Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          tqaJSxSrP4TbjD/3dJtneYDqzKcIyE8tVjafhlhCHZk=
Subject key identifier:   A1:21:53:30:57:4F:FD:5F:AA:F8:2D:80:5B:7D:3B:20:E5:6F:C6:05
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019367EC2E8F0D620E84B3D10732C4DD3271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          0C4C
Signing time:             Tue 26 Nov 2024 10:02:31 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:31 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:31 +0000
Files and hashes:         1: 7k2l86v_fGsAzHLQnEwtyrqNsXE.roa (hash: oDIYhM05cdDr0oh2sXXqWmCnSmja/SXzTSWxMRJzgSs=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: 7f0/09i9t27FS8oNWSC0yT2bASjO5pz8MSX3Hx4Uouo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:2e:8f:0d:62:0e:84:b3:d1:07:32:c4:dd:32:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Nov 26 10:02:31 2024 GMT
            Not After : Nov 27 10:02:31 2024 GMT
        Subject: CN=a1215330574ffd5faaf82d805b7d3b20e56fc605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:8b:d9:fb:15:1d:38:fb:7d:fa:3d:2f:5e:
                    66:45:62:ea:cb:db:fe:00:18:c3:7e:4b:f0:25:0d:
                    7d:7b:c7:4b:c7:28:da:48:d9:7e:e7:b6:92:2b:21:
                    7d:cf:81:8c:3f:a7:7e:21:f9:c2:f3:ff:47:ec:48:
                    a9:fc:3c:52:13:58:42:6a:61:ab:b8:4b:53:ad:aa:
                    d9:57:09:47:d6:7d:84:0d:19:de:33:2a:d3:71:d3:
                    11:a5:f6:a0:15:1b:c4:d0:2e:8f:52:76:2c:17:d8:
                    f9:65:83:59:26:9d:1e:fd:64:01:76:4b:cd:32:cd:
                    a9:90:0a:41:3f:f5:41:95:57:28:81:90:29:ab:52:
                    b9:33:36:d7:c7:7d:df:23:d3:af:27:ea:6f:ed:c8:
                    23:ce:e3:10:b0:5e:1d:38:a3:35:56:32:06:2e:8d:
                    3d:32:a2:b9:a2:10:4e:f4:7f:c4:a0:7b:98:37:13:
                    92:a4:28:b9:9c:01:d3:53:59:89:64:d7:2d:4e:f8:
                    1b:e1:43:0b:80:e7:d1:0d:a6:49:66:b0:0b:f0:3a:
                    45:9a:1c:20:6c:5c:59:38:1f:b5:af:06:55:d2:bd:
                    b0:1c:50:a2:eb:39:9d:74:b9:f8:18:54:5a:27:35:
                    d8:f9:2d:69:79:af:c7:5b:89:bf:99:3e:dd:3b:c8:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:53:30:57:4F:FD:5F:AA:F8:2D:80:5B:7D:3B:20:E5:6F:C6:05
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d6:1f:54:3e:2a:39:17:e0:f4:28:48:37:fd:58:71:16:cf:
         57:40:b5:95:11:83:c1:e5:71:a9:f1:7a:e8:98:9b:ed:d0:6b:
         ff:2b:6d:bc:0f:10:61:a3:0e:30:3b:72:c4:64:47:d6:a6:44:
         04:9b:58:c0:b5:92:94:23:5b:b2:52:c5:e6:a6:7d:c7:24:5d:
         48:9f:d5:25:34:da:55:36:cb:32:d5:dd:f1:e8:03:42:fc:f0:
         73:b9:1d:e0:80:7f:57:be:c2:85:74:a1:fb:51:32:1c:12:2a:
         36:55:c1:59:9a:d9:9e:2c:7e:e5:2b:aa:1c:a9:b2:a6:19:4a:
         31:5a:01:45:10:b6:a6:da:bc:a1:9f:9e:d6:8c:26:18:43:07:
         25:04:aa:a1:c7:f5:57:c6:bd:00:ee:81:0f:42:7d:4c:4f:b0:
         92:33:3b:49:f9:e3:b2:e1:de:ac:98:47:74:a5:b3:52:6b:5f:
         f4:27:bd:2a:69:c0:06:a5:b8:83:33:94:5f:17:90:a1:3a:0a:
         a9:be:53:23:43:f1:f6:8d:53:83:63:69:32:c9:ad:e0:c3:22:
         bd:2c:01:cb:6b:dc:49:52:c1:53:b0:d4:9c:f9:e9:3c:19:68:
         e3:a3:fd:2a:96:ec:b6:80:49:de:6d:a1:b0:11:d0:90:c6:a2:
         fa:48:7b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn7C6PDWIOhLPRBzLE3TJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2
Y2U1MDgwHhcNMjQxMTI2MTAwMjMxWhcNMjQxMTI3MTAwMjMxWjAzMTEwLwYDVQQD
EyhhMTIxNTMzMDU3NGZmZDVmYWFmODJkODA1YjdkM2IyMGU1NmZjNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP2L2fsVHTj7ffo9L15mRWLqy9v+
ABjDfkvwJQ19e8dLxyjaSNl+57aSKyF9z4GMP6d+IfnC8/9H7Eip/DxSE1hCamGr
uEtTrarZVwlH1n2EDRneMyrTcdMRpfagFRvE0C6PUnYsF9j5ZYNZJp0e/WQBdkvN
Ms2pkApBP/VBlVcogZApq1K5MzbXx33fI9OvJ+pv7cgjzuMQsF4dOKM1VjIGLo09
MqK5ohBO9H/EoHuYNxOSpCi5nAHTU1mJZNctTvgb4UMLgOfRDaZJZrAL8DpFmhwg
bFxZOB+1rwZV0r2wHFCi6zmddLn4GFRaJzXY+S1pea/HW4m/mT7dO8g1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEhUzBXT/1fqvgtgFt9OyDlb8YFMB8GA1UdIwQY
MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt
NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy
LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNYfVD4q
ORfg9ChIN/1YcRbPV0C1lRGDweVxqfF66Jib7dBr/yttvA8QYaMOMDtyxGRH1qZE
BJtYwLWSlCNbslLF5qZ9xyRdSJ/VJTTaVTbLMtXd8egDQvzwc7kd4IB/V77ChXSh
+1EyHBIqNlXBWZrZnix+5SuqHKmyphlKMVoBRRC2ptq8oZ+e1owmGEMHJQSqocf1
V8a9AO6BD0J9TE+wkjM7SfnjsuHerJhHdKWzUmtf9Ce9KmnABqW4gzOUXxeQoToK
qb5TI0Px9o1Tg2NpMsmt4MMivSwBy2vcSVLBU7DUnPnpPBlo46P9KpbstoBJ3m2h
sBHQkMai+kh78Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:48:46 2024 by rpki-client on console-fra.rpki-client.org