Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File:                     wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier:          r8EAcpZgWGZaZB7RUnW8HSLGyv8X3tkUcgKZDYw2vRE=
Subject key identifier:   7A:41:AD:60:F4:3F:EB:9C:17:10:BE:D6:89:70:55:CB:AA:77:AB:2E
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer:       /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial:       0193549C71E2A236565221AC0115C3E16B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:02:39 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:39 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:39 +0000
Files and hashes:         1: ql8br5Bm5ryHvG7PGnuTt1_1oD4.roa (hash: KCujset59rTqVNduQdpUs+54KUtiwc2lwnnEFXvAvTA=)
                          2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: Qfw7Bx0RGxkwujG9z2WIHn7cXnFzjEUWLVrooQvbpYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:71:e2:a2:36:56:52:21:ac:01:15:c3:e1:6b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
        Validity
            Not Before: Nov 22 16:02:39 2024 GMT
            Not After : Nov 23 16:02:39 2024 GMT
        Subject: CN=7a41ad60f43feb9c1710bed6897055cbaa77ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:8c:84:4f:59:61:6a:69:a4:63:9a:fb:fb:
                    db:7f:3b:5f:d3:2a:86:00:07:51:04:b8:d9:a0:6f:
                    eb:55:80:fa:1a:70:ef:18:d9:b8:03:9d:65:94:d7:
                    14:de:d9:c9:00:3e:01:6f:c1:e1:c1:31:99:99:5c:
                    47:7a:8f:fc:1e:ff:b9:80:5d:be:46:1f:6e:7a:e8:
                    44:31:91:9d:8a:06:20:de:67:c6:41:05:68:11:27:
                    dc:fb:10:d1:18:15:74:a0:c5:01:66:1e:87:c4:b5:
                    c0:e6:ed:61:fe:f4:c1:47:8b:fc:9b:9f:e9:05:80:
                    00:27:c1:b3:be:a5:ba:e3:b2:10:75:40:dd:b5:64:
                    a6:0b:11:c5:21:12:b2:ea:49:95:87:7b:0a:22:0c:
                    47:85:2e:ad:6f:43:e8:99:91:fe:bd:5a:e1:5e:38:
                    1b:c0:26:e1:64:fa:41:4a:e2:d1:17:26:db:a2:3f:
                    44:2e:7a:21:9f:4f:e9:2f:28:5c:bb:10:da:3b:63:
                    4e:38:6d:6f:9f:e1:24:e4:7a:97:71:85:d2:fb:1f:
                    60:2e:5b:5e:6d:67:9d:62:a2:22:6b:fb:06:78:e9:
                    95:84:8d:bb:e2:8c:53:d2:ab:51:e9:c0:a3:b9:33:
                    ad:13:d7:bb:90:d3:ac:84:09:07:96:59:05:58:4b:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:41:AD:60:F4:3F:EB:9C:17:10:BE:D6:89:70:55:CB:AA:77:AB:2E
            X509v3 Authority Key Identifier:
                keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:dd:4a:2c:0e:b5:ac:31:8d:9e:5b:9b:61:74:26:30:ef:
         be:77:e9:15:48:77:1a:b6:7b:fa:48:50:44:c4:7f:cc:2a:a8:
         b9:0f:44:9d:19:c0:a4:eb:d4:52:92:db:a7:5b:04:34:02:29:
         2f:58:19:1a:80:fd:86:b2:a8:29:f9:da:3a:96:48:8e:c8:56:
         5a:6b:77:38:0b:86:c6:88:bd:25:fb:da:f9:82:6c:1c:0e:63:
         79:ff:68:19:e3:5f:c5:40:68:8c:19:df:80:b3:a1:7c:e8:4a:
         2d:8c:c0:4b:2d:6d:b0:83:4b:bd:a9:ea:70:91:cf:0d:aa:8c:
         16:df:52:b9:f6:cc:bd:7d:83:65:0a:e0:ec:97:a8:de:3b:04:
         96:24:48:dc:81:f1:45:9f:c3:79:bc:40:3d:95:46:43:1d:c4:
         76:47:72:d3:b7:de:a7:ad:a7:f5:8b:8f:03:98:54:13:14:34:
         29:c2:07:37:b8:cf:29:04:d9:2b:de:f3:f3:f7:e7:a6:db:a1:
         38:f2:2d:2f:c5:35:84:c6:7c:5a:16:04:f4:5f:92:8d:8f:8d:
         ac:4b:1d:d4:bb:77:f4:7d:ed:8b:be:f4:0c:d5:f7:86:88:db:
         ea:42:75:d2:59:be:88:53:f7:59:4d:75:02:e9:f4:7a:37:b7:
         51:54:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:21 2024 by rpki-client on console-fra.rpki-client.org