Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File:                     WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier:          EA74eI7bDVi7FHnwlw0aEjpFHQ21Z1UKNAoAb5lsZF0=
Subject key identifier:   21:41:E7:55:56:1F:79:3F:40:90:A2:17:78:2D:8A:87:2B:19:3B:DF
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer:       /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial:       0193568968458DB1A81A4D2AD513A3926C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number:          10B5
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: l+vrFRdnsodPvajhz0bHsL6gcAOCl/cmuaJbBhygzCY=)
                          2: w2NtMKTN7UcOwzHf8R8dM1r90DM.roa (hash: YYP1xsmbV5jeFO79hZc4eP8zPY0HrNZypKbUD1KBFHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:68:45:8d:b1:a8:1a:4d:2a:d5:13:a3:92:6c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=2141e755561f793f4090a217782d8a872b193bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:ea:27:2f:f8:47:70:43:59:31:69:b0:7a:
                    71:61:a2:74:f6:0f:ad:f1:cb:fa:3e:52:61:53:a7:
                    28:38:62:00:0d:0c:52:05:9e:b5:de:30:9b:77:b9:
                    54:72:c8:82:15:9c:7b:eb:4e:8e:75:8e:ba:a8:3e:
                    d7:ed:6e:05:b1:0a:58:3a:5f:59:99:a7:15:b4:35:
                    40:19:ea:94:da:dc:ef:f1:b5:6c:8d:2c:82:0c:00:
                    d1:67:d2:f3:a3:da:71:25:23:53:bd:26:56:76:71:
                    25:22:c7:6c:23:93:2f:d8:47:18:a4:3d:61:1c:1b:
                    39:3d:4a:b9:a7:3f:24:08:0b:08:e7:6d:5d:2d:06:
                    37:d4:62:14:17:01:ad:e9:96:88:3c:db:3a:52:53:
                    23:a6:6c:fe:ce:fb:03:eb:3d:1d:35:57:60:c9:fc:
                    86:7b:95:17:29:59:52:f5:08:55:e1:c1:18:47:23:
                    33:7f:c9:1f:22:7e:de:9f:c0:bb:4e:3c:bc:7a:c2:
                    9d:ca:50:d8:ab:d5:cb:3d:8e:0a:52:6e:97:05:1e:
                    f6:6d:5b:cd:26:0c:5d:bf:4c:a6:93:75:97:82:8f:
                    72:20:20:ff:3b:ac:3d:1e:75:eb:72:7c:2e:71:29:
                    55:b6:3a:81:2f:e3:5a:31:1d:59:b7:50:3d:92:0a:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:E7:55:56:1F:79:3F:40:90:A2:17:78:2D:8A:87:2B:19:3B:DF
            X509v3 Authority Key Identifier:
                keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:6f:f3:8c:6c:98:88:a5:3a:db:93:db:4a:20:6c:f0:30:
         a4:9a:9e:ec:2e:5d:30:d4:99:5c:88:8b:36:47:f4:af:21:a6:
         f7:84:5a:cb:76:f8:1a:a5:df:a5:18:37:51:95:c3:bc:cd:02:
         ad:fb:df:70:2e:c9:86:22:1b:b8:b5:4b:e0:0a:a9:ab:00:f4:
         57:2c:02:46:22:52:d5:81:34:93:31:d8:ba:d6:a6:eb:e6:1a:
         8c:c3:46:d4:ce:81:ab:b7:4c:0d:fb:ca:cd:fa:ee:1a:a3:8b:
         56:33:44:58:6c:f1:fd:b5:bb:fa:a8:1e:d5:a7:d2:1e:83:fc:
         78:dc:be:26:14:62:92:6d:32:a4:8d:16:ac:6f:2f:4e:6f:4b:
         98:34:61:c7:44:93:19:8e:e6:c0:61:fc:ba:66:ce:fc:33:de:
         9f:af:bb:9e:50:3a:d4:3e:06:fe:38:e6:0d:c8:11:bc:66:61:
         a0:29:7e:fb:fe:d2:09:be:bf:16:f5:9f:ee:35:2e:57:34:d5:
         d7:24:fa:d8:eb:7e:bd:96:11:df:71:57:ae:c3:06:5f:c2:33:
         83:47:c0:4f:a4:2c:11:08:0e:df:b8:1f:0d:dc:3b:d2:69:ae:
         3a:e0:6a:43:d5:88:d7:d5:a1:e2:ee:66:d3:94:98:be:14:a0:
         bb:58:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:22 2024 by rpki-client on console-ams.rpki-client.org