Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          38ywbka6ukGPmjCc5HuLbYdUValegyZpOx/wLZ/veO4=
Subject key identifier:   2A:59:44:CB:9C:97:58:15:33:AA:9B:1B:08:94:1F:F3:09:8D:03:C1
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       0193587788BED1AB4952556CBD43D24F4F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          0EA1
Signing time:             Sat 23 Nov 2024 10:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:48 +0000
Files and hashes:         1: 3D9zEF1GX888S29Z2IZyFuTinNY.roa (hash: iQPT1xe9LnA1oqg3Q8kQQhy1YxZxcxS+xOQM+SgslQ8=)
                          2: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: C/neJFZhLFefBaC1HnwvAL5J2k1sZUs/eHCUFo+dNVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:88:be:d1:ab:49:52:55:6c:bd:43:d2:4f:4f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Nov 23 10:00:48 2024 GMT
            Not After : Nov 24 10:00:48 2024 GMT
        Subject: CN=2a5944cb9c97581533aa9b1b08941ff3098d03c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:84:1f:29:13:88:3c:aa:83:19:1f:b6:c2:
                    8a:72:6e:a3:ee:54:cb:70:e9:88:6a:85:3f:f6:d3:
                    59:4c:dc:aa:49:57:34:73:1e:cc:42:fd:55:4b:3a:
                    50:9e:2a:b1:27:43:ce:2e:db:3b:68:34:08:32:e9:
                    77:f1:d9:54:4b:37:04:80:96:96:d2:36:0e:34:e8:
                    18:b2:21:69:7b:01:19:8b:92:07:36:d1:38:fd:bf:
                    70:1e:6c:8d:6f:ca:c6:84:f5:47:d9:c1:0a:e0:bd:
                    e7:b0:b2:0b:2e:e6:69:9c:5e:37:6d:85:d7:0e:76:
                    89:69:93:38:d1:f1:43:24:6b:b1:5f:0c:48:c6:74:
                    0d:0f:64:c8:d3:a3:1b:af:33:f2:66:5a:ef:33:fe:
                    f1:84:c1:63:36:d9:16:2d:7b:3c:c9:38:46:76:24:
                    50:e6:66:13:a7:a2:fc:dd:ef:6c:60:95:a8:78:46:
                    a1:c2:f3:b7:18:18:f0:07:9a:17:53:f9:9d:51:73:
                    8e:89:de:4f:fd:61:73:df:9a:b7:49:d1:2f:84:c6:
                    a0:c7:0b:a6:c7:57:aa:d5:e2:d1:bf:d1:de:ee:18:
                    67:2e:11:8c:ee:47:98:13:e0:72:58:20:14:bb:ec:
                    39:ee:34:61:f7:71:c6:7a:f3:23:58:bb:30:74:51:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:44:CB:9C:97:58:15:33:AA:9B:1B:08:94:1F:F3:09:8D:03:C1
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ac:08:d7:21:41:cb:e9:21:b3:16:4f:c9:95:29:01:36:45:
         c8:2d:bc:9e:9f:63:89:5b:3a:43:66:25:11:72:a4:af:55:72:
         f5:e1:6b:14:17:65:91:f8:48:bb:34:12:ac:16:94:2c:f3:cc:
         af:e0:50:04:47:b9:e2:77:b6:be:37:15:e8:bf:a2:0c:ef:e8:
         c4:a5:f3:a8:5a:5e:40:e0:d4:31:ad:8f:ec:67:ae:d9:66:6a:
         15:9b:53:18:a5:bf:a7:91:88:74:60:29:54:4e:0c:76:f1:6b:
         2f:0f:72:11:e3:67:0f:24:fc:c8:79:9c:e0:c6:1e:ee:a7:5a:
         ff:d5:24:26:23:fd:81:0f:e9:4a:dd:2f:b2:ef:e2:4b:5b:8c:
         23:55:44:3d:ea:61:18:5a:66:29:75:60:ba:66:7c:12:43:22:
         b9:1e:98:c1:d9:13:c8:ac:11:6a:3f:c2:f7:00:ef:db:a9:1b:
         7f:8c:0d:4a:0c:07:3d:22:e3:6c:fb:97:d3:7f:4a:3e:ef:65:
         24:3f:86:f3:db:b4:2b:8e:a1:f7:c3:90:6a:67:65:2c:20:a0:
         6d:01:61:fe:80:07:b0:37:1a:f9:d5:ed:0f:10:ef:ea:d7:92:
         58:8a:be:4d:e6:4b:41:d1:e0:20:ea:80:38:14:bf:f8:ed:e8:
         b1:30:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:09 2024 by rpki-client on console-fra.rpki-client.org