Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File:                     A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier:          KlqekXVRA5Ldo1uPUNDqrh0mQ8NAjEZhaA9pCVW0moU=
Subject key identifier:   44:56:F1:EB:9A:68:BE:D0:9D:31:82:D6:86:E0:5F:1E:4A:8F:27:8A
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer:       /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial:       01936B592D5430A17AE6C208C299FE1888AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number:          61
Signing time:             Wed 27 Nov 2024 02:00:26 +0000
Manifest this update:     Wed 27 Nov 2024 02:00:26 +0000
Manifest next update:     Thu 28 Nov 2024 02:00:26 +0000
Files and hashes:         1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: 08zr80wIhv4yDLZHSCG8ZLx4DN2gFg/tIYATWIgcmZE=)
                          2: NLY8wT2I2LW2oOD1tJw41TBF4Uc.roa (hash: pWggZCEGUtmz58x1z4DhxGEE04BuOpVqFc6gMK8dWwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:59:2d:54:30:a1:7a:e6:c2:08:c2:99:fe:18:88:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
        Validity
            Not Before: Nov 27 02:00:26 2024 GMT
            Not After : Nov 28 02:00:26 2024 GMT
        Subject: CN=4456f1eb9a68bed09d3182d686e05f1e4a8f278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:a8:f8:1d:c2:e3:48:51:66:07:8b:d2:ec:
                    c0:52:0e:15:92:8e:0f:e3:3d:2a:c8:0e:77:25:c6:
                    7e:52:48:91:35:3f:1d:16:f8:5c:df:af:37:67:6a:
                    08:b7:12:3c:01:67:71:0b:1b:27:f6:80:d9:fc:5c:
                    12:9f:b0:b9:b1:f6:a8:52:87:38:6a:18:1e:66:b5:
                    04:02:48:f8:ce:39:4a:0b:ed:3f:a8:58:28:6d:7d:
                    84:62:0b:5b:2c:1d:cb:49:f2:96:70:38:de:44:a6:
                    3d:4c:16:c3:7e:14:1e:8d:44:88:e4:90:ac:5e:23:
                    21:3c:e3:00:fb:4b:71:09:6f:48:7a:e3:60:6c:6c:
                    64:e6:67:82:65:20:d6:74:5b:ac:38:d3:44:e2:77:
                    e6:b2:ad:9f:62:97:4c:5d:01:46:c5:04:4e:81:9b:
                    81:aa:ba:d0:7b:cb:7e:c1:94:46:59:b7:ce:f6:2a:
                    ee:b5:fe:c6:b9:4a:9f:e9:15:dc:75:a6:c0:7c:88:
                    43:d5:d4:86:20:99:92:0b:33:e7:ae:4b:e7:25:72:
                    cf:70:b6:ed:22:3c:36:ba:d3:df:e1:8b:07:d6:8c:
                    d4:77:23:8f:bc:0c:d4:21:89:73:3c:6a:eb:c8:f5:
                    15:93:9a:7c:fb:c4:5d:d3:a7:d7:f8:d6:93:4d:d5:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:F1:EB:9A:68:BE:D0:9D:31:82:D6:86:E0:5F:1E:4A:8F:27:8A
            X509v3 Authority Key Identifier:
                keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:2f:89:63:ec:56:c6:d5:b4:70:10:7b:ab:a8:41:05:7c:
         c7:26:f1:53:b7:49:fa:de:5f:83:fd:24:25:7d:d2:02:ef:9b:
         5a:a0:63:98:95:2a:e1:ae:6b:e6:5f:e1:20:1d:21:da:fc:87:
         86:e5:62:3c:c4:c0:e7:61:0b:e5:a9:46:e0:5b:30:17:fc:e3:
         77:f5:e4:4c:5b:d5:4d:3e:52:84:3d:0c:c4:14:c3:81:d0:5f:
         a5:87:80:7f:b0:c3:a1:e5:91:05:34:69:f1:ad:d7:ac:ce:42:
         b5:cf:58:14:63:8b:e4:06:c7:9c:57:18:20:47:49:32:d1:c9:
         96:4e:93:cd:08:7e:5d:f7:7a:87:b9:e6:0f:95:97:91:78:a3:
         61:71:65:7b:39:4d:37:bb:d1:33:a6:97:f9:53:46:d3:40:36:
         74:17:f9:90:1f:df:a9:a3:77:f7:08:07:c9:d0:e0:99:cb:0c:
         24:a4:b6:e5:e9:8a:61:8c:f5:9f:3e:6d:67:08:8d:d6:54:c2:
         dc:61:e5:71:36:0b:f9:ed:6d:d7:17:b8:3c:27:c7:98:0d:20:
         dc:71:cb:5b:d9:92:bd:86:45:c4:97:e9:7f:2c:49:b7:7d:09:
         11:d7:db:6a:e6:3e:57:72:32:f8:36:90:2b:89:81:e6:39:7e:
         9e:a0:09:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:45:09 2024 by rpki-client on console-fra.rpki-client.org