Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          Th0s/tpApOShJNQIpOkwG9iNu7QyAiPP0tQdkQD/EXg=
Subject key identifier:   B5:4C:38:38:63:2A:22:21:F1:3B:23:18:06:95:A8:E5:D0:2A:D4:65
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       0194064653A3963782BD439F4CDED8BC4213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          13CE
Signing time:             Fri 27 Dec 2024 04:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:59 +0000
Files and hashes:         1: 5HLYGombSXu1TbsAZMChuHu8PkQ.roa (hash: zK2L9ewspjYTWwC64HvewG2kGVOHUK1t9HFdEAPX1vE=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: N/ZM805Zkl0w5G00bA+8jb7sKEl4D4DQKxs34JXc3FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:53:a3:96:37:82:bd:43:9f:4c:de:d8:bc:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Dec 27 04:00:59 2024 GMT
            Not After : Dec 28 04:00:59 2024 GMT
        Subject: CN=b54c3838632a2221f13b23180695a8e5d02ad465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:7c:13:84:1d:5b:a4:bd:09:81:ad:79:39:
                    5c:3d:6b:f5:97:a4:97:f4:04:cb:58:cf:a4:e5:ba:
                    af:0e:a3:99:44:35:8c:51:57:63:78:15:3f:d6:74:
                    53:66:61:7e:b5:6d:4e:c6:28:9e:99:34:db:e4:1f:
                    b8:54:95:58:cb:98:70:d3:05:14:e7:c7:4b:ef:51:
                    fd:c4:3e:f2:da:ed:1c:61:f8:4b:c0:57:08:8b:21:
                    7e:e3:10:b7:50:8c:6f:11:e6:2b:4b:81:00:38:80:
                    6f:e2:c3:f7:99:af:8d:a0:9d:22:22:ea:9b:bb:02:
                    44:f4:02:b4:9c:ea:45:6d:e9:90:32:12:19:4c:8e:
                    86:6c:5a:99:db:a2:53:89:92:6e:eb:5b:6f:0c:01:
                    1f:cd:14:14:c2:d7:e6:63:9c:aa:92:f0:8c:e2:4c:
                    0c:bb:04:66:cb:93:9f:77:eb:d2:9d:04:03:6d:38:
                    f2:73:39:c7:25:cc:55:22:b2:1e:46:d7:6b:49:64:
                    78:81:b9:12:c8:c3:88:90:06:20:2d:b0:c3:f2:d2:
                    9a:f8:e9:7b:2d:fb:04:64:a8:fe:ad:d6:61:4d:59:
                    51:fb:c3:e2:45:c7:77:72:b6:a4:a9:2f:19:79:4a:
                    06:50:b0:ab:d7:f3:10:74:31:cf:88:9e:5d:12:c0:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4C:38:38:63:2A:22:21:F1:3B:23:18:06:95:A8:E5:D0:2A:D4:65
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:69:72:f7:39:a0:ef:23:fb:8a:1f:95:d5:5c:51:91:c1:
         e1:3e:09:23:78:a8:1b:d1:6a:71:ca:b3:41:51:2b:91:5e:93:
         d3:f3:7d:3a:82:f1:ed:3a:3a:e0:a1:82:1b:41:7d:53:35:1f:
         51:75:5a:ae:27:64:e2:7f:fa:9c:39:6c:3a:19:0f:2f:12:36:
         53:5f:13:2a:94:0b:4f:a9:30:9f:8c:58:09:7c:ee:2a:6f:e7:
         53:68:d2:25:5d:a6:c2:ef:e6:e8:2b:d3:f0:15:cb:db:48:05:
         f5:3a:f0:c1:0f:f7:cc:6f:5a:89:ed:5e:14:76:d3:09:5d:32:
         cc:4f:75:eb:8f:b3:e0:01:31:8a:16:0a:3e:e3:fd:5f:cf:30:
         bf:f2:2a:9c:98:8e:86:34:94:e3:b4:df:da:14:bc:68:93:cf:
         dd:53:33:58:58:de:cd:d4:7c:0c:2c:a1:fa:99:30:92:7f:6a:
         fe:cd:be:c0:aa:82:2f:df:1a:d6:18:62:21:2d:47:29:82:5d:
         7c:da:a9:ec:93:ee:98:44:ad:e9:1a:4a:90:b7:d4:9a:b5:03:
         28:96:a1:63:3a:21:02:c1:ff:dd:df:14:a9:a8:4e:98:df:c1:
         d7:34:1a:e5:4b:b1:35:76:13:89:d4:8a:c9:55:c1:57:29:a5:
         1d:4a:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:17 2024 by rpki-client on console-fra.rpki-client.org