Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          kenWm05t9/52o84j92vtAoi9iDwFm9UtGBibwLoRG/E=
Subject key identifier:   F7:4A:D0:75:F8:9A:95:79:67:4B:A8:A2:4E:40:41:93:44:25:BD:61
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       0193640D73B189A2A4E8E6086EF8E901DC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 16:00:23 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:23 +0000
Manifest next update:     Tue 26 Nov 2024 16:00:23 +0000
Files and hashes:         1: UvcXszY_U7b0DbE4UZntdLahe6I.roa (hash: xlrpXU4uv3ADLr9k4vvVYjraVhd8cOkx2UNE22QxgJw=)
                          2: Ylx6v_bhKPwecR88nin8YLZ7Vps.roa (hash: RbNEo2yQllBf7yBOVA7XOt0Vup+3z5hxoq2hxpToGgk=)
                          3: b_1vnDEnAnavrnxXgqWEN8PYa_I.roa (hash: 4bPFMySGQZ8rHmdbWGO+4MTom1pvdfvEHqa5Q1Nu1bg=)
                          4: d5y6WE89H-Whx3tJw1uEN86WM_4.roa (hash: AqD+LCf8bnbxLON9ChIh8Q05VgcjAs7eGTUQmWHNg8k=)
                          5: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: s8hYHut5oVjW+G1FS9TA1UTZynxDgrhDgNahatiocmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0d:73:b1:89:a2:a4:e8:e6:08:6e:f8:e9:01:dc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Nov 25 16:00:23 2024 GMT
            Not After : Nov 26 16:00:23 2024 GMT
        Subject: CN=f74ad075f89a9579674ba8a24e4041934425bd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:b3:54:3c:2e:a5:fe:45:5a:ee:b0:06:ad:
                    d2:22:df:8c:6b:76:3a:87:f2:0e:84:71:60:2c:e7:
                    c8:bf:dd:6e:6b:53:7d:01:d1:1d:a5:38:17:f2:99:
                    96:42:7b:48:6e:0c:9b:41:2d:f1:7e:3d:2f:16:22:
                    36:b2:82:50:19:40:18:ac:3d:70:ef:57:9e:8a:8a:
                    a7:4b:23:2d:b3:fa:31:d3:52:cd:c9:be:c0:89:73:
                    bc:40:8f:7e:4a:c5:7b:2d:bc:dd:a8:0a:08:a0:88:
                    c3:14:09:86:e0:ed:dd:57:a0:7a:2b:59:1e:e7:24:
                    e5:03:c8:6e:a8:e6:42:3e:07:b2:c2:84:aa:4d:1c:
                    ca:4f:dd:e8:be:e9:85:74:1d:91:4a:d7:78:1a:f7:
                    27:03:e9:77:df:5b:db:17:3e:a0:0f:6c:71:ae:1a:
                    71:17:8d:9d:24:ca:4b:49:49:19:d9:34:15:f8:c7:
                    dc:25:10:f3:9c:6f:ee:ce:a6:ba:2b:dd:0c:a6:31:
                    1b:a8:91:ef:1d:45:30:c9:85:01:7a:9d:99:95:a7:
                    2b:94:c2:88:58:e9:f8:8a:87:f6:4c:e3:3b:99:89:
                    49:3a:9e:57:11:c4:7f:a7:0b:06:e2:d7:d6:32:75:
                    41:1f:77:58:4b:18:28:e6:1d:81:98:39:a8:f7:c6:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4A:D0:75:F8:9A:95:79:67:4B:A8:A2:4E:40:41:93:44:25:BD:61
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:00:4c:a6:82:35:59:d4:8e:a4:eb:12:df:a0:91:ba:62:16:
         85:6e:9f:03:7c:cf:51:a2:e3:71:9d:0b:4a:2e:df:25:0c:9a:
         c3:40:5d:3e:6e:de:3c:99:72:94:bf:e1:12:25:73:b1:45:06:
         d4:46:52:3c:ba:3f:65:ed:bc:50:c0:c7:aa:b1:4c:42:9f:b4:
         48:54:31:f3:77:b8:8d:55:22:d7:b2:4f:39:83:ee:ea:4c:a0:
         06:f3:03:fb:d5:71:c2:fb:50:a4:86:c5:18:4c:39:07:8f:16:
         50:89:f9:5d:63:c6:58:0c:51:e7:38:a3:e5:9d:8d:d6:f2:2e:
         cd:3d:85:cd:2f:21:1a:01:75:59:29:f3:03:35:18:55:64:84:
         98:60:01:81:fc:88:13:28:29:89:67:d8:e4:c2:fd:3e:34:c6:
         69:b0:a3:a5:0f:11:d5:04:ea:27:a1:79:f1:d4:4b:ac:df:6c:
         43:59:90:b4:94:45:9d:a4:2e:0d:68:09:e3:25:68:28:b3:55:
         3d:6a:d1:10:c9:90:46:dd:f1:3e:d6:80:7f:9e:49:ac:7f:fd:
         5e:30:46:9c:a6:40:0a:55:3f:78:a4:41:4a:5f:21:94:7e:c2:
         6a:fb:26:10:6a:11:cb:ed:6c:c0:af:b6:c6:9e:42:31:2a:45:
         54:f8:81:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkDXOxiaKk6OYIbvjpAdxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl
OGVkY2MwHhcNMjQxMTI1MTYwMDIzWhcNMjQxMTI2MTYwMDIzWjAzMTEwLwYDVQQD
EyhmNzRhZDA3NWY4OWE5NTc5Njc0YmE4YTI0ZTQwNDE5MzQ0MjViZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY6zVDwupf5FWu6wBq3SIt+Ma3Y6
h/IOhHFgLOfIv91ua1N9AdEdpTgX8pmWQntIbgybQS3xfj0vFiI2soJQGUAYrD1w
71eeioqnSyMts/ox01LNyb7AiXO8QI9+SsV7LbzdqAoIoIjDFAmG4O3dV6B6K1ke
5yTlA8huqOZCPgeywoSqTRzKT93ovumFdB2RStd4GvcnA+l331vbFz6gD2xxrhpx
F42dJMpLSUkZ2TQV+MfcJRDznG/uzqa6K90MpjEbqJHvHUUwyYUBep2ZlacrlMKI
WOn4iof2TOM7mYlJOp5XEcR/pwsG4tfWMnVBH3dYSxgo5h2BmDmo98bxcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdK0HX4mpV5Z0uook5AQZNEJb1hMB8GA1UdIwQY
MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt
MjdiMTEzY2ZmNTNiLzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi
LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQBMpoI1
WdSOpOsS36CRumIWhW6fA3zPUaLjcZ0LSi7fJQyaw0BdPm7ePJlylL/hEiVzsUUG
1EZSPLo/Ze28UMDHqrFMQp+0SFQx83e4jVUi17JPOYPu6kygBvMD+9VxwvtQpIbF
GEw5B48WUIn5XWPGWAxR5zij5Z2N1vIuzT2FzS8hGgF1WSnzAzUYVWSEmGABgfyI
EygpiWfY5ML9PjTGabCjpQ8R1QTqJ6F58dRLrN9sQ1mQtJRFnaQuDWgJ4yVoKLNV
PWrREMmQRt3xPtaAf55JrH/9XjBGnKZAClU/eKRBSl8hlH7CavsmEGoRy+1swK+2
xp5CMSpFVPiB+g==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:42 2024 by rpki-client on console-ams.rpki-client.org