Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File:                     W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier:          O02o+RlhPmwbohKyyTU4HabDwqg+nPouF5Gei7nInw0=
Subject key identifier:   D6:C8:51:76:D8:97:51:2B:3A:15:26:8E:C8:C5:0F:58:88:1B:1F:F4
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer:       /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial:       019365FC838E7F1BDEA154D0AE5972952296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number:          10B9
Signing time:             Tue 26 Nov 2024 01:01:07 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:07 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:07 +0000
Files and hashes:         1: 09xuDhxewxxak2CN__JL1yeS8Es.roa (hash: 5WE00+ypoVFtWlILdfUD0CdpVawKnTGeU+0dQN5VAbs=)
                          2: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: pVngwSB2K0Pyqno9lI6eC1dKt4NJtlTdC/7Af1pvfKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:83:8e:7f:1b:de:a1:54:d0:ae:59:72:95:22:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
        Validity
            Not Before: Nov 26 01:01:07 2024 GMT
            Not After : Nov 27 01:01:07 2024 GMT
        Subject: CN=d6c85176d897512b3a15268ec8c50f58881b1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:9c:a8:a8:64:ad:72:c8:19:ce:b9:b8:e5:
                    c9:d0:b3:da:90:00:d9:4b:64:ef:1e:45:ed:61:21:
                    6f:37:17:7e:0e:8d:1e:e0:e2:84:de:96:cc:28:e6:
                    36:ea:13:8d:49:3b:d8:37:be:b3:d7:eb:87:c1:a4:
                    39:51:b7:97:cf:8d:a0:e6:27:38:59:89:6a:f5:5e:
                    10:8a:36:dd:d3:71:fa:1d:63:81:54:53:3a:b9:98:
                    e6:64:98:f5:d0:07:e8:57:01:a4:d4:67:5e:63:fb:
                    76:e0:b5:b4:cd:0d:8c:97:f4:e0:7c:00:4a:1a:8f:
                    ad:2b:78:64:f0:13:c1:2b:d4:c8:f9:f0:af:74:22:
                    67:e1:52:3b:7d:8b:36:1d:ec:87:b6:f2:c4:72:98:
                    fe:24:fc:e7:b9:d4:13:70:e5:d8:52:3c:77:aa:51:
                    1a:86:10:72:93:31:5d:21:cb:79:34:8f:93:78:41:
                    ac:c8:c8:34:6c:ad:e4:0c:ca:8b:dd:72:65:e8:ad:
                    75:6c:ba:64:79:4a:07:2a:17:18:86:21:08:3c:a9:
                    9b:66:14:ef:90:e8:2e:b2:c6:e9:65:7f:54:13:e5:
                    86:b6:1b:70:1b:00:ec:8d:53:ce:2a:30:6a:eb:80:
                    01:56:2a:de:e7:75:1b:7f:bc:ff:77:84:23:88:be:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:51:76:D8:97:51:2B:3A:15:26:8E:C8:C5:0F:58:88:1B:1F:F4
            X509v3 Authority Key Identifier:
                keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:7f:75:2b:c1:d7:4d:7a:da:8f:ef:fd:93:38:72:94:a5:
         33:e3:df:29:75:b5:b3:7d:6c:20:3a:ca:67:23:23:2a:10:87:
         6c:bd:bd:8c:2b:11:27:31:34:7a:96:71:61:4c:c8:b2:ad:31:
         5e:be:76:40:e5:05:a0:18:fc:2d:b5:a7:df:82:80:b3:c4:b1:
         88:2f:86:8d:7e:60:ab:e0:6d:7c:b2:4e:4a:60:f1:22:57:a9:
         fc:e0:9d:6c:fb:a9:5f:74:c3:d1:bc:0b:41:a2:d6:bd:dd:37:
         49:2b:3e:23:8c:2f:da:7a:9b:9a:8e:cd:a5:f6:46:0d:18:aa:
         a6:f2:c2:80:e4:05:9e:f0:95:23:d3:48:35:12:99:a2:2b:cb:
         22:7b:ce:44:90:3f:40:f6:66:ca:e5:ed:9f:b5:37:5b:64:28:
         d3:e8:c9:28:65:6c:de:25:02:64:1a:73:57:d7:41:6b:d9:10:
         e9:06:2a:a3:04:87:46:14:83:ad:8c:cd:de:ef:87:10:c1:9c:
         33:86:85:44:a0:e4:fe:68:11:1c:b2:d2:f3:76:5c:e3:86:66:
         0e:36:14:36:97:e4:ba:a4:9c:a0:5b:91:a2:a2:05:38:88:a5:
         09:27:c4:41:2f:b4:f1:fd:49:ca:69:d0:6a:7c:6c:9b:7a:f5:
         c6:e7:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:05:58 2024 by rpki-client on console-ams.rpki-client.org