Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File:                     DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier:          cdGvGyCrM1ShTIAg6i9n2zPQmSN8RvVqngsK1+XsUUw=
Subject key identifier:   A8:73:B7:BB:54:0D:D8:FF:E5:C7:F5:34:C3:DD:8F:BD:EA:6B:E4:97
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer:       /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial:       019239CB3D53FD59B6C185A65117F16FA82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number:          08C7
Signing time:             Sat 28 Sep 2024 18:01:13 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:13 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:13 +0000
Files and hashes:         1: 3WY3X5q4fOq560L_WSH-cufsaRE.roa (hash: ntQ+B8KmKNG66GXsO1P2HQU3K4443jJAUAyade2YjcY=)
                          2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: AjkBCFUckLPSAggEMhcSxpTMZ5nRN1ZXviDBcgPH1SA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:3d:53:fd:59:b6:c1:85:a6:51:17:f1:6f:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
        Validity
            Not Before: Sep 28 18:01:13 2024 GMT
            Not After : Sep 29 18:01:13 2024 GMT
        Subject: CN=a873b7bb540dd8ffe5c7f534c3dd8fbdea6be497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:29:af:58:c5:62:df:7c:e5:5d:ac:da:83:
                    95:e6:12:10:bd:ba:2b:f8:4c:9c:93:57:a8:0f:dc:
                    bb:81:59:fb:d2:0c:32:32:cb:ac:e9:7c:e0:00:da:
                    2b:c6:f4:45:60:9f:aa:f1:75:8b:c7:1d:28:85:ad:
                    f6:7e:50:1a:9c:38:a4:4d:4a:d7:92:d7:e6:bb:f4:
                    39:26:dd:27:d2:60:ca:9a:e1:10:f1:70:e2:57:36:
                    0e:db:6d:42:6d:2e:f1:73:d1:a4:a4:30:3c:b2:70:
                    00:40:cd:34:d1:d5:b6:08:e9:67:3b:b0:69:fa:91:
                    7e:c1:72:8e:b2:58:86:c1:dd:ad:ba:b0:fa:ef:8b:
                    ac:6e:31:a6:cd:f9:1f:53:88:3d:1b:75:ba:92:e0:
                    26:c7:0f:5b:63:d7:62:53:e8:da:54:dd:bf:63:19:
                    39:c5:54:79:c7:ac:7d:f6:f8:94:70:c0:1e:63:e4:
                    a1:f9:12:6c:c5:ed:47:b5:42:af:02:46:f8:86:fa:
                    c0:fe:65:e5:c8:9f:72:52:4d:66:1d:7e:0d:04:0d:
                    99:a1:4d:01:a1:2d:44:00:eb:d6:dc:8c:a0:fe:15:
                    6e:9d:03:ee:77:58:37:de:29:02:aa:67:fb:a2:40:
                    04:aa:c8:15:19:c9:e4:2b:67:4c:69:0f:1f:db:57:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:B7:BB:54:0D:D8:FF:E5:C7:F5:34:C3:DD:8F:BD:EA:6B:E4:97
            X509v3 Authority Key Identifier:
                keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:5d:fb:f1:40:25:d3:3d:91:4e:43:35:16:e0:29:af:1b:
         8a:d1:87:cd:a0:ca:50:c9:20:e7:da:8e:b4:14:0e:71:a3:eb:
         bb:6f:25:6d:4e:6c:e9:1d:00:c5:6c:01:31:e7:b3:8d:d5:70:
         f8:34:c6:20:32:11:54:1d:b5:33:10:8f:a3:9e:b7:03:f5:19:
         60:d7:9b:4f:58:fa:70:47:76:cb:e5:8e:0f:ee:6d:12:7c:d7:
         ef:77:0e:be:28:26:eb:01:8f:de:0f:43:a8:32:38:7a:83:f4:
         26:69:76:be:c7:91:e1:3b:41:72:69:9f:5f:0d:6c:f6:4f:07:
         9c:3a:cd:64:bd:71:43:31:d6:2f:e6:fe:b0:ae:e2:4f:2d:a2:
         78:5a:9a:89:05:e6:b5:67:9b:d6:cf:72:7d:0d:13:ca:b9:12:
         f4:66:1d:3a:49:ef:85:4a:b2:10:76:89:cf:0f:f7:a5:23:75:
         6c:7e:e5:8e:38:6f:32:5b:29:cc:21:9c:cc:65:db:34:6b:ef:
         09:f1:75:51:fe:55:3b:2a:38:83:91:22:0b:0e:7e:db:83:cb:
         81:a1:e9:ab:82:5b:d0:7a:d3:9d:3a:e4:d1:01:c2:87:3f:23:
         48:e0:00:be:94:52:09:00:66:88:04:fa:8e:d8:31:3f:81:7e:
         1c:18:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:18 2024 by rpki-client on console-ams.rpki-client.org