Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File:                     wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier:          T7SRDwo2AzCPIxQS5Y/ddD/pPL02CrZZUqMwDuM0ENU=
Subject key identifier:   68:98:1E:90:0B:C8:62:09:DA:02:53:AF:79:47:FC:5A:E5:95:3A:1C
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer:       /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial:       019357D2D40BB303072455F620AC61A76E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number:          0D6B
Signing time:             Sat 23 Nov 2024 07:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:54 +0000
Files and hashes:         1: sNEffc8I1ny1DsYAmAiXKx8sKnk.roa (hash: 3Fvclw2C7MI6rzjhWWjEHnOz/OwLpj/5VzDW1MfVor0=)
                          2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: cSjNYCr6JmdAkWcNzMT8Qww/xy5XQ8w57U7t1ayjA2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d4:0b:b3:03:07:24:55:f6:20:ac:61:a7:6e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
        Validity
            Not Before: Nov 23 07:00:54 2024 GMT
            Not After : Nov 24 07:00:54 2024 GMT
        Subject: CN=68981e900bc86209da0253af7947fc5ae5953a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:f3:0c:11:ea:47:2e:04:7b:e5:2e:c9:0d:
                    6b:33:58:80:25:f7:a3:37:a6:c8:ae:ca:88:fb:97:
                    6b:e4:ce:47:37:f6:b5:37:f8:69:85:ff:74:c0:59:
                    1f:a2:16:0b:3b:32:21:52:31:87:fd:b5:a8:4f:f0:
                    80:d3:cd:4f:46:14:c4:af:31:f9:9d:9e:69:71:6f:
                    b6:94:fc:c0:ee:e3:61:e0:93:27:06:c4:0d:72:d9:
                    9e:42:56:da:84:36:4d:90:62:23:a8:6e:00:72:ac:
                    c2:c6:ec:01:39:87:f8:2a:5e:4a:d5:5f:0b:44:da:
                    0e:bc:dc:e8:f0:22:6f:3b:0c:d4:6d:cf:e1:b7:78:
                    31:45:fe:af:2b:d9:b8:e7:d4:21:e2:c1:6f:e5:34:
                    12:a3:2d:f0:7e:90:9f:c5:fd:85:0c:53:dd:30:4e:
                    f5:1c:d0:78:7e:df:62:da:a6:84:f7:08:e6:17:f5:
                    4e:02:8b:ed:c4:5a:f1:62:d7:bc:3a:b9:60:5a:5d:
                    0d:d1:31:85:ce:f4:e8:ca:55:b9:1d:49:14:e7:8f:
                    ac:64:8b:19:cb:46:22:2f:6f:4d:56:21:a7:ac:71:
                    f2:e6:6a:2a:59:6d:b8:91:d1:8a:53:f2:3d:93:0b:
                    79:ae:67:0f:07:bf:81:a7:7e:00:21:74:55:58:79:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:98:1E:90:0B:C8:62:09:DA:02:53:AF:79:47:FC:5A:E5:95:3A:1C
            X509v3 Authority Key Identifier:
                keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:86:1f:32:fd:4a:89:11:e0:40:b1:54:1d:e5:cb:40:d1:
         c6:60:e6:a7:5c:7e:96:a0:96:19:1a:ae:a1:07:90:9d:28:7d:
         59:3f:5b:00:fc:94:45:ff:7e:10:d8:ce:ab:52:4e:89:75:28:
         16:01:ca:8c:25:66:5b:a9:ec:0a:1e:7b:3f:c5:2a:17:01:ee:
         07:48:cc:5b:25:ab:59:bd:89:75:86:36:96:3f:46:af:5c:42:
         53:18:b2:74:ce:fc:ff:83:b8:9e:8b:78:c0:56:41:5f:26:59:
         95:5a:13:cd:86:e4:69:2e:e1:ad:f2:6b:39:f5:cd:d0:95:93:
         bc:9f:f4:9d:7a:7f:7f:b3:4b:d9:22:a9:b5:2f:aa:6c:99:4b:
         ff:43:94:55:65:af:aa:18:e8:bb:26:e9:d4:af:bb:20:10:2a:
         50:3c:10:79:c1:52:93:7c:79:15:39:18:dd:de:58:06:ad:c6:
         9b:a4:5c:a5:a8:ca:53:40:69:6d:58:3f:c2:90:00:dc:29:57:
         14:81:aa:8c:3d:34:35:bf:a4:45:2d:b4:ce:29:1a:87:fb:8d:
         4e:4e:4a:6d:24:34:c3:0c:e8:ff:f5:cc:8d:f8:2c:59:c5:3f:
         8d:e6:8c:06:68:66:78:68:af:24:cf:2e:b3:a1:0a:ad:92:02:
         76:48:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:45:08 2024 by rpki-client on console-fra.rpki-client.org