Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File:                     wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier:          93icpADtVXMplh+bJYhswBek0A7uzKYOXi29icF3LaM=
Subject key identifier:   7B:16:8A:63:8B:2F:C0:06:57:EC:D3:44:D3:72:E5:21:10:BA:82:D6
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer:       /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial:       0193576476AB60CAF40BA714A55C1A1F0516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 05:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:21 +0000
Files and hashes:         1: prbbD5wEd-DG5z1Bz-Cyk3yVpsU.roa (hash: EAqfWelU3iDjBMUbTP4OxznDTeBzFvRVVGxcG5hw1dw=)
                          2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: HXK+wUQTaZGhMjkE9t4PhrU3xrODAvlns6X99u8E+FE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:76:ab:60:ca:f4:0b:a7:14:a5:5c:1a:1f:05:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
        Validity
            Not Before: Nov 23 05:00:21 2024 GMT
            Not After : Nov 24 05:00:21 2024 GMT
        Subject: CN=7b168a638b2fc00657ecd344d372e52110ba82d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:c7:47:06:28:16:49:d2:00:90:31:61:33:
                    e6:1c:6a:6b:e7:e1:b4:fc:11:3d:c9:77:71:27:08:
                    f6:c2:7d:2b:0f:78:94:e9:63:35:d1:28:66:90:18:
                    05:0c:26:78:0c:f5:81:4b:27:3e:76:ac:12:04:06:
                    54:23:2d:c6:60:1f:84:6e:de:88:8f:f9:06:e4:fb:
                    69:d7:ba:6d:cd:e5:61:78:85:78:54:7c:e4:07:6c:
                    1d:33:9e:a2:8b:3c:55:1d:ab:e8:e4:98:39:3c:47:
                    86:57:34:ab:b2:4a:bf:be:37:9c:e9:87:99:9e:de:
                    2a:fc:85:11:8e:f0:4e:95:9e:25:65:c9:88:3e:ad:
                    81:de:3f:90:3c:2e:dc:7b:82:aa:af:5e:29:fe:85:
                    34:1f:f6:a1:dc:22:b7:8c:1c:9c:c3:20:74:80:c1:
                    f7:42:30:b2:41:59:5a:56:bd:2b:92:00:47:1c:80:
                    2e:73:05:dc:8a:fd:55:cb:3a:b8:53:73:ab:47:0d:
                    3e:a1:eb:64:e7:a8:37:d1:9e:4c:d6:2e:52:c9:39:
                    59:64:cd:62:df:86:1b:ba:b3:b1:21:19:1a:8e:56:
                    48:c0:cc:02:7d:0a:79:fb:0d:5b:17:c5:c6:46:13:
                    54:46:3a:c2:b8:a4:05:d9:3c:1b:85:49:3c:ae:2f:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:8A:63:8B:2F:C0:06:57:EC:D3:44:D3:72:E5:21:10:BA:82:D6
            X509v3 Authority Key Identifier:
                keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:fe:25:1c:93:b6:4c:25:67:cd:07:32:10:bd:a3:9f:03:
         c2:71:6d:b1:dd:97:a7:5e:f0:cd:80:03:d6:35:3a:40:81:77:
         d6:50:e4:69:2b:49:f2:25:a2:86:b6:82:67:f6:ef:17:f9:80:
         81:8f:b5:de:37:b3:c3:6d:5b:f0:e0:87:15:2e:22:2e:59:c2:
         fe:38:4d:e9:69:62:c0:74:4d:0d:3d:8c:c0:e8:ee:3d:d4:96:
         79:9e:f4:3f:6a:ab:93:c6:f3:44:db:86:71:05:e8:72:93:34:
         be:34:cd:4d:cb:96:49:bc:91:e1:4a:26:a8:57:8f:16:1c:e8:
         da:f2:de:89:8c:5f:f6:8a:15:e8:74:2f:e5:fd:3f:35:a5:9b:
         c0:62:5c:2c:22:2f:e1:13:bb:71:28:2a:c1:77:30:22:bd:b0:
         af:42:d7:e1:56:22:b0:fc:1d:82:70:e6:27:a6:f3:56:ef:0e:
         63:dd:2a:f3:bd:1c:17:3a:62:25:5d:ab:43:ec:47:bb:a7:63:
         2a:23:5f:15:58:38:d8:4f:8d:ed:8a:07:8e:54:2c:87:db:f0:
         e7:99:31:3e:b3:5a:a6:53:f6:d1:b0:1b:6b:8e:31:02:ac:f1:
         87:b0:3a:f9:cc:ef:ab:6a:a4:08:53:ea:12:77:f5:f3:2e:fb:
         2e:58:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:16 2024 by rpki-client on console-ams.rpki-client.org