Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File:                     wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier:          +jwqqBIsLwAVJM17bulTskAVYPkPV0FHXirbD7x6DeY=
Subject key identifier:   2C:4C:55:86:85:3F:84:9D:9D:A4:83:BC:9E:61:B4:85:88:21:89:FC
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer:       /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial:       019369DB18A218135452379057B358F0C3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number:          09E1
Signing time:             Tue 26 Nov 2024 19:03:06 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:06 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:06 +0000
Files and hashes:         1: PUiTUdMOVm6oO7BGxVXZZbjad4g.roa (hash: ObaXlLRJIu7XGk0dFC51HnPiEaho+p5JGWOYkBoMKQw=)
                          2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: 3J3wYyytV5wOqY5sf55Mn6CEbGbOH9wwokblA/4XSQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:18:a2:18:13:54:52:37:90:57:b3:58:f0:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
        Validity
            Not Before: Nov 26 19:03:06 2024 GMT
            Not After : Nov 27 19:03:06 2024 GMT
        Subject: CN=2c4c5586853f849d9da483bc9e61b485882189fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:c1:73:34:9c:7a:25:52:d1:a8:33:8b:b1:
                    24:f9:5f:5a:ca:eb:0a:29:87:bc:6e:27:b3:e3:70:
                    78:6f:b8:fe:29:64:66:47:f3:ed:3f:bc:55:66:4a:
                    f6:05:3d:6e:d1:3e:de:f6:f3:76:c9:f7:b8:3b:c2:
                    81:a3:8a:6e:4f:cd:76:69:b1:fa:e3:be:7a:97:2c:
                    ec:99:63:88:21:5b:18:2b:8f:1a:c0:26:f8:b5:5e:
                    52:4b:98:71:f5:18:7a:2b:e9:f3:b6:64:53:d1:43:
                    4d:c2:60:ec:90:a6:d6:6f:b7:2a:f7:69:02:50:c6:
                    5e:6b:4a:de:f6:b8:8f:51:a2:a3:d9:ba:a6:6f:1a:
                    0d:49:02:96:a6:89:da:f3:23:58:57:9c:4a:b3:45:
                    2b:4f:88:03:d3:e5:1e:0e:a3:26:7f:d4:ec:89:ee:
                    08:8a:1a:e1:89:1c:06:d2:93:7a:f2:c0:22:d6:6c:
                    b1:1d:a9:25:4c:93:52:e5:dd:1d:ec:6d:d9:39:d1:
                    88:35:39:c4:d4:cc:b5:8b:e9:23:b6:39:d3:41:4b:
                    4a:00:7f:ad:bb:a7:d5:63:03:89:69:dc:f6:48:52:
                    3b:56:76:50:88:41:09:b1:96:cd:2f:71:11:59:ab:
                    67:28:6e:9d:e5:56:ae:53:8a:2b:74:61:cc:03:d7:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4C:55:86:85:3F:84:9D:9D:A4:83:BC:9E:61:B4:85:88:21:89:FC
            X509v3 Authority Key Identifier:
                keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:67:49:43:b5:89:af:d7:8b:91:f4:bf:f8:4b:a9:be:3e:e3:
         83:ef:78:24:3d:1c:4c:f2:ff:41:bb:1e:41:cb:c0:f4:f7:03:
         27:f1:29:4c:6a:46:04:22:07:a7:de:36:80:fe:b0:41:46:d7:
         88:6e:24:c3:08:18:04:e4:64:49:bb:c0:3f:1d:e3:3c:43:79:
         3c:94:91:07:53:99:c5:25:04:ff:ab:d9:a5:18:cf:7f:de:6c:
         23:d4:c0:c5:ed:eb:25:33:e3:55:6f:e1:37:c9:52:5e:f9:5e:
         00:f1:44:de:39:3d:89:f9:56:f6:bf:a7:cc:22:5c:36:d7:4b:
         a2:c7:cc:30:cd:5c:a7:8e:6c:30:ae:4e:b1:47:dd:e2:e8:8d:
         d6:b7:64:ba:44:98:9b:74:46:e7:2a:0c:8c:48:b1:d0:dd:39:
         fc:e9:34:5b:f5:b1:2d:c4:fc:7c:62:32:75:e1:e2:9e:34:38:
         35:31:10:77:17:88:3d:9f:c5:15:95:ac:de:18:9a:99:d1:a8:
         34:d6:a0:51:1d:00:ee:ef:c9:61:03:9f:b7:ab:17:0a:ab:2f:
         8c:e9:0f:ae:e0:4f:b9:43:42:69:77:a0:80:d7:ae:bb:73:58:
         69:63:11:7a:a3:1a:27:b7:10:b6:7d:20:82:73:89:ba:7d:ac:
         8b:d0:97:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2xiiGBNUUjeQV7NY8MPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm
OTRiODgwHhcNMjQxMTI2MTkwMzA2WhcNMjQxMTI3MTkwMzA2WjAzMTEwLwYDVQQD
EygyYzRjNTU4Njg1M2Y4NDlkOWRhNDgzYmM5ZTYxYjQ4NTg4MjE4OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypjBczSceiVS0agzi7Ek+V9ayusK
KYe8biez43B4b7j+KWRmR/PtP7xVZkr2BT1u0T7e9vN2yfe4O8KBo4puT812abH6
4756lyzsmWOIIVsYK48awCb4tV5SS5hx9Rh6K+nztmRT0UNNwmDskKbWb7cq92kC
UMZea0re9riPUaKj2bqmbxoNSQKWpona8yNYV5xKs0UrT4gD0+UeDqMmf9Tsie4I
ihrhiRwG0pN68sAi1myxHaklTJNS5d0d7G3ZOdGINTnE1My1i+kjtjnTQUtKAH+t
u6fVYwOJadz2SFI7VnZQiEEJsZbNL3ERWatnKG6d5VauU4ordGHMA9fHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxMVYaFP4SdnaSDvJ5htIWIIYn8MB8GA1UdIwQY
MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt
MDgxMTExMDNjY2Y5LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5
LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2dJQ7WJ
r9eLkfS/+Eupvj7jg+94JD0cTPL/QbseQcvA9PcDJ/EpTGpGBCIHp942gP6wQUbX
iG4kwwgYBORkSbvAPx3jPEN5PJSRB1OZxSUE/6vZpRjPf95sI9TAxe3rJTPjVW/h
N8lSXvleAPFE3jk9iflW9r+nzCJcNtdLosfMMM1cp45sMK5OsUfd4uiN1rdkukSY
m3RG5yoMjEix0N05/Ok0W/WxLcT8fGIydeHinjQ4NTEQdxeIPZ/FFZWs3hiamdGo
NNagUR0A7u/JYQOft6sXCqsvjOkPruBPuUNCaXeggNeuu3NYaWMReqMaJ7cQtn0g
gnOJun2si9CXQg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:33 2024 by rpki-client on console-fra.rpki-client.org