Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File:                     WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier:          Ink2fSf+6evrXhxTvw2YGAJOB6C9o/LbQ7pF6/gOEJo=
Subject key identifier:   15:FC:9C:A6:4B:1C:AA:98:51:A6:FA:24:A4:B7:D4:A0:81:68:62:EB
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer:       /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial:       019352AE15388AD364C5E01A4E781BC79C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number:          104B
Signing time:             Fri 22 Nov 2024 07:02:40 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:40 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:40 +0000
Files and hashes:         1: 8opu-cj5eak0qkKoAb4qE1JYzbI.roa (hash: UCXBHIaA/R9oklyYrvyS3oE6nzn/xqE8Da4FrCMvrLQ=)
                          2: Iya732ujnt78FRvcKvBuy2CN6S8.roa (hash: pb6pGrbIOEz3gvBgI6gbx84VRyTa2eOl8jWc7WGQ3PI=)
                          3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: 652253+Hsh97YhfkanfUVE3NkFGzfSg8zkD883pYBWA=)
                          4: p0mW0_xq2HSGhiIwJXscHUFmFbE.roa (hash: KI3yEotZNkWUWnJQ0A7GnaTcsKVZHPvtu26FJHeWomg=)
                          5: p_FrBgbJKMqk7JXenxoCK3jnAm8.roa (hash: viBHWgUbDKXGBurXfE5vJ298Ljh2+Fc2OkP/E+83FWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:15:38:8a:d3:64:c5:e0:1a:4e:78:1b:c7:9c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
        Validity
            Not Before: Nov 22 07:02:40 2024 GMT
            Not After : Nov 23 07:02:40 2024 GMT
        Subject: CN=15fc9ca64b1caa9851a6fa24a4b7d4a0816862eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:c9:79:2b:28:95:78:ca:53:fe:e4:04:cd:
                    11:0d:a6:8b:c1:c5:4f:bf:af:0e:74:17:17:d7:b8:
                    71:e4:37:47:37:79:48:15:d3:17:26:b4:65:97:10:
                    b0:88:e6:ac:34:7d:48:ec:6f:c5:97:88:d8:82:e8:
                    4a:a8:9a:60:c2:6e:5f:fc:87:d2:a6:d9:a3:f9:cf:
                    d1:de:08:1c:b7:1e:55:09:16:f7:8b:31:09:de:d8:
                    48:a5:08:e3:cf:94:80:1d:c2:82:48:b5:01:95:83:
                    a3:55:4e:36:81:06:90:06:3f:18:78:e0:31:7e:fe:
                    a6:69:ed:a0:8b:0f:cc:31:f4:8f:7a:cd:20:75:83:
                    51:90:26:36:95:99:d5:1e:f8:d6:74:44:2e:c9:66:
                    d4:39:33:b8:db:82:1b:61:cc:77:7c:b4:06:a8:99:
                    bb:54:31:ff:03:34:fc:bc:33:0e:53:fc:9f:06:80:
                    9f:60:8e:2c:15:ce:ed:e2:83:aa:48:e9:b4:dc:a2:
                    b2:91:c1:1d:72:4a:e1:31:a4:cc:ba:5d:9d:c9:97:
                    1c:95:d6:58:1f:4d:d2:98:3f:aa:24:ea:f5:a1:1d:
                    cf:74:87:14:66:79:03:a1:1e:74:42:96:6f:b7:c2:
                    8d:80:ab:96:48:3e:e8:88:49:d7:95:fa:8f:79:63:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FC:9C:A6:4B:1C:AA:98:51:A6:FA:24:A4:B7:D4:A0:81:68:62:EB
            X509v3 Authority Key Identifier:
                keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:6f:07:d8:bb:f1:92:94:52:79:f1:e3:39:41:fa:69:eb:
         f2:6e:45:cd:e7:7b:0d:ca:07:5d:59:39:37:18:76:3c:5f:d7:
         5f:2f:e2:ea:b9:22:ed:b7:ae:b1:7c:c3:d8:d1:d4:c5:c5:f9:
         b1:c9:a8:b1:69:53:83:09:98:63:22:0f:6e:db:95:21:14:ee:
         8d:d6:57:88:0b:2c:2a:8e:55:fe:5d:61:8c:cb:10:d2:24:f7:
         e7:5b:b7:ed:cf:46:df:1f:02:37:94:80:0c:42:df:94:83:f4:
         63:02:da:40:3b:47:44:11:5e:a1:49:88:87:b9:bf:8e:e1:a4:
         ae:e7:e0:c7:85:c0:34:db:2c:0d:df:57:0c:de:19:50:f3:2e:
         7e:64:ae:5f:59:8b:e2:2e:a1:4d:08:18:78:aa:10:13:f7:ba:
         4b:11:8e:50:74:93:69:40:83:3c:fa:f9:73:c8:c3:4b:35:d6:
         47:c6:ac:7e:37:37:87:3e:6a:22:4d:58:10:8f:22:eb:4c:eb:
         66:b3:02:22:89:6e:06:a5:54:91:b8:e3:19:38:08:4a:4b:d4:
         54:15:e9:24:df:90:2a:1d:8c:32:15:e3:70:fa:5f:db:ab:7a:
         f9:49:c7:9d:af:b2:c5:1a:e4:0d:44:07:42:34:f6:fc:65:7a:
         32:b1:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:57 2024 by rpki-client on console-ams.rpki-client.org