Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          d9svR0FtD+E4sEvJvAAqO+f+JmZzPZhANHRjnmD7c5g=
Subject key identifier:   A2:63:33:FC:72:F0:B0:8B:63:F1:8C:92:1D:F2:AA:61:4A:DD:33:CE
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       01938C9CFC13ABBC53E10932E3A2C2F745E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          0E15
Signing time:             Tue 03 Dec 2024 13:01:58 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:58 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:58 +0000
Files and hashes:         1: Is16l07e0tF-hh_CgJcAbiQHFDY.roa (hash: Ixek6RSL5zcRux20zEcJXgpfF2wPJknKmJLvs1PZlug=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: EVvaiE9BHnzDcDafaY1IESctxzJznxh/WIcs0x5dk2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:fc:13:ab:bc:53:e1:09:32:e3:a2:c2:f7:45:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Dec  3 13:01:58 2024 GMT
            Not After : Dec  4 13:01:58 2024 GMT
        Subject: CN=a26333fc72f0b08b63f18c921df2aa614add33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:73:85:5f:3e:2f:15:6f:fd:39:d8:72:42:
                    fd:e5:8a:0c:63:e2:b1:a8:60:49:6c:0c:4a:d8:16:
                    12:8c:fe:78:ba:33:63:00:d9:36:b8:2e:cf:73:5c:
                    02:0c:4b:ed:e8:bb:1e:cf:a3:0c:5f:f4:f1:22:7c:
                    cc:7b:43:23:a8:73:40:dc:a6:df:7c:e5:b5:93:75:
                    56:45:14:b4:7c:90:1e:19:c6:c8:ee:46:fd:a4:96:
                    62:61:3e:63:98:25:3f:e3:65:5c:0e:e5:5d:18:9d:
                    49:f1:12:56:ca:cf:e7:29:11:c8:9f:be:c4:65:30:
                    c6:c0:79:ad:82:ce:76:19:95:8b:e3:e6:9f:db:b0:
                    e1:8e:e4:d3:fe:8e:72:aa:8d:bc:22:7d:42:86:ff:
                    ff:e3:e1:61:0d:ee:a4:a2:1d:05:38:ea:cc:e0:cf:
                    cc:72:85:b1:3b:78:79:dc:40:24:fb:9d:fc:de:d5:
                    0d:13:f0:39:8f:fd:bb:f8:d1:47:b6:4a:28:44:49:
                    b1:a8:d0:8e:78:cc:3e:36:15:7e:ff:63:be:c0:3f:
                    f5:a2:2e:b2:d3:75:22:ff:53:97:12:51:bc:e5:a7:
                    58:0f:53:b6:4d:61:e7:08:9d:8b:0c:0a:0f:dd:54:
                    0e:b0:84:e3:c8:c3:33:1e:4c:6b:06:2d:2d:f7:d1:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:33:FC:72:F0:B0:8B:63:F1:8C:92:1D:F2:AA:61:4A:DD:33:CE
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:f6:39:c3:c1:96:b4:8f:85:fd:bb:c8:c7:18:0f:ae:dd:
         8e:40:6a:0b:68:35:c5:7d:a5:1c:06:05:20:00:4b:4a:d4:5e:
         7d:3d:9a:4c:dc:fd:06:f0:4d:fc:30:fd:ea:f2:79:58:d9:fb:
         15:d9:d9:7b:e0:e4:be:c0:bc:97:30:f2:91:35:4a:30:c9:1c:
         07:e9:9f:9c:51:fc:0e:56:e2:15:d4:11:fe:d7:c9:55:37:2c:
         3f:ef:de:d2:dd:55:7a:f0:e4:dd:cf:56:80:1e:23:e3:e1:97:
         57:39:40:70:3e:b6:78:66:c6:bb:26:2a:88:96:b8:bf:36:e7:
         bb:c2:42:7a:b3:06:d9:7b:86:3d:e0:05:8e:06:d4:f0:ca:6f:
         e8:00:15:02:d7:c6:d4:a4:e6:1f:23:05:42:d7:e5:d0:e7:75:
         e0:ff:36:ea:18:c5:96:6b:4f:1e:77:23:3f:63:a8:72:02:7c:
         85:af:83:90:43:3a:ac:15:62:9e:9a:59:ff:3f:ff:c8:27:1a:
         79:db:6c:e9:3a:80:98:b3:8c:db:64:eb:ba:a8:61:f0:7c:d0:
         55:c0:2d:26:72:1c:71:84:b5:d9:12:e1:6f:e5:9e:5d:73:75:
         86:51:f3:96:25:c3:40:a9:2c:29:1f:b4:85:eb:a3:55:ae:68:
         55:7e:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:32:14 2024 by rpki-client on console-ams.rpki-client.org