Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          4O7I8s2q1rp+pQ1tNZxcPWIjyDivxlQQG4mouiChGBQ=
Subject key identifier:   71:E2:01:E6:58:9C:3F:77:40:20:B4:0C:08:D2:8A:45:B0:11:EF:81
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       01935878AA6D54D3E0741C14CE061CE3D6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 10:02:03 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:03 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:03 +0000
Files and hashes:         1: QLERAXxHaK34s8FyK4Vvp15pGkE.roa (hash: 4CTGVHYelhgW0zPL8KdpNKMjdQhanQG4X+t7wPcaZyI=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: iaYFlzs+KvoMSWK6IApjNKKYOXER7aIbElSn9mOvgNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:aa:6d:54:d3:e0:74:1c:14:ce:06:1c:e3:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: Nov 23 10:02:03 2024 GMT
            Not After : Nov 24 10:02:03 2024 GMT
        Subject: CN=71e201e6589c3f774020b40c08d28a45b011ef81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:fb:ee:76:44:34:e9:f8:26:c1:1f:1f:63:
                    4f:fc:e2:d3:b1:66:de:7e:15:63:fa:03:6e:4a:cf:
                    6b:ac:44:fa:e7:05:63:c3:ca:cd:9b:49:0b:4b:eb:
                    83:9e:ea:14:dc:7d:16:29:4c:c1:10:76:01:24:09:
                    7e:4e:ef:c4:70:79:ac:3b:74:42:78:4b:ea:67:b5:
                    05:6d:fd:e6:cd:68:86:a2:9d:98:d7:79:9d:ef:63:
                    99:00:d9:b2:ef:aa:09:64:09:3c:f4:b0:95:b9:cb:
                    37:ba:c0:3b:eb:4d:ae:56:07:c5:2b:e3:67:9c:e0:
                    01:74:d1:2d:f1:1b:c6:c7:6b:53:5b:17:f6:2e:fd:
                    a1:c4:02:a0:56:0b:96:86:23:5a:be:48:7a:e9:6a:
                    00:16:f9:eb:e7:25:cd:51:ef:a6:d1:2c:ab:3c:57:
                    9b:6f:d6:ca:69:ce:4a:55:24:3e:20:f7:9d:a5:92:
                    c5:17:75:1c:67:b7:d5:c2:c0:60:c6:62:11:2f:a4:
                    b0:40:c3:96:54:3c:28:28:01:ea:c5:7c:e3:82:e9:
                    d8:2f:f7:7f:5b:8b:ae:89:f2:61:27:3e:b2:78:4d:
                    5d:a1:ae:f9:c5:df:c5:bb:5a:96:f6:53:91:fc:3d:
                    5d:b9:1c:a5:8c:f2:15:00:fa:38:db:b4:4f:9c:22:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:01:E6:58:9C:3F:77:40:20:B4:0C:08:D2:8A:45:B0:11:EF:81
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:a6:0d:f1:29:60:ff:86:82:bb:8e:7f:8e:d3:1d:a0:2b:
         a4:02:a5:93:d0:95:46:be:63:e7:f0:00:44:3d:44:b9:7b:ad:
         45:29:b6:4e:c8:4e:2c:0d:4d:64:ad:eb:6b:ce:b4:97:0c:de:
         ff:59:bd:cb:8f:e8:98:a6:34:e4:b1:e8:df:61:f3:ed:c4:1f:
         42:37:97:7d:9f:8d:7e:c9:36:aa:73:ab:1d:20:32:05:23:41:
         c1:ec:99:b7:9f:61:32:e4:d6:9c:49:8f:c9:bd:8e:6e:1c:99:
         41:61:c0:60:4e:80:05:9b:a4:b1:ac:2f:0f:e9:7e:93:71:47:
         0b:ad:af:3b:b5:b1:30:67:57:13:8d:c1:cc:95:f9:ce:60:db:
         97:55:94:19:3a:71:e1:42:a9:15:a0:7b:2f:f4:7c:fd:50:56:
         38:63:4d:8c:76:02:31:88:30:31:4d:2b:f1:bd:aa:d0:b6:03:
         ca:cc:93:91:50:f9:39:ae:20:06:e3:a4:b7:3c:71:c8:1b:dc:
         1f:47:08:c6:ff:0a:67:2a:d4:25:57:14:63:37:73:4c:50:f9:
         f7:76:fe:97:91:a4:07:48:84:1c:7d:2b:b5:06:fb:1b:ee:59:
         21:57:e2:2b:76:72:25:5c:cf:c8:a9:99:ad:2e:15:84:62:69:
         f8:76:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:24 2024 by rpki-client on console-ams.rpki-client.org