Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          q2+zSu8V85OgDUNyq8k2GQsv86j6jPPkxch0L0nwKbw=
Subject key identifier:   CA:5E:D1:A1:85:EA:86:C5:03:D6:5A:71:44:BA:99:FA:0D:56:94:F0
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019352ABFE3729591793D0BCFAE3A043F1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          075A
Signing time:             Fri 22 Nov 2024 07:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:23 +0000
Files and hashes:         1: 66lfYeW1WJqP2rYF6iOuVX68v_I.roa (hash: mmTcjBZ9gayvM2EwkWksKCDqpbwBNcrpAv+IEhgXZzA=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: Q0tMIpZAz/pSHxvpwv+S6c8GP57qrgzpG/7/4EDbYFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:fe:37:29:59:17:93:d0:bc:fa:e3:a0:43:f1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Nov 22 07:00:23 2024 GMT
            Not After : Nov 23 07:00:23 2024 GMT
        Subject: CN=ca5ed1a185ea86c503d65a7144ba99fa0d5694f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:db:72:9e:bc:e7:45:94:b8:83:33:ec:22:
                    db:58:a7:c3:64:00:7a:48:c8:21:87:a6:89:10:ee:
                    73:16:0b:23:00:a6:c1:55:32:d0:8a:4a:03:ae:db:
                    a7:53:8d:7f:7e:e4:51:a1:ca:67:6d:50:38:6a:72:
                    d1:24:70:a6:40:75:b9:e5:04:f4:0c:fd:41:3c:f3:
                    28:2a:18:ff:6f:fd:ef:d3:84:1d:d2:ff:4d:9b:16:
                    fc:1a:25:47:8f:12:8a:55:fb:2c:7e:c2:ed:ec:a5:
                    b7:ea:01:da:db:1a:a9:2d:5a:39:59:bb:36:99:7f:
                    77:69:11:b1:e5:48:c8:27:3a:55:ac:dc:3a:67:c8:
                    fc:7d:06:e0:17:33:0f:ec:13:88:72:2f:7f:f6:ae:
                    6d:5d:d9:8f:bd:02:89:0d:cc:8e:9c:f6:7f:49:f9:
                    86:75:10:a6:24:94:99:bc:93:22:b3:a8:2a:cf:25:
                    04:ed:d1:f7:1a:12:9d:3c:bd:1b:20:7f:e5:e7:fe:
                    53:41:fb:12:50:48:ec:06:f3:7d:89:26:6a:91:cf:
                    04:88:c4:bc:8e:6a:64:0c:90:22:79:60:7c:bf:74:
                    47:a1:75:dc:2c:b8:b3:bf:07:56:94:1a:24:47:e6:
                    c2:3e:30:42:30:20:3a:29:25:f7:9b:37:ef:22:18:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:D1:A1:85:EA:86:C5:03:D6:5A:71:44:BA:99:FA:0D:56:94:F0
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:68:ef:99:8e:29:57:61:39:12:ef:b9:c2:b8:78:a2:4a:
         b5:0f:fa:e4:d3:c5:39:b6:b3:38:51:3b:bc:27:fe:88:ec:94:
         f2:1e:5b:70:e1:ba:e1:d7:53:c1:d0:79:46:4f:0a:45:42:f1:
         59:8e:fa:83:1f:2d:28:da:aa:3d:69:b3:0e:23:42:cb:bf:22:
         e8:a1:86:21:79:38:0d:db:9f:50:8c:7a:22:86:93:e2:9e:9c:
         62:31:83:46:61:29:65:65:f0:7e:fc:90:4a:06:8a:ed:7e:b3:
         3d:27:58:49:8a:08:dc:70:24:89:ee:b0:d4:f1:1b:bb:c4:98:
         c6:20:07:0f:41:71:e8:4f:d2:7a:51:b0:b5:c2:6a:17:3f:b0:
         49:90:f7:10:99:b8:e6:03:f4:43:f1:6c:ec:32:e3:82:54:3e:
         b1:e7:fc:ca:17:f9:2c:a8:6f:03:3f:e7:13:d3:65:31:3b:03:
         8d:ad:16:86:f4:86:98:ad:4d:fa:ea:72:6e:d8:6d:76:9e:79:
         bc:5d:8c:03:6e:69:9a:40:b9:1e:1e:b1:c1:b7:ce:c5:67:89:
         af:04:a7:b8:71:b7:9a:39:e9:cc:d8:7e:59:e4:cc:ce:31:0d:
         6a:ad:8c:ff:c9:eb:b0:99:cb:30:cc:21:19:a9:3d:5a:43:40:
         57:1f:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:55 2024 by rpki-client on console-fra.rpki-client.org