Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          vAdZWD9x2ZnGt7eo1XISYGJPgyQp+VechJhPyjlWlZ4=
Subject key identifier:   3F:F4:E7:47:FA:7E:A7:9B:1B:C7:21:88:B8:F9:44:EA:90:8A:21:41
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       01923881713E19E37954F3511C24773F066A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          01A0
Signing time:             Sat 28 Sep 2024 12:01:00 +0000
Manifest this update:     Sat 28 Sep 2024 12:01:00 +0000
Manifest next update:     Sun 29 Sep 2024 12:01:00 +0000
Files and hashes:         1: MArImlxXhpjV9rZOzLDF1TNYRWs.roa (hash: QYSO6fwpJs03TgelXA3hpumLNRhvUCZKePfkOhthRRI=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: qbezr+6oNcavTgnu6YV+rtE6Lqq4fhPYXUvqqfhBTKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:81:71:3e:19:e3:79:54:f3:51:1c:24:77:3f:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Sep 28 12:01:00 2024 GMT
            Not After : Sep 29 12:01:00 2024 GMT
        Subject: CN=3ff4e747fa7ea79b1bc72188b8f944ea908a2141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:78:8a:59:c2:0c:73:54:d0:fd:4f:bf:13:
                    f8:d0:e3:8a:4c:40:16:c3:eb:cd:e2:80:59:ae:fa:
                    69:33:11:94:8a:f5:39:f4:c7:8a:24:d9:7f:05:1b:
                    98:83:a1:62:88:86:6c:b6:85:cf:1a:5b:6b:21:0d:
                    ac:d9:59:5f:80:6e:d8:9b:22:c0:31:2c:7e:16:22:
                    81:89:5c:ee:1e:83:09:2d:82:c9:b2:5c:9c:31:29:
                    be:9b:fa:fc:06:df:89:2a:00:0a:91:d4:10:5d:76:
                    8e:8b:66:76:de:cf:05:17:7e:34:93:0f:ee:2a:e2:
                    d7:6e:e5:d0:dc:86:82:3e:2f:23:bd:fa:54:e2:d8:
                    fd:5e:3f:aa:0d:50:7f:f1:c4:91:47:12:df:92:2d:
                    02:b1:58:7e:6c:92:9b:9f:47:4f:6f:38:4b:11:42:
                    ef:95:64:44:d4:62:3b:81:18:4b:68:2f:ce:58:45:
                    a2:fe:84:14:3a:16:55:a8:3f:28:9b:76:41:a8:07:
                    45:8a:a3:50:56:b0:26:d1:e6:06:5d:8b:b8:55:c3:
                    9d:88:b7:9c:48:c4:fb:79:80:52:d6:96:ce:46:d1:
                    90:d9:ba:a2:eb:06:ef:c2:f4:9c:39:e7:06:9b:38:
                    74:0b:81:3f:cb:15:9a:bc:b2:29:0f:30:cd:8b:b6:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F4:E7:47:FA:7E:A7:9B:1B:C7:21:88:B8:F9:44:EA:90:8A:21:41
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:84:df:ef:c2:cf:7d:cc:5d:67:ba:c2:d4:32:58:3e:b0:
         7f:88:22:8b:69:5b:fb:1c:96:a3:f8:b7:05:0c:47:e3:24:5e:
         bc:b8:f9:b1:19:22:cd:a4:e0:ac:d2:1d:c4:49:e3:4a:47:16:
         2a:b8:28:50:46:65:f4:13:e5:18:6e:a0:62:07:7f:8e:84:e7:
         3d:bc:b6:76:ac:7f:84:25:f3:10:e7:24:51:55:ed:2b:c9:24:
         7b:f5:fc:a9:78:94:c2:41:e2:a1:1f:3d:1e:29:bd:8a:0c:98:
         0a:4e:8b:79:77:61:52:19:5f:ac:93:92:c3:52:99:de:4b:96:
         ed:77:98:5c:9b:ba:8f:20:06:5d:d8:71:5a:ff:c0:34:7b:76:
         77:92:75:e7:1c:e8:21:4c:8f:70:9a:b5:7d:64:7a:92:4e:66:
         76:03:96:98:b5:4d:3c:f9:0e:67:65:11:88:d8:22:75:b6:c7:
         4e:c0:9f:fd:a2:d1:d5:60:30:e1:28:cc:fc:36:4d:be:dc:38:
         a9:a2:ef:f6:89:76:03:36:4a:f5:39:21:9d:02:1c:70:87:1c:
         e5:a7:97:55:d8:73:b5:81:77:d4:44:43:b1:1c:4f:f3:50:f1:
         e1:7e:8d:9f:fc:56:14:02:5a:d7:da:ac:43:54:4e:9b:fd:c5:
         bf:cd:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:52 2024 by rpki-client on console-fra.rpki-client.org