Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File:                     wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier:          /+dUKYiaXGrFnEsVM8nZdzT67uv9HcrgS17a9Hli4+w=
Subject key identifier:   94:0F:A8:5C:AA:EF:D9:48:58:DE:B7:6D:E8:38:A0:53:52:BE:A5:16
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer:       /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial:       01936AB44F87FEB8122D2A5DE0A9E30BDEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number:          0C4E
Signing time:             Tue 26 Nov 2024 23:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:21 +0000
Files and hashes:         1: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: mWFwrMWfmTcTCVLzghAxff2R/4KLcfHPaTQFtai3vgo=)
                          2: yZ4mv2GNBpF2s8xhif6RvJH_mek.roa (hash: eF71+BtyVjVcTQrVyjHn8NY6MvpEmaTN1GZAR9bTUKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:4f:87:fe:b8:12:2d:2a:5d:e0:a9:e3:0b:de:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
        Validity
            Not Before: Nov 26 23:00:21 2024 GMT
            Not After : Nov 27 23:00:21 2024 GMT
        Subject: CN=940fa85caaefd94858deb76de838a05352bea516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:d8:af:6a:51:ef:27:b1:4d:f1:6b:36:d6:
                    7d:17:75:6a:a1:47:95:96:2d:53:c0:91:72:6a:e9:
                    ac:bf:e3:80:19:94:64:62:62:f5:ba:02:f6:cf:83:
                    a8:55:40:8f:f6:a3:eb:e2:3b:18:c0:8a:a1:45:cb:
                    5a:f1:f0:82:48:83:25:22:c9:1f:e3:57:f6:82:51:
                    a9:08:02:60:2a:a1:5f:6c:4a:27:d2:0f:96:d1:c0:
                    a5:9b:a5:8d:fb:98:13:26:a1:e5:a4:e2:f2:ad:46:
                    e8:a4:c1:76:26:2e:4a:5e:c7:83:36:96:55:d7:09:
                    9f:1b:d8:40:b4:78:dc:16:07:bd:cd:e1:d9:23:60:
                    9a:a9:e7:71:5d:f6:e7:03:2f:28:70:cd:93:07:4d:
                    6e:d5:9e:4c:1b:2a:0f:18:bb:a4:0e:ae:2a:27:5a:
                    ce:20:79:8c:16:e3:4b:54:fd:93:35:13:45:ed:1e:
                    38:8e:7b:c3:bd:75:99:87:68:f9:44:ec:58:3f:70:
                    83:34:aa:0d:7e:4f:84:b4:73:c5:41:6a:8a:7c:fe:
                    7e:e4:35:30:bc:bc:5b:de:67:94:c6:64:80:4b:eb:
                    44:d4:a0:62:ad:54:59:d8:9b:7a:c9:46:1a:8e:62:
                    2e:57:a1:c8:12:e1:07:b8:1a:01:88:ab:d9:cc:bf:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:A8:5C:AA:EF:D9:48:58:DE:B7:6D:E8:38:A0:53:52:BE:A5:16
            X509v3 Authority Key Identifier:
                keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:96:77:5c:1b:b9:3f:a2:c3:41:0a:39:da:c7:7c:6b:1d:
         65:f8:bd:d2:25:e0:72:86:8e:24:8a:85:e9:46:27:ed:e7:0d:
         c3:19:46:20:e1:d3:8e:7f:32:7f:a4:89:24:32:36:ba:bd:89:
         1f:08:90:03:29:cc:15:59:e0:31:fe:5f:95:09:76:b4:61:c6:
         4e:22:d1:05:73:c7:84:4f:26:0a:a7:ea:59:c9:2e:00:83:b9:
         eb:32:d7:db:6a:85:45:a3:26:1f:90:2d:65:fa:9b:ee:20:2e:
         e5:ed:7e:a1:c9:e2:f7:25:0c:8b:39:be:a8:a9:db:31:b2:b6:
         92:ee:6e:8e:26:2c:74:74:7a:ee:e4:b8:87:c8:ca:c9:44:2e:
         33:31:cb:aa:73:43:ec:d3:86:72:45:da:95:64:80:95:81:df:
         2b:64:6d:74:2d:02:61:d0:bf:9d:f0:18:c4:ec:78:f1:a7:58:
         f7:5a:31:83:92:8d:a6:85:88:4b:32:87:ba:3c:db:51:d9:87:
         6b:6b:85:6d:df:44:4d:0f:e9:e0:d4:75:b2:28:d9:d4:51:d9:
         e7:f9:ce:05:b4:71:8e:91:ef:3b:65:63:82:27:41:a1:12:56:
         3e:58:31:8e:62:d6:3d:17:a6:f2:95:c1:58:d3:68:b7:fa:1a:
         c5:83:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:35 2024 by rpki-client on console-ams.rpki-client.org