Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          v1z43n27k/AyZIfzfl6S/Zh7yin7xEVkWi3VokZfkW0=
Subject key identifier:   40:A8:D5:93:FE:2F:98:98:3D:64:E8:F5:3E:73:C6:C9:D9:BB:CD:D6
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       01935508CF8E81316AD42700C296878D12E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 18:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 18:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 18:01:00 +0000
Files and hashes:         1: KZjgrHJw2QxpwMvNPoIkp7c3vpA.roa (hash: w3T+R69TdnM5iQotXO2wsy0v6X+9Fy+aBl6Wf+ADcek=)
                          2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: A5NldGwVghMavCbyrjN0MP85ldUcawntz4YrAVLYZWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:cf:8e:81:31:6a:d4:27:00:c2:96:87:8d:12:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Nov 22 18:01:00 2024 GMT
            Not After : Nov 23 18:01:00 2024 GMT
        Subject: CN=40a8d593fe2f98983d64e8f53e73c6c9d9bbcdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:75:37:57:67:ea:89:db:28:32:ec:28:00:
                    98:ed:2e:48:e6:80:ff:1e:03:80:bf:1d:bb:fb:fc:
                    e1:8f:e3:36:57:06:f2:88:e1:30:35:5d:9e:fa:38:
                    36:67:0c:d0:7d:d8:70:c3:37:79:a6:a9:ff:b6:c3:
                    e6:14:61:51:c8:0a:5b:dc:90:48:5c:d9:3f:0d:d8:
                    86:b3:90:f5:10:f8:78:84:c0:e3:31:30:91:1c:89:
                    67:bf:3d:a5:42:da:0d:28:5e:5a:e0:58:7f:e5:41:
                    c0:fc:9a:a1:08:12:93:4f:de:42:cc:74:56:ce:57:
                    76:cd:8f:6e:1a:d1:a4:39:0f:c3:f8:74:2e:d8:ca:
                    75:b7:44:8f:dd:50:a7:0d:25:ff:4a:8e:a4:f3:2e:
                    84:f3:d0:00:ac:21:df:80:fc:29:bb:f7:c8:6a:b2:
                    75:ba:0c:ae:39:b3:43:be:02:53:6d:ea:65:64:33:
                    59:a2:37:0f:e3:88:6f:6b:58:a7:d2:aa:cf:a1:87:
                    ba:90:a4:eb:5b:cd:2d:c5:4b:5e:21:d1:f2:5a:20:
                    ce:6d:cc:4e:41:35:a3:f5:8b:ee:b1:79:cf:af:e6:
                    f7:4c:ca:b4:83:3e:06:7f:05:75:cc:56:c4:51:83:
                    24:ae:d0:1d:a5:9e:af:72:3a:5e:a6:20:5f:ec:29:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:D5:93:FE:2F:98:98:3D:64:E8:F5:3E:73:C6:C9:D9:BB:CD:D6
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:f3:fe:4b:36:84:a4:95:92:d8:0c:e9:b7:95:40:2b:83:
         8e:02:62:ba:f8:41:e8:04:4c:f3:10:95:30:17:b2:74:a5:c9:
         df:10:8f:86:eb:cb:17:ed:0e:df:90:66:d0:ab:50:12:8a:e3:
         38:92:bf:1a:ce:07:6d:86:99:30:56:6b:a2:23:77:2a:0e:38:
         c3:90:7d:5b:74:63:9d:3f:1e:5f:f7:60:23:8f:0b:63:2e:88:
         98:87:0c:b2:71:9c:71:3a:81:2d:ed:60:bd:4a:26:b2:b0:68:
         c6:36:cd:b1:10:60:02:44:f8:a8:a1:9d:56:08:d1:48:e0:5a:
         39:2a:81:cf:39:95:2e:af:47:e0:34:15:b5:0e:b8:0c:a0:36:
         a6:3e:f8:8d:7b:f8:6d:9f:72:2f:ce:fc:b8:b7:8b:5c:0a:aa:
         05:bf:8a:ec:1d:21:f1:b0:87:ad:35:9e:00:10:0b:3c:57:bd:
         72:0c:f3:13:b3:05:1a:46:4c:ad:77:c2:e4:90:c7:b7:b2:06:
         45:c6:ac:42:fd:c6:ee:78:20:a0:5b:2c:2c:9f:fa:a1:3f:14:
         2d:fc:5a:92:7b:9d:53:dc:54:23:a9:36:66:7b:8b:58:58:ee:
         83:75:fb:71:72:7e:8d:b3:8c:fc:95:55:a8:f0:67:66:16:bb:
         90:81:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:19 2024 by rpki-client on console-ams.rpki-client.org