Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File:                     RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier:          cKImiq/ZXXKPoioj0fQPfN6xS+czVqAo+JG8hoZXT/0=
Subject key identifier:   7B:C4:BB:73:7A:24:EF:1F:17:40:6F:2A:3F:89:73:99:A3:D9:B6:F4
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer:       /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial:       01936B2209035FD87A4A433185F659D047BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number:          0788
Signing time:             Wed 27 Nov 2024 01:00:12 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:12 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:12 +0000
Files and hashes:         1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: 0bLgHkLytv5Uq3P4DWAPc8WYxtvcby5G5FGKzhgSGnQ=)
                          2: gcvCpbE4khZXi9z_8xfPnNSvkmk.roa (hash: RDYX4HENu4pVoDvX9fJGmpKPRburQx/t/S1MMBLGq4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:09:03:5f:d8:7a:4a:43:31:85:f6:59:d0:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
        Validity
            Not Before: Nov 27 01:00:12 2024 GMT
            Not After : Nov 28 01:00:12 2024 GMT
        Subject: CN=7bc4bb737a24ef1f17406f2a3f897399a3d9b6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:5c:8e:5f:6b:39:03:f6:63:50:d9:3c:db:
                    96:3a:db:cf:6b:8b:95:8a:6e:2c:33:8d:3d:1d:a7:
                    ee:a2:13:e3:64:b9:a6:b6:fc:0c:6d:a0:e2:12:bb:
                    46:3d:83:29:41:e7:f1:69:53:59:ec:cb:1f:9a:2e:
                    2d:22:f3:ef:d9:e8:a6:93:a1:90:95:30:e8:70:10:
                    e7:89:70:6d:87:14:b1:7a:20:d8:11:3d:6e:3c:e2:
                    51:10:b5:aa:84:d3:b6:3d:08:10:ea:fc:e2:40:36:
                    0a:a2:11:02:09:38:a3:2c:c4:7c:53:88:cd:57:ee:
                    43:6a:da:3b:8e:99:31:8c:d0:3f:87:15:59:94:4b:
                    fd:7e:b3:8c:12:9e:67:2b:4a:8f:ff:ff:c7:6a:72:
                    aa:92:12:ef:be:a6:cb:cc:cd:73:6c:b1:57:26:c2:
                    1d:5a:ac:fb:6c:d7:3b:eb:80:c0:6e:16:38:b4:ea:
                    dd:b5:ad:8a:2e:e8:ee:25:d7:a7:dd:ce:f7:88:6f:
                    bf:a0:9b:24:aa:53:c6:89:a3:27:a0:d5:13:35:dd:
                    cb:13:5a:1f:df:ba:c5:97:ad:9d:1e:4b:bd:54:4e:
                    99:2f:d8:92:f9:b0:c9:a6:93:21:7c:23:97:99:b8:
                    91:7f:5e:16:92:d4:4c:3f:73:4f:1e:cc:52:b5:56:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:BB:73:7A:24:EF:1F:17:40:6F:2A:3F:89:73:99:A3:D9:B6:F4
            X509v3 Authority Key Identifier:
                keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:52:42:6e:b1:df:a8:14:64:03:88:6b:91:64:25:ee:26:
         4f:36:92:58:f1:9b:b9:db:5e:46:6d:eb:6e:bd:e8:fa:19:b7:
         30:80:83:05:02:e5:82:99:c9:b8:56:44:9a:2f:84:0f:4c:5e:
         7d:54:6b:ec:10:6e:15:62:78:69:f9:fe:ee:6b:62:b3:9e:11:
         b6:00:6d:29:32:4e:78:e9:44:02:43:10:2a:bd:45:2a:5c:71:
         81:1e:3d:43:1f:c5:e3:57:57:01:bd:c3:fb:cc:89:ac:52:f3:
         74:36:25:51:9b:91:16:a6:8f:10:f7:e4:11:3b:62:24:c5:c7:
         d7:e8:10:71:f1:e2:47:f7:af:e9:7b:ce:45:b3:cb:ee:7a:5c:
         35:33:cf:92:f2:ae:26:8e:ef:5e:b3:28:90:04:10:fa:19:31:
         f6:e8:42:91:93:49:83:a6:d9:73:cd:bc:93:9f:92:78:98:50:
         10:6c:d3:e6:8a:19:6c:da:c0:ec:5c:e3:d4:94:1e:ed:18:f8:
         2f:13:53:85:95:d8:a6:2f:18:59:6c:df:8d:52:87:68:4f:93:
         b4:5a:89:04:8b:5c:da:53:01:8b:00:e7:7c:6b:59:e4:24:49:
         dd:48:28:9a:28:33:8c:e3:4d:1b:0c:ec:fa:b6:35:ab:b0:98:
         1d:36:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:21 2024 by rpki-client on console-fra.rpki-client.org