Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          pj5a4HEYnF3DPjJ2wcuNw5OR00kqt7PqXnK8lr1xg4o=
Subject key identifier:   29:7B:CA:D0:7C:D4:53:FE:73:D1:37:57:41:4A:2E:8A:04:D5:AC:A5
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       01935689AEB926696A2898910A91FEDC415E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          133D
Signing time:             Sat 23 Nov 2024 01:01:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:23 +0000
Files and hashes:         1: 5cn0p1Xp5ZPZaa90bq79qNXrsnI.roa (hash: EnglXaAjxe664C/lxORZPZDINt97qB5xOai6KYLSDtI=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: wxBGoVjTib2B0lySv2y3kmLvoMnx/e6j7kyRqt4JMq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ae:b9:26:69:6a:28:98:91:0a:91:fe:dc:41:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Nov 23 01:01:23 2024 GMT
            Not After : Nov 24 01:01:23 2024 GMT
        Subject: CN=297bcad07cd453fe73d13757414a2e8a04d5aca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:3e:87:cb:6b:3e:e7:42:c4:6b:95:b2:47:
                    55:e0:62:df:14:80:2e:ac:ff:e5:1d:2c:4e:cc:e1:
                    93:eb:71:3b:b6:78:ee:b4:86:44:1b:d9:71:ac:64:
                    cd:33:b0:63:69:30:3d:b0:b5:25:f4:4b:87:14:ac:
                    05:b7:40:5a:e7:fa:bb:bc:ac:cf:9f:91:67:a1:c5:
                    b0:7f:d1:a3:d0:f6:5d:46:cc:e2:12:8d:a2:a4:be:
                    4e:30:a8:3f:fa:60:51:f8:93:c4:0c:68:bc:fa:bf:
                    2b:ed:0f:e4:02:77:00:24:1e:16:d7:52:6e:3a:44:
                    50:97:88:b0:48:10:60:5c:72:b5:03:4c:67:70:dd:
                    1f:76:6d:2e:37:fb:dd:9d:d1:37:61:ee:b5:d9:28:
                    a6:c5:22:c8:da:aa:31:86:21:fa:4b:c7:90:66:bf:
                    05:97:77:cb:d5:11:07:b2:2e:2d:6a:4a:73:40:d1:
                    26:0c:bd:81:02:79:4c:53:a0:5f:c4:b3:78:27:16:
                    31:a2:a6:97:67:8b:3e:73:c2:d2:fa:ae:3b:2c:99:
                    f8:f1:a6:85:62:2f:c8:92:59:e6:4a:a1:48:16:c7:
                    e2:23:63:b1:2d:40:1a:b0:34:cb:58:16:cc:93:73:
                    b2:b9:6c:d2:ae:48:96:55:67:39:90:22:c2:a7:8b:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7B:CA:D0:7C:D4:53:FE:73:D1:37:57:41:4A:2E:8A:04:D5:AC:A5
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:f9:dd:a1:09:2c:54:79:49:ad:44:30:81:98:21:48:14:
         57:8c:04:01:94:38:fe:42:47:f1:73:a3:e0:dc:30:d0:ef:73:
         7e:f8:a8:5b:aa:25:4e:e3:eb:a1:b7:7d:9d:10:16:90:bb:06:
         ae:fd:ae:ff:c5:c3:db:cf:df:69:ec:1a:72:c8:e6:19:52:4e:
         01:97:d8:18:05:ed:2d:96:3f:d0:22:02:4a:61:8f:c6:05:89:
         81:3b:0b:62:ef:f7:db:e0:c9:ec:e6:a9:9e:66:7b:8d:7f:3b:
         08:da:5f:6c:14:8b:be:62:c3:07:b7:cf:c7:62:3a:f6:28:27:
         58:61:02:1c:aa:c3:e4:ff:f8:c3:c9:f7:8d:a8:0d:08:5c:92:
         28:ec:26:8a:2d:4b:2a:6b:a6:33:10:10:6e:6d:b3:fc:7d:14:
         60:4c:7f:82:b5:7d:f6:1b:65:c3:5a:fd:e8:39:29:c2:e2:f6:
         c0:ff:52:2b:46:ce:4f:38:52:08:48:5a:bd:1b:a5:5e:69:5f:
         92:a6:2a:cb:ef:47:f0:7d:85:ff:06:1f:5f:0e:ac:68:3b:84:
         ce:e8:68:4b:64:b0:76:dc:a7:c6:81:01:52:8c:47:5e:71:d0:
         63:93:4a:82:80:3d:fa:90:54:d1:17:2e:72:90:18:39:3a:c2:
         39:53:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:27 2024 by rpki-client on console-fra.rpki-client.org