Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File:                     KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier:          kN/OMkyqDpc4luscIh88ILrbyrggUGfOGULlbFFu18s=
Subject key identifier:   35:EC:C5:5C:45:98:24:65:EE:38:F9:8D:D3:C5:13:5E:BF:63:83:E6
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer:       /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial:       01936AEBA5AB910F2FCCD25C1EB73A1CD2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number:          0244
Signing time:             Wed 27 Nov 2024 00:00:48 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:48 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:48 +0000
Files and hashes:         1: 8diW_viZ8DhFMdAZwzGQKTrlBMo.roa (hash: qNxxLl2Ah7HsBL2Y/MRp81EUlRzFhdE8EsgFNlVQQMU=)
                          2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: WpT3znfrWbWFw/iitmsIJuFDwAHTl42aAUE7b4MmbII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:a5:ab:91:0f:2f:cc:d2:5c:1e:b7:3a:1c:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
        Validity
            Not Before: Nov 27 00:00:48 2024 GMT
            Not After : Nov 28 00:00:48 2024 GMT
        Subject: CN=35ecc55c45982465ee38f98dd3c5135ebf6383e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:8c:dc:d7:54:4d:33:60:17:aa:84:27:31:
                    c0:48:40:03:4f:40:e8:07:23:8e:5c:09:bc:db:1b:
                    43:32:1c:e0:8f:9d:39:9f:98:7b:78:ee:8c:a6:79:
                    99:39:98:ef:c8:8a:60:1a:4c:a6:7a:6e:e3:22:f1:
                    16:72:68:37:04:ff:7c:7d:36:57:74:28:78:c9:5b:
                    e6:5b:a2:b7:5d:6a:99:dd:a4:b7:d4:61:ca:06:8b:
                    60:31:a3:e7:b3:2e:a4:ba:c2:fb:91:4c:f4:88:e0:
                    10:cf:10:7b:af:fa:32:9d:b1:03:42:91:60:44:a8:
                    c4:fc:e9:1e:3c:35:f6:de:b5:68:e4:c5:48:78:b0:
                    df:9d:bf:26:87:ba:f6:c6:bf:33:ed:da:30:c2:2c:
                    ea:0d:87:9b:15:bb:90:81:a1:ce:d5:a8:b9:01:b0:
                    72:5a:97:28:d0:0e:e1:d0:80:22:e3:cc:de:d2:a7:
                    c0:6a:11:b5:ff:11:c6:44:4d:93:41:8b:03:ad:40:
                    5f:88:33:c1:3c:96:1b:83:47:bf:57:07:b6:f4:b7:
                    51:b7:2e:33:96:ca:f2:a1:73:1f:21:4b:85:58:b5:
                    e5:6e:b6:a8:b8:19:f5:bc:93:8d:75:e4:bd:83:bf:
                    46:0f:35:83:b4:82:7a:5f:99:d0:59:1f:6f:f4:f3:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EC:C5:5C:45:98:24:65:EE:38:F9:8D:D3:C5:13:5E:BF:63:83:E6
            X509v3 Authority Key Identifier:
                keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:5c:e4:9f:45:2a:f4:cb:aa:68:c3:4b:a4:f6:3e:07:45:
         e3:66:06:07:fe:6c:95:10:3c:29:86:d7:52:29:d3:c4:03:3f:
         6a:e9:b6:97:b6:f1:de:cf:a9:71:e1:4d:0c:84:9a:bc:40:81:
         11:80:21:40:8e:a7:09:ad:a4:d1:ec:40:4c:5e:34:cb:64:a1:
         3d:cb:5f:da:5d:2d:b4:fc:bb:d7:7a:16:96:32:d5:6f:d1:ec:
         06:c2:dc:cb:de:a9:0c:20:f9:e0:de:33:f5:bf:84:cb:34:d7:
         78:c5:ac:27:ba:b4:9f:45:5f:af:28:04:ff:7d:1a:3a:aa:12:
         9f:fe:b1:9b:57:1c:33:d8:5a:a0:a3:c2:c4:da:4e:08:a4:ed:
         3e:b7:e6:5e:67:38:87:5f:c7:7a:25:e2:97:5d:89:84:0e:d5:
         63:0f:84:b7:dd:df:1f:0e:b5:c6:52:99:1c:16:ef:6e:ba:7d:
         57:39:04:b6:49:ab:a9:9f:46:c3:bb:e4:57:5c:6f:99:f6:94:
         b7:36:61:96:07:7c:53:9b:92:1c:ff:d5:15:1a:40:e7:8f:2d:
         30:a8:07:f1:e1:cb:cb:5d:64:7e:3a:f7:30:5b:59:6d:da:42:
         30:53:ee:83:f4:be:8d:e9:05:f7:97:e8:73:f7:e2:94:3e:60:
         dc:61:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:04 2024 by rpki-client on console-fra.rpki-client.org