Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File:                     W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier:          dEKuohNUFsJ4N6AYREyf13DDkVb2CqbTqq8BRX8ZrLg=
Subject key identifier:   2C:E3:D9:33:3A:B6:5F:21:96:83:B2:87:DD:BD:DA:36:D1:C1:A4:1B
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer:       /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial:       01935688F98D348912BF4EE4A0337AA4F0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:37 +0000
Files and hashes:         1: HjXuO5KRjVx46za6bMsILIJl-Pc.roa (hash: mQBSLC9ow3/3/AWFubEBxUd03Af/ZOJae1VmeCzvluE=)
                          2: QWW1IzfyFI2DzlAXPubTzWFMc7I.roa (hash: CLFa2pWb5Nf6LtfoidSCY6boUCkFY4dI7R5R/crpwTE=)
                          3: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: Wj/EeZHgLgN46An6pcZBkfb3p0zg4jfFgcx76J0oEOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:f9:8d:34:89:12:bf:4e:e4:a0:33:7a:a4:f0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
        Validity
            Not Before: Nov 23 01:00:37 2024 GMT
            Not After : Nov 24 01:00:37 2024 GMT
        Subject: CN=2ce3d9333ab65f219683b287ddbdda36d1c1a41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:a5:fe:77:71:b3:b4:d0:7d:88:4e:53:e9:
                    cf:5a:d4:8e:62:54:80:c6:c4:ad:5b:94:2f:4e:d5:
                    be:c7:11:9c:cf:49:86:bd:25:e9:29:cf:08:14:4d:
                    d2:63:bc:04:b7:f3:40:d3:69:e8:84:5c:a6:94:b1:
                    d9:e4:74:a3:7a:7f:be:c6:38:1e:b6:a2:28:28:3f:
                    88:e2:1b:15:86:f6:25:9e:21:be:ca:11:9f:ab:01:
                    26:97:d0:a2:b1:4b:cf:b4:46:a3:ff:d5:59:cc:7f:
                    65:55:e4:4e:b6:ad:27:90:f9:72:44:37:dc:4c:2f:
                    c6:a3:19:86:77:2d:bb:6f:73:65:df:da:f9:ee:8f:
                    e9:a7:b0:49:c7:64:4d:88:49:52:2b:66:ef:71:c4:
                    01:60:3c:ea:f4:0f:03:59:f5:76:67:f3:b1:24:6e:
                    be:0d:9c:42:2a:f6:25:5e:a9:a2:1e:f4:e7:30:cf:
                    06:ce:04:d5:cf:d0:35:f8:22:eb:25:e9:18:8a:38:
                    42:a1:c1:88:24:65:12:c5:74:d8:93:c5:88:cd:75:
                    b6:d8:e2:1f:ad:bf:24:e9:56:2e:87:3a:52:d7:9d:
                    f0:0b:65:aa:1c:bb:e7:7e:80:7d:64:a4:42:eb:e9:
                    b0:f7:84:de:51:a5:d9:11:08:44:eb:a9:e6:13:06:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:D9:33:3A:B6:5F:21:96:83:B2:87:DD:BD:DA:36:D1:C1:A4:1B
            X509v3 Authority Key Identifier:
                keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f1:9b:a7:de:5c:28:e0:c3:de:33:54:56:bf:e4:0f:52:56:
         66:70:ef:f4:ce:22:22:f6:65:dc:47:01:ad:a1:60:33:a2:c3:
         35:03:19:58:77:e8:35:ff:fc:9f:73:e0:27:af:93:83:b7:c5:
         cf:5f:64:d0:8a:9c:54:8f:30:92:12:2a:74:af:e3:28:34:c5:
         21:3a:88:1a:0c:88:2c:e2:49:0d:33:ee:6b:32:73:3a:72:21:
         23:95:44:72:e7:99:07:42:2c:e2:77:6d:8c:31:b4:98:2f:33:
         2b:7d:63:eb:ba:c1:55:98:4d:0a:72:1a:53:71:c1:dd:0d:e2:
         ef:52:37:e8:09:fc:ab:74:88:02:3c:d8:0e:ae:20:f0:bf:d3:
         8c:5a:4d:5c:db:29:e1:96:8c:7a:1c:ee:36:e0:fe:e9:00:f5:
         b9:73:76:aa:84:56:b9:71:52:32:92:51:cc:90:6a:fe:29:3c:
         bf:9b:ef:d5:d2:50:0f:90:b6:84:ed:1c:7d:1c:d5:73:93:11:
         bd:66:5c:ba:83:76:84:c9:8e:1c:9b:14:b1:d3:dd:62:fc:97:
         7a:f9:3d:ed:df:84:47:6a:bd:21:e6:8b:48:82:99:b5:8a:47:
         de:2d:76:d1:52:20:45:c1:e5:b8:f6:fd:bf:ac:84:18:a6:6e:
         a3:ab:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:53 2024 by rpki-client on console-ams.rpki-client.org