Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          Lz3VviIl8eVks6+7TRcRLPHWlref6fJT3QPQHKsyjmQ=
Subject key identifier:   C1:23:9E:38:7F:58:E8:B7:2D:A2:FD:E8:B4:BA:33:A5:10:55:39:09
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       019368213D04AC9A313704CBB23964044456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          01E1
Signing time:             Tue 26 Nov 2024 11:00:28 +0000
Manifest this update:     Tue 26 Nov 2024 11:00:28 +0000
Manifest next update:     Wed 27 Nov 2024 11:00:28 +0000
Files and hashes:         1: imCYlRaCyfKuy5Q539GtdWXw3QA.roa (hash: J4HDqNzRX/yccTHRsQpDeoTA11SJE4g1fkphHChLR+M=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: j23aKdLvTc5+sbm3Iarsoo64KSt74tXgVc/X+imtILg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:21:3d:04:ac:9a:31:37:04:cb:b2:39:64:04:44:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Nov 26 11:00:28 2024 GMT
            Not After : Nov 27 11:00:28 2024 GMT
        Subject: CN=c1239e387f58e8b72da2fde8b4ba33a510553909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:45:94:ba:e5:b4:b5:7f:75:dc:d7:ff:3c:
                    0b:8d:c2:37:f8:e8:65:5b:0e:23:37:24:cc:bb:4e:
                    74:b1:44:12:b1:8b:26:1e:7d:aa:9f:d7:34:b9:11:
                    b3:14:2b:be:05:25:79:0b:f3:b8:9a:a0:c2:26:55:
                    fc:44:2f:b2:c3:90:a9:ab:2e:88:8e:aa:e1:27:1d:
                    c2:61:99:de:8a:a4:4d:51:76:18:2e:93:09:3c:13:
                    68:f4:b7:13:27:9a:ff:f3:a2:49:1c:22:8e:86:1a:
                    f7:c2:36:b3:a2:51:04:2a:20:16:ce:9c:74:9d:5a:
                    6e:9f:9a:34:bb:47:a5:54:1e:c0:a7:08:e5:d1:df:
                    ba:3c:d3:5b:c1:2d:9a:a2:3b:6c:71:8b:ef:95:f5:
                    16:29:eb:59:69:30:1c:91:00:7d:df:c7:8a:94:f3:
                    68:24:7f:fd:1b:2c:0a:14:1a:9b:2e:9e:04:17:22:
                    bf:a5:e9:1e:26:36:2f:24:a9:4b:58:19:09:85:86:
                    b3:87:54:45:c2:05:25:1e:35:86:30:9f:72:b4:c5:
                    79:56:c4:3c:ef:d1:ad:ea:6a:ca:21:51:8d:15:0d:
                    18:2a:12:20:bd:14:12:fb:37:78:37:6d:44:2b:50:
                    42:a1:be:c3:5d:9f:41:60:a3:88:ef:cd:82:91:fc:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:9E:38:7F:58:E8:B7:2D:A2:FD:E8:B4:BA:33:A5:10:55:39:09
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:be:1e:03:be:00:1a:1c:b8:13:e6:7c:ef:5f:30:78:94:
         91:ba:4b:0c:a6:7d:d9:bb:95:29:17:be:5a:6f:3e:2d:d2:f0:
         a2:ad:da:da:43:16:f4:9e:c3:37:e7:21:ce:23:15:43:86:4e:
         1f:a4:ca:35:7d:15:12:2a:34:02:c1:ec:a5:91:4a:53:7d:97:
         ec:56:31:3c:37:0c:40:03:b3:ee:0b:5b:e4:2f:18:e5:c6:fc:
         c9:66:b4:6e:57:53:20:2c:a0:1f:30:e3:82:3c:4b:0d:c0:b2:
         6d:c6:9e:91:7e:89:2e:b9:97:5e:c6:ee:30:37:13:a5:ed:85:
         3a:58:7b:af:b7:37:7a:05:3c:1f:81:de:50:5d:d5:06:be:8f:
         99:ef:c6:43:98:31:c6:b3:3b:e1:cc:39:a5:bf:72:3e:f8:1b:
         c8:21:9e:35:46:03:55:b7:9e:a5:36:da:60:f6:4d:b6:34:5a:
         09:59:5a:73:b7:24:de:c5:5d:3a:51:96:b4:9f:96:d0:ac:c1:
         5d:4c:56:63:bf:fa:5f:70:a0:8d:05:e1:d1:63:16:8c:70:41:
         b3:e2:be:b7:8a:81:64:10:91:92:56:ed:68:9e:71:e7:cd:0b:
         97:d9:5f:54:c8:f6:23:1b:3d:31:9e:6f:7d:2d:7e:10:7d:28:
         78:76:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:53 2024 by rpki-client on console-ams.rpki-client.org