Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File:                     wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier:          sAGLCcMZy3I46H6rrHN3TTVUujuY13qRKR9IPHwxQLE=
Subject key identifier:   AB:F1:D0:41:64:A7:5C:04:2C:B8:A2:62:65:D6:1E:8F:A1:58:D8:6C
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer:       /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial:       01936BC9702E75B32F5488BAF30FF8264EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number:          130A
Signing time:             Wed 27 Nov 2024 04:03:03 +0000
Manifest this update:     Wed 27 Nov 2024 04:03:03 +0000
Manifest next update:     Thu 28 Nov 2024 04:03:03 +0000
Files and hashes:         1: odCJOobSvBwlSmKuvQ-J8GE7jP0.roa (hash: UXOWAbs4DCaIpG+3ZtWRhip702J436R5EdT1Fx8eSh0=)
                          2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: yQ62G4pvxA37yigH08htW/fN8zvJW7HIxm9kSpknhYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c9:70:2e:75:b3:2f:54:88:ba:f3:0f:f8:26:4e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Validity
            Not Before: Nov 27 04:03:03 2024 GMT
            Not After : Nov 28 04:03:03 2024 GMT
        Subject: CN=abf1d04164a75c042cb8a26265d61e8fa158d86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:c2:a7:d0:6b:16:3f:d9:ba:3c:40:a9:54:
                    59:72:b4:12:99:04:7f:f5:d2:f0:56:ae:91:bb:c7:
                    fd:6a:ec:af:56:86:4b:af:c0:d4:0d:78:58:b8:88:
                    57:35:2b:b2:d7:ba:b5:ab:3a:70:17:63:99:31:8d:
                    d9:bc:f1:b4:e3:25:91:07:e8:ce:c4:ce:1c:1c:6e:
                    00:1c:d1:93:f3:ef:bc:5b:12:ec:ce:f8:b1:e3:57:
                    47:05:47:fd:bc:28:00:5d:de:94:9a:57:1b:65:48:
                    e9:df:e4:e5:61:71:c5:52:7b:da:83:4a:fe:bc:6b:
                    43:75:e4:2e:c4:30:8a:73:9c:6e:88:90:ea:46:11:
                    47:4e:5d:1d:fd:8f:36:66:ff:ab:b2:f9:09:ee:52:
                    57:fb:ba:b8:da:ea:82:d5:d5:c2:eb:61:b0:b8:dd:
                    41:c7:93:5d:ee:f5:bf:e4:b2:71:80:6d:bb:85:c7:
                    f5:fa:5e:ab:bc:0b:c8:45:4f:f3:93:e6:f5:03:a7:
                    02:27:00:f9:45:09:6e:b0:96:21:5d:d9:ba:21:e2:
                    c6:26:45:3e:42:60:79:4b:54:6b:72:a4:09:2a:ad:
                    5b:59:c5:e7:1c:41:e2:f3:42:b2:93:9e:0a:4b:df:
                    02:54:3a:eb:c3:63:8d:62:16:77:2c:aa:06:eb:82:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F1:D0:41:64:A7:5C:04:2C:B8:A2:62:65:D6:1E:8F:A1:58:D8:6C
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:af:86:98:76:ec:3b:d3:25:3f:3c:2b:9a:12:e2:d4:52:bd:
         7d:da:b9:65:c1:34:59:f5:8a:20:9b:98:d0:48:0c:57:f8:14:
         ae:d1:6f:ec:71:16:d3:16:f0:64:1f:ca:8e:b6:a6:4d:a1:5e:
         a4:c7:32:3f:d0:e7:81:86:4e:9a:17:61:f9:bc:ec:92:db:8f:
         0d:52:4e:61:5a:e5:e0:5d:00:e7:b0:ac:16:78:8c:ee:44:77:
         73:74:96:e1:bd:48:f0:49:69:96:21:de:b6:14:29:a1:0f:f2:
         41:8a:b0:e8:95:d0:e8:42:22:e0:9f:1c:fe:5f:94:c7:04:e3:
         28:fe:d4:89:92:33:92:5d:1a:7d:f4:91:31:ba:4f:69:f7:ef:
         7d:92:d6:12:9b:8d:81:18:74:4a:6c:e3:3f:c2:88:9f:fa:76:
         ad:e9:31:40:61:a4:0a:a5:8a:c3:46:b0:4e:21:f1:85:b0:58:
         71:5d:7d:c9:0c:48:a4:08:83:80:b3:d0:70:20:8c:ae:00:f3:
         d5:8f:5d:66:ef:ed:ae:27:df:7c:75:ca:6b:b0:e9:d0:61:27:
         0f:0f:58:6f:d6:9e:82:92:bd:7d:26:fa:11:5e:81:e2:dd:97:
         3b:3a:12:7f:05:e6:76:54:ef:0d:de:e5:3d:3d:61:7a:6d:53:
         7a:d9:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:19:15 2024 by rpki-client on console-ams.rpki-client.org