Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          wl5i9R/4dwgAmSHHgM8LRThjgXkIFLjDWHtmiYU7hsE=
Subject key identifier:   77:48:A1:EF:4C:66:CA:FD:5A:31:8D:5B:73:51:1A:83:D0:98:C9:9F
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       0193568A41E579DD3C08D9CE0366F6FC6F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          131A
Signing time:             Sat 23 Nov 2024 01:02:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:01 +0000
Files and hashes:         1: TH7-PtFiFISZGheky-i8tUt2_WQ.roa (hash: secWEWTrpHlbRV+/mTS/5UqdExQDYcrbrZi+fZinYoI=)
                          2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: TNFO7xFFXa6th0LWxJ695DAZZbM3zLBb34m1PFMaS3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:41:e5:79:dd:3c:08:d9:ce:03:66:f6:fc:6f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Nov 23 01:02:01 2024 GMT
            Not After : Nov 24 01:02:01 2024 GMT
        Subject: CN=7748a1ef4c66cafd5a318d5b73511a83d098c99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:7c:4f:a7:0c:e1:d6:ec:ee:62:b3:3c:69:
                    a0:b0:b9:74:6a:00:b7:bf:44:f2:4a:92:54:9a:09:
                    7f:05:58:b2:4d:85:8c:e7:d0:13:c0:4a:f4:e5:ec:
                    9a:1d:4c:df:ce:be:a5:ca:02:aa:62:a8:3d:50:db:
                    e0:ec:1c:72:53:5c:38:f7:da:92:10:c7:4f:77:82:
                    63:5e:59:fb:87:c5:0a:db:6d:75:67:76:1b:97:2a:
                    ce:68:36:25:6b:7b:0e:a5:0f:10:6b:b6:69:d0:e4:
                    e1:e6:3f:1c:5a:c9:26:30:cd:a5:73:bb:72:6c:f9:
                    3c:c6:bb:84:ac:09:6f:b8:7d:28:72:51:f3:3a:cc:
                    0e:24:3f:ac:d6:e6:b2:8b:4f:a5:92:96:15:bb:2d:
                    7c:a5:7e:68:b9:f6:fc:e9:6d:08:ec:15:ef:03:22:
                    85:2e:01:26:c8:82:2e:a5:69:79:89:39:32:ed:19:
                    69:91:9d:ce:8b:61:1f:af:67:97:43:6a:ff:bb:da:
                    b9:37:06:37:09:f1:d6:1e:c1:5e:b8:d8:1e:de:49:
                    51:40:16:27:60:05:92:cc:70:6f:37:05:1d:7d:b2:
                    da:3b:d4:0e:b4:0e:5f:8b:ab:f4:32:ec:18:81:b6:
                    3a:26:5d:eb:d2:c7:60:a0:73:74:6c:82:80:2a:22:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:A1:EF:4C:66:CA:FD:5A:31:8D:5B:73:51:1A:83:D0:98:C9:9F
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:14:c5:cd:0c:1a:17:c2:07:ff:86:5e:2a:32:08:8d:3b:c5:
         eb:a8:12:c6:c9:ea:da:1a:89:59:6d:b1:23:f8:92:ad:2a:31:
         64:4d:78:fd:6e:30:b2:9c:50:ec:c9:97:d7:2e:77:70:88:76:
         14:0e:60:88:e1:8d:79:c1:17:fd:ba:36:80:87:1f:54:84:1a:
         ed:17:37:14:86:29:4c:14:1d:87:1b:7f:80:64:57:e2:fb:a7:
         03:f0:0a:d9:40:8f:e6:60:82:cd:c5:be:97:0d:2d:63:bb:e5:
         dc:3e:18:58:fd:e7:07:c6:18:99:ac:20:97:ed:b4:c0:be:fb:
         9e:47:1d:f4:70:40:b9:a1:52:b7:ef:5b:b3:80:b4:a2:d7:ea:
         d9:ab:7e:0d:02:4d:ff:5a:d7:8d:70:03:52:9f:b0:15:5f:7f:
         fc:13:06:3a:f5:9a:e4:a3:60:a0:86:5a:ed:af:0d:eb:13:ef:
         13:0a:43:61:e4:e1:8c:43:d5:27:54:ca:dc:af:c5:aa:01:2c:
         99:ee:51:2a:15:57:fa:9c:9c:05:e2:be:08:c0:ad:cb:ac:32:
         68:f6:1a:cc:b9:15:41:47:19:be:83:cd:d4:c9:bd:74:5f:bf:
         2f:49:5b:dc:67:56:80:47:15:da:01:7d:17:18:4d:e3:6c:e4:
         51:ea:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:16 2024 by rpki-client on console-ams.rpki-client.org