Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File:                     sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier:          LJPglQVU/MeNgDVd/wZPVlR7PE/Aaj7w9+2NF0x+ODg=
Subject key identifier:   C6:3C:F4:D6:6E:6A:27:CF:6C:0F:19:A6:8E:4A:5C:2E:90:B8:29:51
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer:       /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial:       01936AB4AABA0EF712F4F1629B1FD3B7F28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number:          0F03
Signing time:             Tue 26 Nov 2024 23:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:45 +0000
Files and hashes:         1: XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa (hash: vHVdCDvmZpYQx6BMfbdZa54cr9pns6thg245xosJlnY=)
                          2: c0DwEvcIyI7cnls3-MXTi8ek6_g.roa (hash: tH0FDLwW9Wyz6nnDh1vntDf8LaKx+ZwWLP6zZ2YS4eE=)
                          3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: AwO+uSeGVhuALRz05K2gRzIn8/wBandgy8LvLs3lgHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:aa:ba:0e:f7:12:f4:f1:62:9b:1f:d3:b7:f2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
        Validity
            Not Before: Nov 26 23:00:45 2024 GMT
            Not After : Nov 27 23:00:45 2024 GMT
        Subject: CN=c63cf4d66e6a27cf6c0f19a68e4a5c2e90b82951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:e2:87:76:6e:8a:f0:08:e3:df:60:61:03:
                    6c:d4:3f:b2:4b:a0:26:a0:cc:6e:96:ab:fe:e9:13:
                    9a:4b:05:70:9d:f2:42:47:93:2b:a8:53:db:fe:0a:
                    74:cf:e7:b8:14:50:40:f6:98:e8:b9:9c:8d:03:e4:
                    fe:d1:c3:42:20:77:d2:b4:90:26:c9:87:ca:dc:12:
                    2e:6d:e1:db:72:db:06:bd:40:d0:48:51:59:20:94:
                    d0:e9:7d:b8:fb:df:91:6a:76:de:24:87:04:19:b9:
                    2c:05:46:82:59:74:8e:84:d7:c6:f9:3c:7f:26:9c:
                    3b:db:af:3a:7f:8d:f1:18:a5:67:07:ad:a0:2a:4b:
                    d0:3f:4a:e8:9f:da:ca:e0:8d:87:f2:58:1a:9b:3d:
                    26:d0:70:83:25:84:23:8b:e4:26:a6:e0:05:fc:2a:
                    d9:45:29:8c:ce:2b:7d:cf:20:58:7c:3c:1c:b9:63:
                    f8:18:7c:e1:60:f4:37:a2:96:7a:8a:ca:91:1d:6d:
                    c3:69:24:ae:91:f9:1d:f0:98:1e:0d:20:dd:69:72:
                    d4:b0:f9:35:3c:41:43:4d:cc:45:40:70:c9:a2:04:
                    67:cf:4f:96:19:84:5c:83:8d:2f:4f:bf:a1:24:87:
                    95:7c:47:56:75:2a:af:ab:4e:ed:16:ab:3f:1d:a3:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:F4:D6:6E:6A:27:CF:6C:0F:19:A6:8E:4A:5C:2E:90:B8:29:51
            X509v3 Authority Key Identifier:
                keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:02:ac:40:28:51:ef:1e:bc:49:2b:ae:c8:1f:03:1e:4f:
         44:29:c0:5e:a8:c8:1d:83:7f:c5:b6:53:6a:76:7b:c7:73:1b:
         ce:1e:04:79:8d:1d:7c:cc:f9:07:47:7d:02:06:8f:72:82:51:
         be:38:8b:93:c4:e8:66:84:da:3b:0c:c0:9a:35:83:88:55:2c:
         80:6f:b3:1c:ac:b2:c6:75:74:b5:41:76:31:f0:72:29:f4:9c:
         e8:fb:60:2b:63:66:c9:ff:fe:29:b9:dd:5a:bd:fe:41:02:af:
         15:c2:65:59:c0:5c:16:2e:c4:df:a8:bb:4c:b1:8a:fe:93:43:
         e1:fb:c5:be:e8:06:cd:51:fe:9b:f8:9f:9e:9a:10:ca:31:6f:
         9e:33:81:4b:2a:e8:92:ef:cd:7c:a0:86:01:34:5b:32:fe:bf:
         51:07:a0:02:28:c3:2f:db:bb:ff:90:e9:3c:89:a8:89:c7:54:
         63:1f:f3:9a:aa:b2:d2:fc:a8:9f:ca:84:dd:9f:bd:6a:c8:5a:
         13:38:7d:cc:0e:66:cf:75:20:bf:ae:e7:2d:9d:0c:83:c5:f0:
         d3:eb:0a:37:b9:0b:d4:bb:fa:82:5a:8e:9b:25:3a:af:ea:f4:
         34:fa:d2:c9:47:73:9b:fb:4d:06:dc:10:dc:6e:12:04:34:6b:
         dd:8c:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:11 2024 by rpki-client on console-ams.rpki-client.org