Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          Z8cycuiCAS6NblOoI96tKDkZ01bCHFEls8yseYWJDK8=
Subject key identifier:   3A:6C:8A:AC:15:5D:64:CB:84:6C:50:39:F9:BB:56:32:5A:7D:C3:95
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       019352ACE4368CD002932B505F081389D509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0830
Signing time:             Fri 22 Nov 2024 07:01:22 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:22 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:22 +0000
Files and hashes:         1: lepZTO91Nrz3HkpOj8aq_sZ6MqE.roa (hash: RmB6qGPFLyMtqh/W9CgECKeVGRltIECDz3wwF1ZpC4c=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: jgWd9ToRA5eecgogOx1n+ZhBqyhY1tusQXMY7owySgw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:e4:36:8c:d0:02:93:2b:50:5f:08:13:89:d5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Nov 22 07:01:22 2024 GMT
            Not After : Nov 23 07:01:22 2024 GMT
        Subject: CN=3a6c8aac155d64cb846c5039f9bb56325a7dc395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:9d:90:60:25:0e:81:b8:ef:b3:6d:9e:75:
                    01:a7:ec:77:bd:e2:31:e4:c2:20:48:fd:38:b7:15:
                    da:e0:2b:79:e4:a8:d4:9e:51:c1:b5:04:63:f0:85:
                    d4:7a:0f:64:80:51:26:a4:0a:08:1c:5b:c3:ad:24:
                    81:76:18:df:c4:60:13:f5:7b:6c:7d:cb:b9:04:c5:
                    1f:10:36:fd:2e:69:88:70:2b:2c:70:53:75:44:14:
                    8b:27:63:d5:77:54:cb:e2:53:18:e2:35:a6:e1:9f:
                    cb:21:21:cb:85:bb:ed:65:52:73:d3:39:df:a4:2b:
                    7d:c5:e0:2d:45:56:50:2a:2c:f5:17:24:f6:39:af:
                    c5:d0:34:42:3a:ec:31:4d:8e:eb:a4:45:67:53:39:
                    92:fd:e5:65:d4:71:f5:11:76:b4:04:0d:29:21:e1:
                    1e:88:ec:1a:dd:1f:69:12:bb:00:b9:cc:8f:99:ec:
                    a0:87:e2:4b:b9:0d:9f:ce:f7:df:f4:93:a4:d4:0e:
                    bc:4c:07:67:0c:e9:e4:5f:aa:7e:07:84:27:79:8d:
                    f7:b3:55:ce:e5:41:aa:ee:c0:66:9b:8b:97:f7:d9:
                    36:d3:34:b8:10:8a:05:b3:63:4c:7b:aa:3f:d2:e6:
                    51:12:50:50:8d:88:44:61:0f:37:0d:15:bf:03:a8:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6C:8A:AC:15:5D:64:CB:84:6C:50:39:F9:BB:56:32:5A:7D:C3:95
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:fb:65:a1:ce:1d:97:59:f7:f4:33:bf:8e:a0:65:a7:90:
         90:8e:2b:05:bf:7b:2a:d3:0f:8b:c6:a4:b4:42:dc:87:28:3a:
         58:16:56:4c:4e:4a:8b:51:fc:fa:ba:07:c5:63:f2:87:fa:34:
         ad:ed:fa:51:cd:b5:50:a0:d2:4f:ff:27:3d:cf:47:4f:d5:91:
         e7:4a:14:79:14:fd:52:ba:9f:2f:44:2d:06:0b:48:12:31:86:
         3e:34:c4:51:18:68:9e:bc:99:06:7b:cd:c2:a6:86:2b:b9:ff:
         92:1e:b6:e3:ad:cc:2a:0a:ee:08:12:27:ef:16:f8:68:e4:a2:
         4d:cc:42:c3:df:4b:32:c2:0b:9e:33:5a:a4:e7:a8:92:0a:02:
         7e:e6:e9:03:22:5a:f5:b3:fa:ac:de:97:cf:ba:41:58:44:ae:
         50:8d:34:a1:b9:f7:f4:f7:72:fa:53:c9:7f:37:ed:da:13:fa:
         e9:58:a9:b4:6f:c4:ec:22:a7:9b:15:f0:4a:6a:6c:6e:33:ea:
         f2:49:dc:97:16:f9:ab:86:7b:b0:07:89:69:8a:0d:4b:e5:99:
         c7:05:1a:c8:59:d7:01:d5:77:76:37:2a:9a:2c:90:d9:ac:7a:
         2f:1f:2a:3d:05:97:bd:d4:15:31:b9:d5:84:b9:0f:7b:4b:cd:
         12:ad:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:10:00 2024 by rpki-client on console-fra.rpki-client.org