Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          k0SHZafrDbjPWw8A6sTgg2X5egr8eYw/hoRLSqb1r84=
Subject key identifier:   37:12:28:CB:28:3B:5D:DE:AC:81:10:25:ED:7F:74:88:5F:51:C7:36
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       019354D139B01D3229D4658ABC6043FB1E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          10C9
Signing time:             Fri 22 Nov 2024 17:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:18 +0000
Files and hashes:         1: Jb5m0jFng8_L7aGBE-v0zwbZfzo.roa (hash: d1i4Vfj7w6xWaAEe4OwPzqncJvbpmkuu5nFZE6UDatg=)
                          2: SEm9kuFoC2IP7CWDQD5b7Z33LPI.roa (hash: Yukig+GNqJGNUH8cCvBaao3hftVi07UP44GHqK0w8uU=)
                          3: VPRCw9qbHDjYK7HUQODKzTL5tHM.roa (hash: fQuFF3uSznRVnFmVddxMumjnQSsZeA+THJJXWVo8G/M=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: kxss19kHszi9TafMm13S8UaxWou1kwL0lRL9Hnlak88=)
                          5: eA9hdjYTwO5lNK3NbbS59sWVZWQ.roa (hash: FExRic7tUzOr3pjRMbiAftlvKQxmD3zIaVMnJhYSWDo=)
                          6: pJkkV9IIycLjgnkqoNUc3eHg_sY.roa (hash: 4UYbWUlIqXlB8Yga0IFkgSmEBOdksb+I5tk+sP59anc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:39:b0:1d:32:29:d4:65:8a:bc:60:43:fb:1e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Nov 22 17:00:18 2024 GMT
            Not After : Nov 23 17:00:18 2024 GMT
        Subject: CN=371228cb283b5ddeac811025ed7f74885f51c736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:da:c9:4e:ca:f7:dd:9e:9d:5c:53:31:58:
                    a9:a4:18:a2:a2:b7:ce:c9:66:f2:2b:eb:89:d6:40:
                    d5:70:f2:24:98:08:b1:c7:e9:24:2a:1e:30:03:81:
                    87:eb:6b:6f:c1:74:e8:e4:01:09:f1:61:9a:5d:6b:
                    67:7d:0d:2d:e6:22:61:e0:b6:4a:2b:ea:3a:dc:86:
                    cf:e0:26:9a:da:08:dc:70:33:2b:7d:5f:e0:4d:cd:
                    cb:71:63:6e:aa:ed:d0:21:35:b9:97:3c:b9:55:81:
                    6b:65:62:88:dd:fb:94:e6:1e:74:7f:87:77:f5:92:
                    ac:b6:4f:8e:2e:e4:d6:5b:af:ba:01:0d:ea:79:31:
                    c5:bd:95:70:77:75:9a:86:ae:2c:96:3d:82:c4:2b:
                    eb:7f:71:9f:d0:69:d6:9e:62:1d:5f:c2:ea:b6:06:
                    79:47:7e:6c:49:78:64:6d:99:49:f8:0b:38:be:ac:
                    f3:a2:8e:d2:e2:ea:b6:fd:8d:d7:12:72:d4:21:48:
                    50:82:14:50:e1:a8:05:eb:b5:58:16:6d:ec:89:cc:
                    c6:37:0c:d6:1f:25:02:7d:22:cd:52:9b:73:46:5d:
                    a3:54:bc:94:65:f1:60:fb:fc:91:08:8a:48:e1:b5:
                    db:9a:fc:fe:37:52:ec:a6:a2:2b:bc:15:60:9f:10:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:28:CB:28:3B:5D:DE:AC:81:10:25:ED:7F:74:88:5F:51:C7:36
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:61:d9:d2:8d:13:5c:94:14:19:f2:d7:4a:6a:ee:35:cd:a1:
         e0:98:0b:79:fd:64:ff:44:ca:9a:c6:25:b8:09:5e:d6:f0:ac:
         d1:07:09:4e:7b:34:85:f0:93:3b:ef:96:18:82:0e:c4:5e:a9:
         25:94:9e:53:46:fc:71:ba:5a:28:33:37:f8:94:9c:c4:38:07:
         ed:73:6d:60:45:1c:34:ca:a9:d6:56:c7:e1:bd:88:f6:cb:ba:
         14:6b:b2:b8:02:7a:c0:47:fa:35:8c:45:b7:a5:0f:34:b4:22:
         ce:f8:f3:d4:35:da:0f:43:93:eb:b9:da:e0:d1:eb:6f:c1:53:
         6e:6a:e0:91:64:d6:7e:6f:83:7e:31:85:53:af:28:46:a0:1f:
         b5:99:fe:6d:52:12:ba:70:2c:3a:ce:a0:8f:4e:d3:12:ad:2a:
         4b:f8:ed:bf:99:ae:c0:0c:bf:68:11:c8:63:96:45:9e:e8:b0:
         39:23:22:ae:68:02:52:df:8e:ec:8c:2d:8f:1b:ee:d3:0f:26:
         95:dd:cd:1b:3a:52:3b:76:e0:13:04:38:91:54:95:b4:55:90:
         4a:e7:f4:52:44:30:de:71:e3:c2:df:f3:3d:f2:20:88:aa:e6:
         6d:2c:e5:15:c9:14:9c:6d:48:4f:18:5d:1b:db:6f:0c:df:9c:
         3a:96:16:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNU0TmwHTIp1GWKvGBD+x5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1
ZjE0MGMwHhcNMjQxMTIyMTcwMDE4WhcNMjQxMTIzMTcwMDE4WjAzMTEwLwYDVQQD
EygzNzEyMjhjYjI4M2I1ZGRlYWM4MTEwMjVlZDdmNzQ4ODVmNTFjNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxjayU7K992enVxTMVippBiiorfO
yWbyK+uJ1kDVcPIkmAixx+kkKh4wA4GH62tvwXTo5AEJ8WGaXWtnfQ0t5iJh4LZK
K+o63IbP4Caa2gjccDMrfV/gTc3LcWNuqu3QITW5lzy5VYFrZWKI3fuU5h50f4d3
9ZKstk+OLuTWW6+6AQ3qeTHFvZVwd3Wahq4slj2CxCvrf3Gf0GnWnmIdX8LqtgZ5
R35sSXhkbZlJ+As4vqzzoo7S4uq2/Y3XEnLUIUhQghRQ4agF67VYFm3siczGNwzW
HyUCfSLNUptzRl2jVLyUZfFg+/yRCIpI4bXbmvz+N1LspqIrvBVgnxBEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcSKMsoO13erIEQJe1/dIhfUcc2MB8GA1UdIwQY
MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt
NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz
LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWHZ0o0T
XJQUGfLXSmruNc2h4JgLef1k/0TKmsYluAle1vCs0QcJTns0hfCTO++WGIIOxF6p
JZSeU0b8cbpaKDM3+JScxDgH7XNtYEUcNMqp1lbH4b2I9su6FGuyuAJ6wEf6NYxF
t6UPNLQizvjz1DXaD0OT67na4NHrb8FTbmrgkWTWfm+DfjGFU68oRqAftZn+bVIS
unAsOs6gj07TEq0qS/jtv5muwAy/aBHIY5ZFnuiwOSMirmgCUt+O7Iwtjxvu0w8m
ld3NGzpSO3bgEwQ4kVSVtFWQSuf0UkQw3nHjwt/zPfIgiKrmbSzlFckUnG1ITxhd
G9tvDN+cOpYWMw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:44 2024 by rpki-client on console-fra.rpki-client.org