Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File:                     tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier:          qievzxup6s5g/GlJXyg+sPlM/1BCM/Kb5TrhhmnMGvg=
Subject key identifier:   49:87:4A:C9:27:C6:07:02:F8:C8:DD:29:A8:FD:13:71:90:8C:AF:A4
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer:       /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial:       01936AB4E65D92376E7FC002B0C42D3807EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number:          104F
Signing time:             Tue 26 Nov 2024 23:01:00 +0000
Manifest this update:     Tue 26 Nov 2024 23:01:00 +0000
Manifest next update:     Wed 27 Nov 2024 23:01:00 +0000
Files and hashes:         1: N-sGtHWUcJ8IV8hXgz3ja5hxN2Y.roa (hash: ompp9JnE/tt3r2p7XF7IgrI3M5LEcc0jJRvkC2AHd+s=)
                          2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: EP0H6mL26jSGntP6B9Ou8k8NjJfe785Kdx7xHbOVVf4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:e6:5d:92:37:6e:7f:c0:02:b0:c4:2d:38:07:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
        Validity
            Not Before: Nov 26 23:01:00 2024 GMT
            Not After : Nov 27 23:01:00 2024 GMT
        Subject: CN=49874ac927c60702f8c8dd29a8fd1371908cafa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:4a:36:6f:93:55:65:d4:ce:43:08:27:00:
                    2e:e8:f3:68:31:be:3e:1f:27:05:9e:fa:08:0a:04:
                    a1:99:2c:33:8b:6b:bc:95:f9:68:89:4d:78:5b:7e:
                    f3:78:b4:ce:5a:63:d7:3d:cf:dd:c5:b3:24:13:b9:
                    dc:82:e3:1e:d2:1e:b3:25:87:37:78:9a:36:6a:64:
                    5c:ef:84:01:9f:5c:a8:55:e7:cc:ce:54:db:1d:70:
                    28:bc:a1:6c:73:6e:58:32:b2:fb:6d:04:5b:49:60:
                    1c:ad:e1:09:06:34:69:a3:3e:72:6f:00:e7:f0:c1:
                    e9:8d:da:17:d0:47:81:65:35:61:39:b2:0d:a9:15:
                    2f:cc:b1:32:f0:83:36:f0:d8:6a:9f:29:ca:4b:30:
                    70:1d:55:33:2a:1f:51:26:d4:38:43:34:25:46:b1:
                    db:91:28:f1:6b:06:c4:96:44:eb:96:a0:a9:5b:9f:
                    86:ac:9d:ea:1e:fa:c2:17:65:98:0e:68:c4:e9:e8:
                    e2:4b:f2:4b:48:5a:99:b9:eb:55:8b:45:40:21:fe:
                    83:eb:74:01:dc:da:5d:77:52:e9:c2:97:9d:55:f3:
                    c5:10:17:d2:f4:55:b9:9b:9c:b3:cc:aa:0a:f7:06:
                    51:c2:5f:45:93:44:23:a1:10:94:45:91:91:d8:17:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:4A:C9:27:C6:07:02:F8:C8:DD:29:A8:FD:13:71:90:8C:AF:A4
            X509v3 Authority Key Identifier:
                keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:5f:e5:42:97:38:b1:00:90:54:a9:f0:b5:5e:df:c6:7b:
         47:b8:66:13:e4:05:ad:f9:1f:44:53:25:58:36:83:1e:30:02:
         9d:5e:b6:d5:07:88:17:8c:43:8b:b6:3b:d5:e6:68:f7:72:32:
         5e:87:0c:68:f3:d3:d1:0e:6f:9f:e3:55:b4:26:3f:ea:3f:d0:
         23:36:ed:73:e5:3c:30:34:2f:0a:e0:72:66:79:bc:3d:f0:36:
         14:72:d3:d4:f5:df:e1:b0:33:b9:df:f6:d0:61:65:64:6f:1d:
         b3:b2:90:b3:04:0f:58:dd:a8:0f:93:e0:ff:b2:e9:bf:91:46:
         04:4e:c3:f1:cd:ed:f4:c3:00:b1:a0:ee:64:0b:fe:de:73:38:
         dc:49:ba:fc:d1:88:27:c0:20:ad:18:24:03:f8:bd:9d:2b:9c:
         f3:18:1b:1a:55:c0:06:a2:9d:a9:69:84:73:15:c6:fd:f9:43:
         63:1a:8b:35:f4:45:fe:10:76:fd:93:0f:be:c3:7b:c5:cf:85:
         94:29:29:64:4f:1e:cb:a6:b5:9d:9f:2a:7b:04:17:03:5e:cb:
         65:c3:8e:75:b2:10:74:9b:f1:4a:bf:ab:e6:45:cb:36:1a:18:
         43:57:68:d2:83:c0:13:e5:16:65:ac:02:80:ed:e9:3c:f0:00:
         24:ad:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:50 2024 by rpki-client on console-ams.rpki-client.org