Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
File:                     w-n8ZGejquEeyh5P15bA8hUYrAA.mft (raw, json)
Hash identifier:          rEqai2x2P/YgaK1ZzZ2Ia/VpaTZCA/GzAeoP1mF9Elw=
Subject key identifier:   DF:DA:2D:F3:1F:66:9F:D5:8B:53:D6:4D:BE:97:12:3C:73:26:3D:C9
Authority key identifier: C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
Certificate issuer:       /CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Certificate serial:       01935809261517E780266CC41A87934BC85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
Manifest number:          0270
Signing time:             Sat 23 Nov 2024 08:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:14 +0000
Files and hashes:         1: w-n8ZGejquEeyh5P15bA8hUYrAA.crl (hash: IwyTTtjTyawu1cUKEClS2x6gakvp+Ig7g9FVx/1AmNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:26:15:17:e7:80:26:6c:c4:1a:87:93:4b:c8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
        Validity
            Not Before: Nov 23 08:00:14 2024 GMT
            Not After : Nov 24 08:00:14 2024 GMT
        Subject: CN=dfda2df31f669fd58b53d64dbe97123c73263dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:73:05:46:3f:8c:0e:b5:15:65:f0:cf:f4:
                    70:02:12:ca:7f:52:45:1d:36:21:5e:99:68:3e:96:
                    f7:08:21:05:61:73:48:54:f3:70:7d:f4:e0:6c:c1:
                    3c:aa:68:5b:46:12:60:60:77:59:da:9e:b6:78:04:
                    95:4e:a4:d3:ff:38:54:66:b9:35:23:b1:42:0c:f0:
                    94:4b:00:13:28:8a:cf:23:f2:29:47:5b:83:cd:ff:
                    7b:ba:e7:da:f5:b0:0a:df:8f:b8:18:00:5d:d0:65:
                    15:bd:76:1a:54:a8:af:55:45:67:c4:20:f2:cb:21:
                    32:ff:44:40:8d:a0:3d:f1:9a:d2:8c:5e:d5:09:c0:
                    9f:f7:e1:46:f6:cf:1e:5c:69:16:f2:51:66:ee:86:
                    ef:c7:41:19:67:de:9d:d1:df:4e:a6:98:5b:6e:7d:
                    f1:0a:1a:89:e4:21:fa:b1:85:9d:6a:92:3a:c2:25:
                    8f:2c:81:c9:60:e0:0d:d1:6d:c6:ba:b7:dc:65:ee:
                    3e:00:a8:56:6c:83:8d:69:56:79:6d:24:f0:16:ff:
                    cb:2c:21:e3:1a:fc:a9:1d:ad:12:2f:dd:7c:2d:93:
                    9b:ff:af:6d:bf:21:a6:38:e4:23:9f:a0:76:44:e9:
                    80:4d:3d:1e:af:cf:59:0c:5f:5a:10:e3:6c:8e:a8:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:2D:F3:1F:66:9F:D5:8B:53:D6:4D:BE:97:12:3C:73:26:3D:C9
            X509v3 Authority Key Identifier:
                keyid:C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:bd:cd:16:51:e6:4a:c8:0c:0c:9e:28:60:c4:78:43:73:
         80:99:3f:4a:dd:0e:c4:24:41:74:2a:35:18:fa:61:24:14:97:
         d4:fa:a8:5f:4b:32:ee:fd:59:54:52:81:12:cd:4d:e0:5e:79:
         e3:4f:ca:e0:99:c6:9f:90:80:f0:ad:c8:31:1e:a9:23:bb:e1:
         0c:f5:4e:f2:a2:81:02:99:c5:8a:b2:2c:ce:3e:fc:5d:83:dc:
         76:63:52:00:0c:9a:21:d3:5a:74:72:31:ce:1a:7d:5c:fa:2d:
         2e:91:da:de:59:d0:68:75:0f:05:07:27:bd:d4:7b:60:3c:2e:
         5f:e3:4c:b6:98:b9:7f:ee:80:8d:09:36:a3:2d:5a:68:ec:86:
         a2:37:b1:60:12:33:42:80:1b:34:cb:cc:fb:2b:4e:ed:e4:92:
         0c:fd:ec:dc:56:3b:9c:7e:73:76:17:54:74:12:e6:e8:6f:11:
         3d:90:19:c3:c9:a7:ee:a7:62:e1:10:0f:22:7c:c3:ef:24:e3:
         ef:78:20:ec:5a:13:37:1d:2c:6c:db:c1:db:50:c8:05:f8:cd:
         9c:c4:92:a9:63:6e:1b:72:f6:96:29:8e:d6:8b:e9:c0:b4:bc:
         c2:ca:7e:74:3f:54:4a:f5:4b:14:c1:e2:6e:2d:91:7f:37:ba:
         b3:2a:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:48 2024 by rpki-client on console-fra.rpki-client.org