Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          KyehnoXNsuSutdkRwQ4x7xr0/K5j+ZQX9GxANEs0wRs=
Subject key identifier:   64:D9:B7:DA:89:AA:3D:DF:25:98:1B:FE:B4:C0:0C:2B:78:D1:EA:F0
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       01936A7D65F59BD646C637D52517E5503258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          0461
Signing time:             Tue 26 Nov 2024 22:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:23 +0000
Files and hashes:         1: 2L1jgAgNpjlgfPDxU1p7K6OdNCI.roa (hash: d78i6v/zdsQ6nNllKILOwLnlhdn/YhHe/eByzJbrMdw=)
                          2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: QDclkUt/5NaiEmHirzr+LJd6XJADVZcsoftbLx87WpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:65:f5:9b:d6:46:c6:37:d5:25:17:e5:50:32:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Nov 26 22:00:23 2024 GMT
            Not After : Nov 27 22:00:23 2024 GMT
        Subject: CN=64d9b7da89aa3ddf25981bfeb4c00c2b78d1eaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:a6:23:11:06:a8:a3:69:c1:01:84:60:84:
                    f8:0b:b0:1f:c3:c1:05:da:92:e0:9f:c2:17:91:7e:
                    28:21:49:47:d5:be:87:12:b4:12:7d:ce:f9:c5:11:
                    ac:84:bf:74:e2:f7:0b:08:96:7f:1d:ae:66:1e:94:
                    14:10:df:47:c4:6e:06:c9:a9:3e:30:a0:c5:91:11:
                    5d:89:b8:ec:8e:7f:c9:bb:ea:28:e9:e4:5f:2b:ee:
                    08:bc:67:34:9f:b8:e1:62:18:ab:6a:3a:c4:55:17:
                    a1:15:63:3f:17:a7:55:b3:f0:2b:e8:21:22:77:1c:
                    d6:da:db:ac:35:9b:ff:02:49:4a:c2:92:bd:16:4a:
                    d9:5e:d5:3c:6a:dc:48:7d:3a:38:89:92:7b:d4:5d:
                    ab:ab:1b:7e:de:93:5a:0e:21:bc:a3:27:06:99:44:
                    aa:cd:75:d1:0a:33:91:84:ee:5d:50:d6:69:ab:82:
                    97:56:4d:37:13:d4:0e:be:74:ab:8d:af:49:90:54:
                    55:cd:c7:00:b8:cd:d3:22:cd:1a:18:12:d7:9c:e9:
                    d5:07:fb:3c:0a:51:62:c4:fb:97:19:7f:55:87:e8:
                    13:94:49:75:aa:1b:1b:dd:52:1e:9e:97:9b:4d:5d:
                    4d:09:db:ac:e5:de:95:43:49:25:f4:80:3e:21:e4:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:B7:DA:89:AA:3D:DF:25:98:1B:FE:B4:C0:0C:2B:78:D1:EA:F0
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:e7:84:80:e4:14:8b:bc:7b:13:d4:28:05:e3:11:d3:26:
         47:f5:88:80:92:e1:a7:e1:3a:82:d5:95:85:cb:98:a7:f8:7d:
         c6:7e:42:11:1f:3a:07:21:1b:4c:09:4a:b0:66:d2:32:c0:15:
         86:e6:9c:9c:b8:a1:4b:d1:c2:6c:df:b6:4c:d3:de:1b:4b:a2:
         b3:ed:4c:c0:dc:2e:83:b8:03:b7:89:dc:38:6f:eb:ba:c2:24:
         85:02:67:2c:b1:0b:3a:5e:3f:2a:2a:10:5d:db:e5:e8:58:fd:
         1e:ca:55:07:f6:3a:1f:d7:e7:7c:65:ef:4c:d6:26:06:af:06:
         ad:1e:f4:19:ac:54:18:95:92:b4:8c:41:9e:bd:b3:14:9e:64:
         3a:c2:2d:67:e2:c8:4b:4b:83:d0:0c:d9:d6:fa:25:7a:94:26:
         33:cd:25:43:8e:f2:04:69:1c:ef:67:cc:f1:9f:00:51:6f:ff:
         24:b7:ea:3a:91:dd:b0:bf:82:f7:df:ed:45:b0:9d:2e:da:0b:
         11:cf:e7:74:8e:38:8f:35:c9:a0:c8:af:bf:f0:a7:e9:68:84:
         75:38:29:ee:23:c6:78:21:14:c7:fe:57:8e:f9:9a:7c:82:f7:
         5b:90:1c:38:bb:82:fb:a7:b0:27:ce:c1:84:6b:d2:56:8b:58:
         9e:04:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:41 2024 by rpki-client on console-fra.rpki-client.org