Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          +5ksK3L+LgVJ46UDZMaaD2S/HjhgaqEgXddt4KYAU1A=
Subject key identifier:   77:28:74:B6:1D:3E:97:6E:F7:93:99:22:BB:0F:EF:9C:DB:24:41:2B
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       01920B0459137BF127C0DF29F9775F9184F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          29
Signing time:             Thu 19 Sep 2024 16:01:27 +0000
Manifest this update:     Thu 19 Sep 2024 16:01:27 +0000
Manifest next update:     Fri 20 Sep 2024 16:01:27 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: qtHFlNojJXRrr9/semV0IFtQWfp80+aJRYN7yTm9XsU=)
                          2: e1sZR8x-WsnvANMHDR91OQmgIjY.roa (hash: OxguY+hSP4C1O0qGvbIbFQlknCPuJOmSvwUIk5rfdjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0b:04:59:13:7b:f1:27:c0:df:29:f9:77:5f:91:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Sep 19 16:01:27 2024 GMT
            Not After : Sep 20 16:01:27 2024 GMT
        Subject: CN=772874b61d3e976ef7939922bb0fef9cdb24412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:5e:4f:65:0b:5c:4a:80:21:fb:99:25:d3:
                    0a:26:ef:54:ec:35:20:8c:91:9e:5d:6e:cb:50:ab:
                    d3:73:90:b3:a8:5b:d4:fc:79:c7:0a:70:34:83:76:
                    d6:e4:46:30:43:76:fa:81:d5:78:46:bb:48:f8:64:
                    75:6e:23:a7:fd:42:65:9d:18:d8:f9:be:44:07:40:
                    c9:35:54:dc:78:d4:6a:54:76:1d:26:73:2a:8d:1a:
                    f1:fb:1f:9a:87:f1:5b:d3:5e:2e:fa:74:8f:f7:1a:
                    b7:53:e9:65:1b:57:7b:6a:ec:a6:ee:1c:af:bc:ab:
                    03:12:3b:9f:56:b9:f1:f4:3a:22:23:95:b0:74:75:
                    df:e5:48:93:b5:f0:af:2f:4d:81:a2:47:1b:27:5e:
                    44:7a:38:7e:f9:7d:04:ba:e4:cd:17:61:71:73:a6:
                    11:b1:8a:e7:53:d1:bc:3c:fa:98:74:03:60:eb:32:
                    76:88:e4:8e:cd:ce:d4:66:c3:10:4b:e4:b3:9a:a2:
                    99:38:d7:c2:89:bd:63:4d:6e:9d:b5:b5:76:e0:8d:
                    9d:82:17:72:2d:eb:22:5b:44:be:2d:c9:3b:fe:7a:
                    63:fb:71:74:21:1b:1b:b3:58:58:79:9f:3b:27:09:
                    f4:c7:8a:ee:ef:9a:67:50:0e:0f:45:6d:fd:d6:3b:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:74:B6:1D:3E:97:6E:F7:93:99:22:BB:0F:EF:9C:DB:24:41:2B
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:30:c3:fc:22:46:c7:f6:26:11:6e:3a:45:98:3f:9a:04:e9:
         7a:0a:63:63:68:79:fe:a6:6e:4e:90:5a:c8:3d:63:e9:63:14:
         41:31:7b:a1:0c:1d:78:c4:e5:a8:b1:9e:eb:0a:d6:77:3a:ec:
         3a:7e:e4:85:c4:5c:97:33:5d:a0:99:be:70:c5:56:df:34:26:
         73:f9:85:9e:31:c0:b5:8b:81:c9:ec:9e:ae:ae:9f:dc:13:7b:
         53:09:b5:78:58:d3:9e:11:2c:43:9b:60:74:46:42:08:34:e8:
         38:2f:33:07:68:7f:20:92:06:8d:67:b5:bb:36:64:f3:60:ea:
         cd:36:0e:96:3d:15:94:4d:c4:25:51:fe:37:cb:34:68:1d:f6:
         00:64:cb:4a:87:58:0f:dc:d3:61:69:3e:da:cc:ce:a2:7d:a0:
         a0:01:62:65:8c:23:70:01:20:94:8b:6f:33:9c:24:60:3d:16:
         38:cf:25:9d:29:91:11:0e:0d:15:2e:fe:56:36:ce:45:e5:35:
         f6:39:98:0f:4a:22:ce:6e:88:c9:14:53:a4:64:55:af:fb:bc:
         07:9f:19:c7:3d:67:07:21:bb:f2:bf:60:5e:34:5b:28:90:75:
         17:86:d3:ee:f1:f6:52:d5:00:ee:3b:1f:ac:8a:02:27:68:6d:
         97:25:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:55:54 2024 by rpki-client on console-fra.rpki-client.org