Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File:                     _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier:          zrVxZMjpk8ImVi43mqoM4wXDbXL19MNq92G5nNO/XA8=
Subject key identifier:   C5:AB:DD:9E:34:63:9E:A2:71:04:92:FC:61:F4:B5:7E:C4:F8:46:B9
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer:       /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial:       01936B22420C0A4BE198945FC24DB3A03580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number:          0465
Signing time:             Wed 27 Nov 2024 01:00:27 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:27 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:27 +0000
Files and hashes:         1: QoFAobTP3q0TNFC1nd2JvyylSck.roa (hash: bKzmA5xp4M1d+jbktmc0fHnphG1Bg3/lQV5MTj1qJTo=)
                          2: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: SkW+SOWNpB1drr3n6M9XUTOoka38mX1lhm2i4prNJPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:42:0c:0a:4b:e1:98:94:5f:c2:4d:b3:a0:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
        Validity
            Not Before: Nov 27 01:00:27 2024 GMT
            Not After : Nov 28 01:00:27 2024 GMT
        Subject: CN=c5abdd9e34639ea2710492fc61f4b57ec4f846b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:81:b8:97:3d:11:db:9e:20:bc:26:02:37:b3:
                    c5:94:73:8b:2c:f2:57:e5:78:d8:c1:b1:03:f9:42:
                    42:c9:cd:30:55:fd:1c:da:58:0f:30:47:46:1e:a0:
                    83:bf:b8:08:7a:10:11:12:82:df:a5:e7:3c:84:6c:
                    06:23:78:0c:24:20:57:f8:b0:bb:4d:0a:8e:bc:7b:
                    be:5b:98:0f:c9:4a:26:3f:9f:f3:2c:b7:fb:5a:42:
                    c3:9c:dc:9b:c4:53:a5:7c:f2:2f:31:45:8e:48:18:
                    b7:7e:db:00:6f:41:f2:52:f9:40:9e:0d:15:f3:b9:
                    9c:a1:84:d9:99:97:4e:f2:8c:e8:c5:47:0c:12:22:
                    a4:12:4b:1b:1b:40:c1:11:65:ae:0e:10:bb:ae:a8:
                    58:39:ee:cb:7e:93:48:d3:ef:79:45:a9:6e:de:d9:
                    23:de:d7:1a:15:73:98:17:f0:fb:a0:13:fa:48:4c:
                    17:db:46:ed:ab:c6:b9:6f:55:bd:43:ce:4d:c7:22:
                    b5:d6:87:60:ef:89:0d:03:8c:f1:f0:fb:81:39:62:
                    08:41:89:9f:e9:2f:0b:f5:c3:a0:70:73:67:51:07:
                    76:df:27:f0:8a:81:26:e2:f9:e9:60:35:03:5f:ae:
                    0d:79:ea:89:61:f3:67:4e:05:04:af:fb:b4:b4:6a:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:DD:9E:34:63:9E:A2:71:04:92:FC:61:F4:B5:7E:C4:F8:46:B9
            X509v3 Authority Key Identifier:
                keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8a:ea:64:ac:f1:ef:31:44:a7:86:39:9e:b4:1c:19:9d:24:
         88:fe:af:43:54:52:b2:1b:1a:17:e0:dd:2c:b3:76:c7:31:88:
         05:41:74:d8:c4:97:f9:5f:4f:67:5e:c9:4b:d1:5e:b4:a9:ac:
         f3:5b:1e:71:c0:8d:1e:72:f5:59:70:62:fd:12:18:77:0e:c5:
         d3:4d:4a:5c:7b:64:f5:f6:0f:f1:a4:c8:e0:3b:ee:a9:bf:37:
         45:8b:6c:a0:a8:d6:9b:d8:5e:ff:fd:30:21:1d:4a:7e:bc:d6:
         75:d5:77:5f:d7:74:b8:a9:e7:22:0c:49:82:3a:c3:be:fc:7e:
         24:b4:6f:55:34:d6:d3:2f:83:c5:7d:68:cc:ce:70:41:b9:cd:
         55:a2:a0:2b:28:94:46:76:08:a3:7a:01:7c:95:69:5f:fe:ba:
         a8:5d:40:c3:8a:8b:a7:a7:db:9f:30:0d:79:e5:92:f0:46:1c:
         11:45:31:50:30:3d:a8:39:65:12:0c:23:ac:85:ab:cb:11:97:
         6c:91:64:ed:91:f5:d3:12:3d:eb:ee:2b:95:98:a7:0e:70:70:
         1b:0d:37:42:c6:73:d8:00:06:fe:4b:1c:1e:66:a0:48:2d:1b:
         03:6e:72:37:90:f0:0d:d8:91:23:3e:28:60:a0:ef:31:71:df:
         80:a7:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:58 2024 by rpki-client on console-ams.rpki-client.org