Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          8jACDTt8LkPWvKlV7ql48lF7iYuYJIL9HxzBZ7oEyVg=
Subject key identifier:   2C:75:F2:FA:FD:96:9E:61:A9:CB:F1:39:37:99:D7:D3:8D:BD:85:76
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       019359C0EDD5EBE0D5C11C803FC6644F9433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 16:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:36 +0000
Files and hashes:         1: ZP48IiYpdP99LWwYLKHRryB7cJg.roa (hash: VLWXOWFfEcw9usV8wFb/l0C+PPZmI6dpdtKJPfPGv08=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: 61/QK88DSjsUdoDDbvgCaJtOLxR1M1hqciL9BdZAaLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:ed:d5:eb:e0:d5:c1:1c:80:3f:c6:64:4f:94:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Nov 23 16:00:36 2024 GMT
            Not After : Nov 24 16:00:36 2024 GMT
        Subject: CN=2c75f2fafd969e61a9cbf1393799d7d38dbd8576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:c0:d8:48:c9:d5:dc:73:34:87:f0:87:de:
                    c9:c4:02:85:54:21:dd:01:23:ad:a0:2c:4b:66:11:
                    fb:46:fc:78:9f:6c:1e:4e:50:0a:28:3a:af:90:58:
                    a2:a4:87:42:63:f9:3b:45:7d:84:6f:3a:12:ab:00:
                    69:09:5b:0f:ed:a4:c5:e0:4a:f9:f8:8d:f3:5b:d0:
                    08:61:82:6a:49:77:1c:09:bf:83:e8:c7:0b:9f:5e:
                    cd:94:e0:28:2a:38:d4:a1:e7:75:b2:bb:de:b6:ec:
                    2a:89:be:db:21:e0:ae:28:01:f6:a5:5e:40:39:2a:
                    65:24:6a:65:ae:76:83:79:f6:f5:1f:c7:57:8e:0c:
                    5e:f2:b2:ba:39:e4:1f:94:5f:69:3f:d9:37:e6:28:
                    44:2f:dd:1b:e8:5c:7d:20:06:1c:47:81:bd:76:fe:
                    32:a8:a2:28:07:c2:2f:df:87:8f:81:9c:a5:be:af:
                    67:55:c0:48:02:44:35:1d:60:22:80:31:ed:b6:52:
                    ed:5b:1d:a6:b5:1c:38:18:fd:c3:82:96:eb:ca:c2:
                    c6:06:23:cb:51:6b:97:1f:a9:32:a0:45:ce:4b:0d:
                    a0:6e:e5:f0:78:64:e0:68:c0:0e:c7:73:8c:72:00:
                    bf:29:3d:ab:f7:cc:48:e4:4a:76:69:9e:18:44:b6:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:F2:FA:FD:96:9E:61:A9:CB:F1:39:37:99:D7:D3:8D:BD:85:76
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:56:74:b4:c7:3b:18:d0:74:a2:91:9d:bd:bb:d6:4e:b1:63:
         4d:30:35:6a:59:1f:8a:79:a5:97:10:2a:0f:2a:68:97:3c:21:
         78:5b:8b:ff:64:a6:23:b1:a3:52:ee:07:53:0d:d4:55:f6:ff:
         12:5f:c2:1b:31:ad:dc:6d:9a:26:f1:af:30:7f:af:3a:ec:8f:
         bc:d4:fb:f5:a0:24:b4:74:2f:2c:1c:95:ed:77:50:a7:b4:a0:
         d4:f9:3f:93:47:db:54:2c:95:de:12:02:bb:9f:41:df:9a:42:
         59:7f:0d:50:2b:16:f5:81:34:0d:c7:70:ba:86:43:38:6d:2c:
         0b:48:c2:bb:ca:99:86:12:b2:4d:22:74:a8:81:e4:be:22:62:
         f9:3e:bc:25:c5:15:27:15:e6:5f:c0:7a:7e:6e:a1:81:dd:88:
         f6:51:6d:d1:68:05:d3:22:6b:8c:e9:b9:a7:21:b8:09:b3:a5:
         dc:d2:04:89:a3:35:ca:34:5d:d4:c7:21:0d:c1:fd:77:50:33:
         dc:db:65:f9:48:06:67:19:67:64:d6:2e:56:6b:42:c2:5b:52:
         00:f3:75:36:9c:3c:c6:ce:c3:87:ac:9a:2b:1d:7f:a6:f9:07:
         b0:f4:4a:d3:24:fc:d8:cf:cf:84:95:d2:88:82:78:0f:8d:ec:
         0a:5d:c1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZwO3V6+DVwRyAP8ZkT5QzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx
NDg2ZTQwHhcNMjQxMTIzMTYwMDM2WhcNMjQxMTI0MTYwMDM2WjAzMTEwLwYDVQQD
EygyYzc1ZjJmYWZkOTY5ZTYxYTljYmYxMzkzNzk5ZDdkMzhkYmQ4NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr7A2EjJ1dxzNIfwh97JxAKFVCHd
ASOtoCxLZhH7Rvx4n2weTlAKKDqvkFiipIdCY/k7RX2EbzoSqwBpCVsP7aTF4Er5
+I3zW9AIYYJqSXccCb+D6McLn17NlOAoKjjUoed1srvetuwqib7bIeCuKAH2pV5A
OSplJGplrnaDefb1H8dXjgxe8rK6OeQflF9pP9k35ihEL90b6Fx9IAYcR4G9dv4y
qKIoB8Iv34ePgZylvq9nVcBIAkQ1HWAigDHttlLtWx2mtRw4GP3DgpbrysLGBiPL
UWuXH6kyoEXOSw2gbuXweGTgaMAOx3OMcgC/KT2r98xI5Ep2aZ4YRLbuaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx18vr9lp5hqcvxOTeZ19ONvYV2MB8GA1UdIwQY
MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt
YWRiMzAwZjcyMjVhLzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh
LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVZ0tMc7
GNB0opGdvbvWTrFjTTA1alkfinmllxAqDypolzwheFuL/2SmI7GjUu4HUw3UVfb/
El/CGzGt3G2aJvGvMH+vOuyPvNT79aAktHQvLByV7XdQp7Sg1Pk/k0fbVCyV3hIC
u59B35pCWX8NUCsW9YE0DcdwuoZDOG0sC0jCu8qZhhKyTSJ0qIHkviJi+T68JcUV
JxXmX8B6fm6hgd2I9lFt0WgF0yJrjOm5pyG4CbOl3NIEiaM1yjRd1MchDcH9d1Az
3Ntl+UgGZxlnZNYuVmtCwltSAPN1Npw8xs7Dh6yaKx1/pvkHsPRK0yT82M/PhJXS
iIJ4D43sCl3BoA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:29:36 2024 by rpki-client on console-ams.rpki-client.org