Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          9KcDeQZJEYXEzyvfDaWBSDu9HjXVVBV4T0eE5MhaEDk=
Subject key identifier:   A5:F4:FD:84:D5:5E:93:4A:35:9C:9B:79:FB:E7:0F:FD:24:8D:7B:AF
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       019355E421CD1B5DBDC20F2430F64ED13C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 22:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:34 +0000
Files and hashes:         1: 2SfPU9lkGyHP2Va0ydjJ2Skicoo.roa (hash: Jc73RByjibrmNHRmndyNBdE50dNvEOD5VC9LHDIdTx8=)
                          2: GNlKaNc8XiZ-4Zl7KfevHiW7Kjs.roa (hash: 6riM3llWY8mcnXyUTPrk8TCvIjRFSdfuYJsAysJ0B+c=)
                          3: Qhah0chOEpnp_0vCeg8YWqGsUuU.roa (hash: LYKZ0+6g5qUWD5gx5tanwSyyvOvASBFq8ikAteZW/tw=)
                          4: YoD3q4M8Q6-Rm95dpsh3q7ivesM.roa (hash: 7Rj6HMpCnsx6vDSVHVWVBctdJKW1LlLiJ5mSl02/NQ8=)
                          5: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: 5xdp0r8C06OseuXg0RVvvb5k01eULmdSm18L075vRZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:21:cd:1b:5d:bd:c2:0f:24:30:f6:4e:d1:3c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Nov 22 22:00:34 2024 GMT
            Not After : Nov 23 22:00:34 2024 GMT
        Subject: CN=a5f4fd84d55e934a359c9b79fbe70ffd248d7baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:45:2b:e6:7f:dc:97:23:df:ea:e7:0c:67:
                    c2:4a:fd:b5:4c:40:b4:ba:50:52:d0:6e:6d:f6:de:
                    35:58:87:0f:6e:f7:c0:11:ce:30:69:9a:ef:50:96:
                    47:84:bf:2a:e9:dd:5b:eb:21:39:ae:a2:c2:11:bb:
                    52:16:67:36:1b:8a:7d:1c:ff:6c:f7:40:11:3f:f0:
                    cf:f7:cf:e0:b8:a1:bd:d4:d1:d9:80:7f:24:ab:54:
                    66:9d:b2:fa:f9:1c:dd:ba:e4:7e:f7:cf:25:3d:34:
                    fd:7d:fa:9c:5c:3d:4f:b1:78:af:84:9b:82:11:fc:
                    03:83:ba:b4:08:1a:b7:3e:40:2f:8d:a4:71:70:58:
                    75:27:01:2b:c2:34:85:39:2e:ef:97:ec:78:18:a2:
                    17:e1:dd:42:28:2e:73:86:d1:72:60:7c:0a:83:ec:
                    3d:2f:ec:48:b9:1b:5c:5b:b4:c3:2c:d8:f7:04:62:
                    74:fb:c5:50:9b:0d:a1:ef:f4:a7:4f:e3:fe:98:13:
                    ca:13:40:d6:31:21:cb:a3:12:40:79:da:38:6f:b0:
                    cf:db:cb:28:b2:d6:25:a3:06:10:7c:f3:19:1b:33:
                    47:ec:54:1c:88:57:49:86:70:8f:6b:6a:19:b1:24:
                    20:c3:59:86:c1:55:a1:57:96:e9:45:e8:8f:92:05:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:FD:84:D5:5E:93:4A:35:9C:9B:79:FB:E7:0F:FD:24:8D:7B:AF
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e5:bf:07:a5:75:10:75:bf:67:58:a0:77:64:24:55:dc:ac:
         f6:ef:b1:4b:39:43:20:8c:51:44:5a:e3:df:47:1d:45:ac:d1:
         34:8a:6d:82:8b:09:2f:e6:2d:05:c4:59:d4:c8:b5:c8:a2:65:
         06:85:85:42:c3:67:b0:11:c4:1a:29:d0:4b:a3:c0:92:a6:df:
         47:57:7a:74:34:5a:fb:f0:ea:59:b8:47:47:32:0c:53:d5:b1:
         25:6f:ba:fe:15:e1:70:ef:48:5a:b6:7d:ba:09:b9:a5:da:39:
         a0:64:1f:d9:f3:67:33:ee:02:ef:16:84:7e:41:50:24:2b:9e:
         b5:98:fc:c6:dd:ae:2f:8c:c1:1e:0c:78:7a:0b:25:c2:73:bc:
         93:5e:46:25:47:a7:10:7f:3d:3f:bc:3d:d5:e0:b8:ac:4a:f7:
         fb:03:d0:37:78:22:39:56:e9:cc:04:94:f7:f4:89:2e:67:55:
         e8:0a:33:24:18:a8:bb:f8:ef:7f:f6:57:6e:a0:57:dc:62:4e:
         0c:77:9a:d3:60:bb:47:24:27:4c:d7:22:05:12:8d:b0:62:4b:
         6f:49:07:33:f7:c5:b4:8e:2a:05:9a:db:0d:82:66:b9:36:97:
         2f:f2:19:c2:2f:2f:db:63:7a:81:8f:3b:91:93:99:53:df:ea:
         14:47:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:10 2024 by rpki-client on console-fra.rpki-client.org