:a8:2a:e9:bc:e8:c7:f2:a0:5d:0d:fd:da:
         58:95:d0:9f:62:7f:36:99:10:e3:7d:02:36:7b:91:db:60:11:
         5b:f5:e2:42:39:16:e1:6e:d2:42:6e:47:2a:b0:af:47:35:d0:
         d0:79:30:68:92:5f:99:d4:34:a4:7b:e4:45:d3:3e:5e:a1:2c:
         91:6b:49:dd:56:55:31:85:62:6d:b6:84:c4:b1:77:54:bd:3b:
         0a:d7:da:36:7c:ad:01:16:13:f5:59:00:06:48:67:f1:53:04:
         2f:a8:fa:aa:a5:92:7a:da:63:9c:94:97:d5:85:00:98:61:5f:
         7d:27:16:ec:3a:db:a1:11:9e:c9:00:9a:37:5f:9d:de:de:bd:
         d8:63:8e:d0:37:23:b5:b1:82:e5:b4:31:90:2a:f9:b3:56:45:
         54:68:83:9f:f8:4a:6a:be:55:99:80:cf:f7:4c:e2:03:bc:44:
         bf:23:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:23 2024 by rpki-client on console-fra.rpki-client.org