Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File:                     WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier:          duHmgIAKR7YETK/f3TFecrEPhfpjLt2FhSFIB4TUOA8=
Subject key identifier:   9F:F8:DE:58:AA:55:03:FE:1A:9C:15:36:2D:C6:D0:C6:B7:E4:42:98
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer:       /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial:       019357D28061D275BD833D82CE6A6CBD8797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number:          0A1C
Signing time:             Sat 23 Nov 2024 07:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:33 +0000
Files and hashes:         1: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: 4/Wupw/xzNWog3ZyFI4htFjXU1yprmI8szoIH0UP4xk=)
                          2: m9BmzKeh9p1kZIS7m-Zb6vTHUM8.roa (hash: Q6TGaQNGyKurWmVgqglz0unLyn/rSK+1HLsdE6xieP8=)
                          3: xGGGYv8nq6Ft5KxRcNjHgd6lEa8.roa (hash: vPqgni9u/CqAU1A0z5gt105WEPyzDAjL6iFMZF0hd1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:80:61:d2:75:bd:83:3d:82:ce:6a:6c:bd:87:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
        Validity
            Not Before: Nov 23 07:00:33 2024 GMT
            Not After : Nov 24 07:00:33 2024 GMT
        Subject: CN=9ff8de58aa5503fe1a9c15362dc6d0c6b7e44298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:4a:2e:19:c2:08:2b:1d:ca:0d:31:58:32:
                    a3:cf:b8:e5:a6:32:aa:dc:42:cd:4f:96:69:84:ec:
                    c3:50:74:56:39:b1:6d:f3:6b:8f:cc:d7:07:04:c0:
                    2d:a2:ea:14:c3:3a:e6:64:ae:97:e3:bf:28:40:7a:
                    a5:66:77:ce:ec:08:ad:d9:17:c8:61:bd:01:ad:f6:
                    36:84:a7:c2:13:87:6d:c4:55:64:f4:c9:9b:a8:97:
                    58:32:d0:43:aa:54:74:d4:7a:69:f6:4b:6c:5d:b0:
                    66:79:1f:29:d1:cf:9e:14:63:68:dd:f7:9c:6c:ff:
                    2f:64:02:b2:77:9f:d5:92:33:89:ac:92:6f:04:7b:
                    75:9c:ca:a5:53:ce:4a:d6:10:52:c9:9b:77:1a:65:
                    12:54:95:5e:cb:3f:a7:b4:5c:0b:0c:67:d9:48:e4:
                    99:2a:af:8e:69:61:af:d5:12:9e:76:f4:b1:9b:03:
                    e3:4d:ce:f8:3c:78:a5:0c:c6:2d:66:47:84:ae:ba:
                    56:24:11:30:1f:f8:48:5f:69:7f:2c:b8:2f:a7:fa:
                    ee:55:71:90:12:51:80:86:6d:04:62:37:38:44:6a:
                    d6:81:a9:f1:b4:4c:85:78:d6:53:09:76:29:52:ea:
                    71:48:52:da:bc:9f:49:23:2e:39:5a:33:46:40:12:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:DE:58:AA:55:03:FE:1A:9C:15:36:2D:C6:D0:C6:B7:E4:42:98
            X509v3 Authority Key Identifier:
                keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:05:b6:ad:f0:21:67:8c:f4:ac:f8:3b:51:88:a1:d2:bd:
         32:25:85:29:4c:e9:51:36:b7:44:68:df:39:cc:e7:2e:15:ab:
         9e:2c:dd:c6:db:79:bb:18:d6:1f:93:aa:82:0a:e4:5f:e7:29:
         11:f1:ef:5a:29:ea:1f:ac:1a:d2:d4:b6:61:0b:98:51:ac:9f:
         c2:02:e5:4f:4d:9a:44:8f:e2:79:b7:8f:fb:d7:f4:e8:44:a6:
         55:46:15:a8:2a:a4:57:5e:6c:f8:c2:98:9b:9d:52:43:aa:4a:
         ea:80:f6:ab:54:2a:c7:12:32:39:df:7f:77:7b:89:2c:b1:24:
         6b:bf:12:a9:d8:b1:cc:8b:52:8d:9a:95:bd:61:9d:f0:74:dd:
         54:fc:06:9c:75:72:fd:2e:48:ef:04:7d:23:53:b2:57:e2:c9:
         cc:74:e6:86:6d:bb:4f:12:93:72:6b:4c:66:47:68:e8:ec:3e:
         fb:9a:ca:67:9a:35:eb:d6:f7:9b:b4:3e:ec:4a:70:62:25:aa:
         45:a2:27:be:61:da:b8:b2:a1:63:71:a7:d5:0e:13:f1:21:a9:
         4a:bf:67:e1:ca:be:51:91:d7:38:96:3b:d2:29:67:a8:8e:61:
         a6:ab:3a:bf:02:15:29:35:b1:12:93:c6:13:60:ae:c2:78:b0:
         f8:51:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:30 2024 by rpki-client on console-fra.rpki-client.org