Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          KT3kFnosNkOs4/Af50BHO/Rcg91v51e4IfirmuHxHhI=
Subject key identifier:   69:24:0A:43:7A:A8:BB:22:55:BC:8A:C2:63:AA:E9:BD:20:CC:10:BB
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       0193696AB712EE34AFA90D69B479349732AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0AD6
Signing time:             Tue 26 Nov 2024 17:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:21 +0000
Files and hashes:         1: qOeiv2UGF0sC8089nG9ITAjdPOM.roa (hash: bcGWYleGli1rUpuFfMCLgXA40U8KXHVxVLdMDNWbZ9Q=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: G/otxMK3qBT6IiXRIO3Gc9kV6vMKdqWY5q8oKhTPvCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:b7:12:ee:34:af:a9:0d:69:b4:79:34:97:32:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Nov 26 17:00:21 2024 GMT
            Not After : Nov 27 17:00:21 2024 GMT
        Subject: CN=69240a437aa8bb2255bc8ac263aae9bd20cc10bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:99:ee:52:3f:1b:6c:ae:b6:ea:1d:d4:12:
                    7d:11:0a:7e:f1:ea:6c:bd:6d:5a:25:af:59:bf:7f:
                    44:49:20:a5:3e:50:ea:40:ba:69:3f:21:d8:00:6a:
                    19:6f:dd:d7:7a:f6:ef:86:c8:ed:94:a9:23:3c:3e:
                    a1:ab:70:65:5a:4e:c6:d4:70:7a:b6:93:e5:86:89:
                    58:47:de:8d:71:ef:87:aa:dd:c0:0c:4a:f3:21:c7:
                    7b:c9:cd:be:7c:b7:e7:5a:ad:50:b2:8d:e6:5e:ff:
                    70:25:ed:e4:85:af:59:48:da:2a:87:30:d7:54:ac:
                    b4:84:70:24:4e:32:77:f0:8d:86:3a:74:2d:5f:79:
                    d8:91:cc:42:ec:51:02:7c:44:34:1c:af:ac:c6:37:
                    36:0d:a3:9c:da:35:31:0b:1a:af:52:24:fc:6b:f2:
                    9c:aa:24:d4:c9:53:99:e6:e4:5a:69:b0:bc:2f:ef:
                    73:e2:a1:b6:47:41:13:93:c0:66:6a:92:a0:b8:72:
                    8e:5d:c0:d7:bf:e9:9c:f8:e6:e4:d8:00:ef:cb:54:
                    0c:19:c2:73:03:5b:82:16:6c:e9:d5:1e:a0:ff:c6:
                    be:11:7f:09:f4:c8:7b:33:34:06:a0:77:f7:3e:27:
                    87:81:aa:eb:17:d1:63:60:c4:43:5f:5c:e3:9a:59:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:0A:43:7A:A8:BB:22:55:BC:8A:C2:63:AA:E9:BD:20:CC:10:BB
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:01:40:77:d4:c3:77:8b:1c:de:dd:a0:7a:64:91:f6:79:07:
         9d:9e:59:b2:45:4f:f4:cf:56:80:70:8d:50:a8:93:f8:4f:e6:
         3e:89:5b:c2:84:1f:d7:4f:7a:e6:67:98:91:63:5c:e1:cc:f4:
         4f:af:15:4c:b7:f7:8f:74:e4:f0:60:ab:21:0b:35:5c:db:f3:
         5d:ec:ba:b6:24:be:aa:05:45:e1:ea:eb:75:ff:37:9e:43:9b:
         55:6d:18:ba:3d:d7:f9:f6:fd:33:5b:16:da:c4:a4:89:dc:31:
         76:da:1e:dc:47:8e:6f:68:63:d1:70:01:69:c7:b4:4f:c8:f7:
         e4:32:8e:58:50:7b:c3:0d:0b:48:db:97:fe:f1:50:02:40:cb:
         ba:12:92:4d:c0:55:76:34:1f:3f:ad:70:b6:8b:59:8a:15:e7:
         08:07:b8:66:fe:f3:9f:39:34:3d:fc:00:13:fc:1b:2f:ca:ae:
         58:d1:a1:f5:b8:ba:93:d3:d1:1f:fe:58:67:0a:fd:b1:aa:21:
         6f:df:b2:f2:79:8f:b0:21:15:58:57:d6:3e:90:02:4f:47:ac:
         49:e9:7f:cf:19:ca:5e:c3:7d:a0:ce:e9:61:16:37:db:00:34:
         da:b4:a4:29:1e:0c:0e:5c:c8:5d:d9:07:f3:15:43:37:df:8f:
         63:5e:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:48 2024 by rpki-client on console-fra.rpki-client.org