Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          WkNPLMjdVX7XGsYPIQENmvAm9DMcPhQB4F4mHRH5fl0=
Subject key identifier:   10:E1:2C:29:7A:61:9D:1B:C1:A5:F8:F2:B1:2C:20:F8:5A:05:A5:6E
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       019354D154A6251FBC34CB068BAE95D2FD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          0601
Signing time:             Fri 22 Nov 2024 17:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:25 +0000
Files and hashes:         1: 9lqNTB-Sy4YR1Ab0XI57a66X9Bg.roa (hash: Aq5VEaDTAfSmxn/0pxATZ4zrvvQwH4BRl0xMdXrXbuw=)
                          2: IRM-p8ylbn9c8W6kf8BdXILzovk.roa (hash: tNBGNv92MO/GO8MtTj/HKP1LC3LJvQGjPoRc6wHnmwo=)
                          3: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: A6qc+lQEv2o0tsmzKYVFoMg3RzdUZNrZ6CFtdmIvKfw=)
                          4: fGdpO31JlgHxGWh3k5SvTBNpbkw.roa (hash: zqy5jRhLqwKvdrwdBIG9FL3JylpehexjnqF4a5p8lpA=)
                          5: oYsUuh3m_CE9WVUbVnbJlYB-tkU.roa (hash: HVlg+sJTQr0HD1JXFx+NFqvKiu2I41xDaHn29k4K0Y8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:54:a6:25:1f:bc:34:cb:06:8b:ae:95:d2:fd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Nov 22 17:00:25 2024 GMT
            Not After : Nov 23 17:00:25 2024 GMT
        Subject: CN=10e12c297a619d1bc1a5f8f2b12c20f85a05a56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:e9:6f:61:07:e5:95:2d:91:f7:94:5b:c3:
                    15:94:6a:98:13:2e:5d:ec:7b:d3:31:bd:c2:cb:3e:
                    3e:f5:28:a5:98:ee:9b:a9:8b:33:b8:3f:bf:c9:26:
                    ef:1d:ef:ab:be:cb:4b:ed:a6:5e:e7:7d:38:34:a6:
                    a2:35:d5:0b:14:47:93:36:a6:96:ec:fc:ca:7f:d3:
                    02:98:7f:7e:57:df:2c:ff:14:67:ec:ec:fe:0a:06:
                    61:a6:aa:f7:5b:9e:f0:31:b6:0b:54:36:53:02:e8:
                    be:d3:11:f8:5a:08:c3:53:dc:7d:b5:60:7c:90:c9:
                    4e:5b:e1:ba:82:aa:78:be:1d:ad:05:55:79:a6:2a:
                    e2:72:98:e3:3a:44:cf:aa:2d:ee:74:7d:2d:17:da:
                    10:59:f3:13:bf:8e:da:e9:3c:d1:e1:48:51:42:c8:
                    05:54:82:93:62:f0:56:e8:3d:f2:b0:2b:91:0c:59:
                    14:a5:ae:a2:f4:9f:de:dd:0e:2d:32:9e:96:46:a2:
                    f9:ca:29:f9:c8:17:09:54:e5:5f:ee:e9:30:b1:9d:
                    24:c1:5d:f8:46:e0:90:0e:55:48:1d:bd:84:18:fd:
                    28:4a:52:c1:64:09:03:49:86:29:ba:97:71:31:da:
                    0c:48:0d:ae:c8:81:44:42:70:2e:b9:04:73:2a:e4:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:2C:29:7A:61:9D:1B:C1:A5:F8:F2:B1:2C:20:F8:5A:05:A5:6E
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:eb:23:8a:b6:85:2c:35:10:4d:b0:07:e0:4b:ad:e2:fc:
         0c:60:ba:37:86:bf:3f:71:39:3b:59:cb:43:c3:eb:df:eb:e8:
         c0:31:09:8b:be:1a:29:14:95:7a:e5:9f:a7:00:01:2f:c5:f3:
         8d:9e:82:17:1a:eb:eb:e8:b5:7a:b8:0c:5f:e0:06:1c:49:35:
         b4:6e:16:14:84:5e:5e:37:08:44:b6:66:7b:e8:04:c9:d8:2e:
         58:4b:f2:09:9d:4d:68:3a:57:2d:86:03:19:3f:17:c9:66:bb:
         ee:66:3f:cd:33:ab:24:6e:c2:64:c6:96:a4:d0:ed:46:68:0f:
         3b:45:a2:c0:31:10:12:39:3a:90:75:32:90:d4:f0:7a:a2:84:
         ce:e2:43:cc:74:99:ee:0a:d5:3c:41:2b:85:ac:b2:00:d6:23:
         c1:07:af:32:cf:e9:ad:de:2a:0a:71:e9:10:3f:9b:7a:d1:2e:
         f8:57:94:56:74:87:0d:84:ac:0c:9c:78:2a:a3:d2:30:26:c9:
         e2:57:e9:81:77:96:0c:ee:fc:ae:86:e6:66:2f:5b:f5:a2:fb:
         82:b4:b8:4e:ed:6b:8c:e5:87:c6:62:1e:50:0d:16:34:02:93:
         e8:ed:3f:b6:2e:c2:8d:dc:e9:3c:73:3c:ec:b6:26:5a:d7:00:
         91:ed:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:30 2024 by rpki-client on console-fra.rpki-client.org