Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File:                     wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier:          efjq1cshS/XcuA7bEIVevMWIWwBv6NjKRvwe1OHEfSQ=
Subject key identifier:   A9:A8:B4:C9:B6:94:F4:93:58:B1:B0:27:E5:D7:FF:31:BF:C1:27:95
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       0193696AB803CDD98423598D41A153607FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number:          01BB
Signing time:             Tue 26 Nov 2024 17:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:21 +0000
Files and hashes:         1: 9DDH3YfchDyH8LlyDluHGmrHxxg.roa (hash: ZPnfc6OdikB1wbOnUc5tCqGuHcx8uUe1XlNKvP46OSU=)
                          2: Y7__psEgVJ-5U2CvWaPegschMUo.roa (hash: SgilgulaxRZWs69BuXZaOR+J493/d2wuoQiMvuh5oGk=)
                          3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: TDwybP/LlCMifyVCxf/DcoidtobVkq7gWue0/7nlX4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:b8:03:cd:d9:84:23:59:8d:41:a1:53:60:7f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: Nov 26 17:00:21 2024 GMT
            Not After : Nov 27 17:00:21 2024 GMT
        Subject: CN=a9a8b4c9b694f49358b1b027e5d7ff31bfc12795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:84:3a:31:62:12:d3:9b:71:a8:35:41:2c:
                    7f:2e:b9:04:90:5a:a6:b0:1e:b2:ac:24:5b:2e:03:
                    d1:3b:a8:8d:bd:ad:f2:03:7c:3b:92:56:80:65:be:
                    e7:f9:7e:43:f3:f9:28:da:b6:66:c8:80:54:83:eb:
                    ae:97:15:9c:3e:ca:2d:83:f7:0d:a2:9c:a5:08:28:
                    68:62:e3:f0:58:cd:c1:c5:45:1c:e7:4d:ab:3b:08:
                    5d:f9:7b:ef:41:4e:4e:9c:6e:73:b5:2a:86:fa:77:
                    b9:e3:21:49:5e:59:64:be:c4:1e:d5:d6:b4:17:11:
                    09:dd:2f:ca:fb:7a:14:57:b9:70:c1:6d:0a:a8:c6:
                    4d:df:ef:e4:86:b2:0c:46:22:e5:be:dc:aa:8e:d0:
                    34:42:66:25:eb:ef:a3:33:11:fb:04:ba:52:55:6a:
                    8e:87:24:f7:b0:56:d5:86:ae:14:59:00:88:e3:22:
                    1d:dd:e6:a5:96:f3:57:64:96:2d:85:23:49:fc:d5:
                    9e:99:b5:07:26:3a:35:68:3b:e4:ec:b4:f5:c3:a4:
                    2d:1e:78:e3:d0:43:79:34:54:05:09:8f:5c:c9:1e:
                    f4:4d:49:a4:23:1a:87:b4:73:51:85:f5:de:7e:c3:
                    ad:17:30:17:3e:86:41:45:bd:86:38:58:76:87:e6:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:B4:C9:B6:94:F4:93:58:B1:B0:27:E5:D7:FF:31:BF:C1:27:95
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:2d:23:38:ec:81:a8:20:31:df:5f:4f:1f:d4:8a:91:cc:
         7a:89:0b:85:40:4f:f5:ce:48:f7:0b:23:2f:93:b3:15:34:b7:
         e8:9b:9a:69:e4:51:65:3c:83:c4:50:33:20:1a:df:f7:92:bb:
         b0:d3:f9:29:b0:fe:ef:f1:d3:1a:67:b2:6f:38:c2:42:c4:6b:
         b1:a3:66:52:9b:8b:29:ba:e5:2f:ec:f3:84:a1:c3:79:9d:16:
         57:2b:12:78:1f:3d:a2:71:55:f6:46:15:e0:6b:00:70:ae:58:
         1a:09:65:1d:78:78:e3:16:d2:0e:1b:f4:4c:74:a6:97:10:db:
         05:63:23:96:5f:9e:84:34:5f:a8:9f:d4:39:e5:3a:5d:06:ca:
         7e:4b:c6:d8:73:39:74:97:ca:0f:6a:6b:00:81:aa:1b:d4:7f:
         2c:ad:ae:05:49:5f:52:e8:84:7d:5e:e7:2d:fc:e7:d9:2f:33:
         36:8a:73:4b:1e:ac:13:52:21:4a:d0:84:32:3e:77:4e:ae:6d:
         e9:df:14:3d:32:72:64:43:10:65:9a:a7:b4:8a:e5:2e:52:c0:
         42:b3:50:ca:f0:42:de:87:dd:68:59:18:19:61:72:3b:4b:80:
         8f:a2:02:39:94:73:e8:2e:06:82:85:22:95:d0:58:ab:ed:df:
         fe:27:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:18 2024 by rpki-client on console-ams.rpki-client.org