Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File:                     kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier:          78G0QBtGFS8SfCRHPlZ/06oNXCIMglnRl9kd+lZCGyY=
Subject key identifier:   0B:0A:63:D4:A2:AC:FF:56:D9:94:1F:58:B1:AC:98:C3:C3:A9:E1:B2
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       019369DAF8EED002BE1B7DDC08CE1BAC258F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number:          130E
Signing time:             Tue 26 Nov 2024 19:02:58 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:58 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:58 +0000
Files and hashes:         1: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: KX7W6WfKH7zo2E1v8yuVrWSjdei8r8KTCIhGA1q+H1w=)
                          2: oVJIpvHEFVSZKMOPsKtfllBj_ss.roa (hash: LylZJ4lBF/jq2Hy9/s61S0y2ClDRuKyuO38SibF/GMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f8:ee:d0:02:be:1b:7d:dc:08:ce:1b:ac:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Nov 26 19:02:58 2024 GMT
            Not After : Nov 27 19:02:58 2024 GMT
        Subject: CN=0b0a63d4a2acff56d9941f58b1ac98c3c3a9e1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:cc:48:e9:48:a1:4c:4f:eb:70:b3:d0:ed:
                    3d:0d:f5:49:2b:39:1e:2b:cd:aa:81:5c:2a:30:cc:
                    7a:d5:c9:14:70:dd:1a:1e:1d:c8:d8:5f:f5:94:32:
                    43:af:a3:35:a5:dd:24:c4:df:70:f8:77:ba:69:77:
                    02:45:a8:7b:37:5d:9d:99:66:64:54:b8:36:60:3c:
                    7e:e0:bc:c3:30:50:e8:19:47:41:b5:0c:ad:b3:6e:
                    fe:7d:26:49:6f:a6:f1:60:ab:e1:9a:0e:c0:25:cd:
                    8d:06:93:f1:df:b9:22:30:1c:71:b3:d4:f4:63:96:
                    54:dc:b8:6a:4b:77:25:b9:0e:78:1c:9c:0b:83:f6:
                    19:cc:3b:75:c8:8b:4b:c0:ce:82:67:93:e7:00:18:
                    cb:cf:9c:b4:31:68:73:8c:33:54:99:4b:bb:be:60:
                    d9:47:38:52:74:35:b4:8d:47:84:17:03:7e:f2:a7:
                    be:e7:2e:5b:89:cf:07:1a:4c:a9:99:d8:9f:fd:6d:
                    3a:9d:75:95:5e:2a:39:f4:1b:03:59:91:6b:74:1b:
                    e2:f0:92:67:df:e1:f5:a3:5d:92:db:8c:ea:99:2c:
                    4d:d2:7d:cb:21:7d:cb:b4:60:4f:f4:58:e0:76:16:
                    5a:5f:6e:8f:03:c0:f6:92:e8:6d:40:83:4f:cb:95:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:63:D4:A2:AC:FF:56:D9:94:1F:58:B1:AC:98:C3:C3:A9:E1:B2
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:fd:89:96:7e:9c:71:bd:4e:90:e2:19:ec:f4:63:69:bd:
         79:7d:b4:6d:b5:eb:3e:ca:81:5c:35:1a:db:f1:79:b1:de:76:
         3e:60:06:7c:28:b6:41:0e:79:f4:a9:0e:b6:b7:09:3d:7a:58:
         a7:b2:cf:b3:40:4d:1e:27:ec:b6:71:1b:7d:60:5f:8b:d1:c9:
         01:06:85:73:2c:6b:83:7b:52:c6:48:a9:2d:b7:71:1c:19:ae:
         9a:c6:25:6a:5c:7b:5e:b5:02:d5:b4:77:dc:93:9a:3c:55:6e:
         c8:c0:22:d4:48:eb:8b:aa:34:22:36:9c:32:a6:05:b0:f1:47:
         eb:fa:a5:c0:3c:16:62:21:1b:30:ba:66:20:7e:77:a7:81:d9:
         af:fe:b8:a5:13:de:4a:72:21:d8:ce:2e:ea:45:8e:e4:c9:44:
         e0:38:bc:48:e9:83:cb:b4:db:b3:89:51:23:ea:b3:96:17:92:
         67:ec:af:ff:b9:eb:65:e7:70:9d:b3:18:57:c4:8b:b7:b4:34:
         e0:ea:b1:ec:9f:50:48:70:30:8d:02:79:ef:44:1c:8f:7c:ae:
         51:99:cd:c7:60:7d:67:a4:d7:5e:62:ea:76:9e:a4:9f:fd:a3:
         5f:59:e0:41:01:83:3e:5d:90:df:67:80:c9:8a:7e:a5:8f:3a:
         46:81:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:40 2024 by rpki-client on console-ams.rpki-client.org