Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft
File:                     w6vcxJ99kDO1KQRnnzybeD2ME1g.mft (raw, json)
Hash identifier:          kPcZDTPeW6ngkftIwIyb6aODUckoKeuPaqmcs5LlDjY=
Subject key identifier:   89:F6:70:FC:F3:94:34:D1:AC:88:AB:FE:0E:F5:61:2C:69:8A:B2:6F
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       019356F6F2D2C7DD36AF58A18760ED4F9B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft
Manifest number:          0AAA
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: XD4B82g56UEpTSfAO6GK_DcHVtY.roa (hash: wrnSByXk8QYqZZ91JN4XrMR5oHynWHyyc1rryMSoDv0=)
                          2: w6vcxJ99kDO1KQRnnzybeD2ME1g.crl (hash: iqpYENvXg4lspFk7MuAaA6MfCgGb9W9+B+A2E8igTt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f2:d2:c7:dd:36:af:58:a1:87:60:ed:4f:9b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=89f670fcf39434d1ac88abfe0ef5612c698ab26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:a1:3d:b8:db:47:f7:4d:96:32:15:7c:6c:
                    e5:e4:9f:34:e4:57:3f:d5:96:cd:9b:86:4d:92:e0:
                    2c:b2:78:00:a2:a6:3d:a5:6e:0f:57:29:ea:7d:b0:
                    b3:3d:7e:d2:74:e0:ae:f9:e4:1b:28:1c:0c:7b:96:
                    93:f0:0d:38:42:e3:b2:d4:90:42:c5:40:bd:d8:55:
                    0e:87:dc:35:6a:b2:c4:c6:21:eb:66:68:b2:0e:23:
                    a0:49:6c:b6:44:15:ec:3f:07:9e:de:e1:68:6d:16:
                    7b:99:de:16:39:a8:a6:4d:21:ff:e9:67:65:fc:9e:
                    c3:f4:15:4d:f2:b8:20:89:5b:0f:78:36:be:a3:6c:
                    98:ad:42:e4:51:aa:8c:9a:00:83:53:a0:2a:1d:6f:
                    dc:11:cc:1f:15:42:67:9f:1b:a7:30:ce:a6:fe:d1:
                    0e:50:f5:5e:61:00:2e:28:69:d9:63:cf:70:05:db:
                    51:d1:53:d5:06:a7:61:ee:73:cf:07:31:db:45:03:
                    f1:fb:82:67:13:30:ef:98:2a:e9:a8:1e:40:38:a8:
                    21:3e:70:48:d8:59:e5:1c:f4:d8:e3:cb:ec:28:65:
                    a0:e3:db:d9:04:17:b6:6c:97:44:a0:c5:f6:57:40:
                    13:fa:be:4d:dd:5f:ad:ff:76:d9:8b:66:49:ad:b3:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F6:70:FC:F3:94:34:D1:AC:88:AB:FE:0E:F5:61:2C:69:8A:B2:6F
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:91:aa:ef:49:80:33:d6:a9:7a:db:54:67:aa:56:39:e7:72:
         fe:60:7d:72:0d:93:7d:c1:bf:a8:b5:5c:dc:09:ed:78:19:c1:
         e8:4c:00:0a:6d:e7:1f:1e:5e:a3:c4:b2:58:43:ec:c9:f8:93:
         2e:8b:e2:c0:61:d0:ed:31:86:b8:c5:93:f0:1b:07:a5:0b:a5:
         cb:b8:69:f8:0d:85:b6:e7:7c:35:33:d9:7d:33:a9:e3:45:12:
         63:35:25:73:82:f2:31:70:2c:44:b7:20:99:a7:66:39:b3:16:
         8d:37:3f:3d:90:c4:b9:2f:0c:cd:1b:ad:bf:75:51:fe:37:67:
         6a:82:3c:09:2f:15:50:1b:84:e6:c6:43:3c:e6:c2:19:de:98:
         06:bd:38:ba:7f:64:7f:1f:f8:2a:ac:ad:e2:a8:80:e3:4d:51:
         d6:2f:0e:67:d6:b5:25:7a:90:a7:16:13:87:00:a3:1c:f9:d1:
         fe:dc:e0:3b:97:89:9d:62:7f:d0:e7:78:dd:36:0b:06:34:c2:
         66:d9:f9:6d:74:94:91:25:55:b2:87:91:74:76:60:6f:77:ed:
         c7:90:18:9a:bb:37:92:f9:d2:66:41:97:92:d3:03:b2:10:0b:
         13:75:c6:de:9e:17:7f:e0:91:74:33:9f:3d:18:47:d2:5f:9d:
         4e:54:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:50 2024 by rpki-client on console-ams.rpki-client.org