Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          MhilZTPAeMKyBATBJRPq124e5v8KDHgf7zxyboZgA4o=
Subject key identifier:   02:02:D2:9E:59:9D:57:3A:1E:B4:2D:C2:D3:B5:A1:97:44:2E:92:75
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       0193598A0603F14C53DD6FD17F8288505DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          12B7
Signing time:             Sat 23 Nov 2024 15:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:37 +0000
Files and hashes:         1: PtXpHIVTEq37PVc5i1oJfGNKhQw.roa (hash: YQQlSF6WMKaDPsx6DJJG1TcvjhP2e8/Y4+fMLmPeT7I=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: rkGH6HW2bASr+HjZlcj7BO102Xi/gXkZszi2kxhK8lM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:06:03:f1:4c:53:dd:6f:d1:7f:82:88:50:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Nov 23 15:00:37 2024 GMT
            Not After : Nov 24 15:00:37 2024 GMT
        Subject: CN=0202d29e599d573a1eb42dc2d3b5a197442e9275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:8b:f1:ee:f0:2f:39:fc:ae:91:6c:a2:b3:
                    96:fc:6a:46:98:4f:39:9e:d6:28:26:0c:7c:42:62:
                    b2:cb:c5:79:2b:fd:bd:64:39:a2:03:dc:e8:de:21:
                    e8:c2:5e:f4:75:fc:b4:d6:54:3e:f9:4d:df:68:b5:
                    fc:ce:d0:2e:1e:45:0a:bb:58:e9:ce:92:a9:89:9b:
                    99:63:f6:b0:d9:4a:a3:8c:d8:22:00:2a:0f:2a:96:
                    ac:fe:cc:26:e4:80:da:b7:49:d9:b1:56:df:d5:0b:
                    d6:6f:f7:09:30:e8:a5:e9:f9:a4:21:eb:df:51:8a:
                    02:ad:77:10:b1:e1:92:7c:d1:58:4e:44:3d:d6:2d:
                    fc:0f:53:ca:60:7c:20:f5:ab:0e:52:cd:2b:b4:67:
                    0f:1b:7f:b6:e3:71:aa:97:f7:c9:d6:c5:ba:3e:fd:
                    54:2f:c8:1a:1f:a6:dc:56:59:19:3f:4d:1c:f4:01:
                    ae:57:ea:61:f2:b7:cf:39:f1:81:f3:b5:e6:c1:5e:
                    2c:26:d0:4a:4a:1e:af:f6:df:16:52:b9:04:35:fa:
                    e7:fe:96:bc:3d:b0:80:ae:76:2c:c0:95:57:57:d1:
                    b3:3a:5c:a4:10:01:75:f5:f7:c9:24:38:ed:12:d7:
                    9e:4b:9f:68:1a:c4:59:f7:20:78:1c:6d:65:96:14:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:02:D2:9E:59:9D:57:3A:1E:B4:2D:C2:D3:B5:A1:97:44:2E:92:75
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:da:04:3e:a7:c3:30:e4:d3:65:26:c2:de:6c:6c:38:0a:
         06:93:42:50:31:df:4e:f5:41:9c:fd:9b:5a:b3:59:ea:9d:66:
         3c:cd:bc:06:2a:d7:91:bc:56:a8:95:b5:fc:50:32:95:58:02:
         e5:e6:2f:61:bb:59:80:f0:21:87:da:95:dc:f4:98:5f:d1:9e:
         53:87:1d:89:a7:43:9a:5a:b6:e2:f4:de:17:5b:35:55:1d:d9:
         2e:89:0e:30:45:1d:79:b3:65:34:6d:44:96:f7:50:e5:f2:90:
         16:9d:37:da:62:6e:89:4d:0c:9b:2c:6b:18:99:6f:b1:81:55:
         84:f0:ac:21:80:42:59:71:f4:8c:5a:52:da:cd:3a:e4:32:86:
         f0:88:c2:7a:d5:51:be:10:3b:7c:65:5e:e1:d3:a9:53:a2:b7:
         1b:b4:6c:93:68:41:30:11:85:39:ac:a6:9e:52:f7:80:5d:15:
         f8:44:d8:9c:11:80:df:de:9e:51:08:31:04:d2:15:a6:08:aa:
         8a:2f:83:33:93:f5:6a:05:e1:98:7b:c7:2b:ee:e0:83:89:25:
         3f:72:3b:d0:d9:3a:72:1e:af:15:a5:4c:c9:73:61:21:ab:0c:
         5d:5d:e5:03:da:af:7c:27:f3:54:38:e6:d3:a1:d1:92:b4:b4:
         d0:92:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:14:04 2024 by rpki-client on console-ams.rpki-client.org