Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File:                     wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier:          jHK17GgNAzzTQP/A4aXg4hCmh3IX9lzyPT64KFLLnos=
Subject key identifier:   64:86:E3:C9:40:A9:F0:B2:73:F4:59:1E:CA:72:24:8E:7B:DE:FD:A7
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer:       /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial:       019234DC11F6C3249C045A49A5C53A7DC80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number:          0A8A
Signing time:             Fri 27 Sep 2024 19:01:30 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:30 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:30 +0000
Files and hashes:         1: 1iIMV0xcQS1X0IvTEzr37_aN5Mg.roa (hash: i1CYlIfjXKxrwNycaDxbcCnF2ZgCNk6yZxiroOwwPqM=)
                          2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: fqGaLrd32jMRCA+hfPffx4O1ml9mwR3miN6V/9pp7fA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dc:11:f6:c3:24:9c:04:5a:49:a5:c5:3a:7d:c8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
        Validity
            Not Before: Sep 27 19:01:30 2024 GMT
            Not After : Sep 28 19:01:30 2024 GMT
        Subject: CN=6486e3c940a9f0b273f4591eca72248e7bdefda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:6b:24:d4:70:73:72:1f:8f:57:77:e0:fe:
                    10:87:1a:91:d6:23:d0:fb:80:91:df:74:2c:26:16:
                    b9:af:4b:48:76:20:eb:5b:57:8f:c0:4e:04:d6:df:
                    47:54:3f:e2:6b:a1:2a:f6:7f:42:57:43:f2:bc:0a:
                    5c:20:dd:6c:b2:42:b0:c6:0b:1f:fc:15:f2:ec:1e:
                    f7:b1:83:59:e4:10:be:84:9d:bb:9d:b5:d2:d2:5e:
                    f6:af:d3:be:42:fa:36:02:ad:85:b4:1d:02:06:53:
                    18:ce:bd:c2:99:49:03:62:d9:44:d0:2c:d5:81:c0:
                    2e:a3:0b:f2:5d:c3:ff:e8:dc:a1:a3:6c:6d:ca:71:
                    09:3f:b7:e2:9f:ea:5f:2d:09:65:5a:a2:30:96:58:
                    ef:30:90:d0:42:b9:c4:82:c7:0c:16:b1:38:ec:a9:
                    e5:7f:e2:88:a0:69:ea:d6:3e:2f:60:0c:06:97:55:
                    3e:5d:f2:c9:07:48:32:1b:5c:4a:e7:28:78:0e:a8:
                    ae:2b:9d:42:72:23:34:e7:47:b7:ff:7e:e1:4a:74:
                    9e:67:3d:1d:a4:15:25:a6:fd:64:b9:e6:25:c4:df:
                    49:3c:f8:be:b1:b9:24:89:2e:a1:6b:7c:fa:fe:0e:
                    bd:62:cd:4d:0c:8b:ee:de:3f:fe:7d:40:02:88:e3:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:E3:C9:40:A9:F0:B2:73:F4:59:1E:CA:72:24:8E:7B:DE:FD:A7
            X509v3 Authority Key Identifier:
                keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:34:ab:af:03:a0:d7:c0:b5:63:5b:56:d9:b2:d3:cc:55:
         55:ce:d2:e9:fe:df:23:ff:9f:36:0a:90:5f:0e:75:63:1e:06:
         90:2c:ba:8c:f4:48:ea:89:95:d2:eb:82:62:da:bd:4d:8a:7d:
         c6:49:39:cf:da:8f:fc:4d:76:b7:25:fd:a6:e2:5b:16:69:b9:
         a7:bc:8a:c0:05:89:06:f1:15:12:84:f6:e4:84:9e:4d:59:9f:
         bb:e6:95:b9:d4:c7:dd:84:da:a9:d1:5c:6d:6d:34:ce:63:67:
         02:1e:91:bc:9e:82:0f:6c:08:b0:af:80:58:62:4f:e2:40:9d:
         d1:fb:c3:8f:de:53:2d:c6:d8:b7:df:78:9c:31:c5:79:2b:08:
         d7:c3:f8:b0:96:65:ed:85:05:81:22:c9:d4:a7:58:c9:72:d4:
         ab:50:a5:44:34:2b:5c:db:68:31:fd:eb:77:eb:06:7c:b2:93:
         8a:76:a4:2e:a4:ef:a6:ae:60:30:b8:fd:0f:b3:62:23:43:72:
         59:e5:78:1b:9a:5a:b4:a6:69:d0:2f:8d:ca:61:4a:bb:ad:19:
         be:e8:6b:57:e1:cf:32:64:ea:d1:e0:67:d1:69:a1:32:34:f6:
         1d:e1:30:fe:5b:b7:51:46:88:f7:fb:7a:73:28:96:7e:70:61:
         db:a1:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:02:03 2024 by rpki-client on console-fra.rpki-client.org