Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File:                     WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier:          uWiKJmVvKSaPEk21dRvO7FtQ6uwfynuRUGwyOd6ZPz4=
Subject key identifier:   8E:8C:5B:AF:E2:B3:3E:97:AF:9E:36:B7:D2:E7:74:62:8D:E4:E9:6C
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer:       /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial:       0193549B58D210429A05CB5786C132ACDF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number:          0842
Signing time:             Fri 22 Nov 2024 16:01:27 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:27 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:27 +0000
Files and hashes:         1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: TEFB/DWFYAUj6pOHxRc+GRMjHXiqLuLDPzjSfAJA/xk=)
                          2: b3UsCmXQ5pwPOOactdEo-6zojUI.roa (hash: MM+5vgXjQtlDDQb0cuCZ+yuDblXz68p3MzbYE2fq7Cw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:58:d2:10:42:9a:05:cb:57:86:c1:32:ac:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
        Validity
            Not Before: Nov 22 16:01:27 2024 GMT
            Not After : Nov 23 16:01:27 2024 GMT
        Subject: CN=8e8c5bafe2b33e97af9e36b7d2e774628de4e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:61:a8:94:7c:8d:c3:2d:80:d1:98:c1:15:
                    a8:30:b2:3c:21:68:ac:45:cb:18:59:8b:5e:d1:34:
                    f8:8a:a9:07:73:91:c6:3e:7e:e2:6f:0f:29:c1:cd:
                    8c:4d:01:c7:75:1c:91:26:65:dd:fe:cf:42:99:88:
                    e5:61:b6:c9:f5:94:2d:44:6c:55:7b:96:1a:d1:dc:
                    c5:7a:01:23:4d:6c:aa:b5:5d:7f:dd:ae:a4:fa:80:
                    24:3f:d1:89:c0:35:18:98:26:b7:ab:b2:0c:39:9d:
                    b0:be:13:54:32:35:99:c6:19:6c:01:9a:9e:bd:7c:
                    87:a8:68:8d:e0:27:e9:32:4c:9a:98:a5:0d:ea:53:
                    5a:95:0e:1b:c5:82:ea:1e:c5:8c:31:8f:61:c7:13:
                    72:72:56:a2:09:41:58:77:79:9c:5a:7f:05:10:74:
                    e9:d0:cb:5b:2d:d4:51:ac:16:58:6e:ff:c2:24:93:
                    03:92:8c:8d:ae:55:2c:87:6d:e4:cc:4d:55:4a:91:
                    e3:6e:a0:af:f1:a5:1a:05:7f:7c:bf:85:97:40:6f:
                    dd:4b:50:cf:dd:99:74:a5:b9:a9:f1:aa:f2:ea:e0:
                    e3:a2:18:71:de:33:f0:fe:30:98:42:46:ad:68:c2:
                    e2:de:af:aa:59:f9:f7:5d:a7:94:b7:17:d4:1e:c0:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:5B:AF:E2:B3:3E:97:AF:9E:36:B7:D2:E7:74:62:8D:E4:E9:6C
            X509v3 Authority Key Identifier:
                keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:fa:a7:69:68:4c:ff:ed:8a:cb:db:cd:27:25:cb:b2:dc:
         73:3e:9c:c5:e8:45:77:2d:54:48:e8:a4:63:09:a1:d9:2e:50:
         01:8c:25:93:f9:30:fd:6c:88:18:ce:84:ff:57:b0:09:cc:d5:
         5d:64:99:6c:26:da:ca:13:8c:7e:11:02:80:4d:cd:fd:1c:a9:
         c5:09:5c:32:f7:ee:bc:b8:2c:3b:f9:40:15:d7:ee:be:66:54:
         32:7f:ef:b1:de:51:23:25:dc:9e:37:80:d2:9f:65:06:46:bc:
         a0:a8:65:14:96:2b:f1:18:00:05:fa:00:92:68:80:80:c9:54:
         8f:92:39:62:06:6b:67:91:5e:de:7e:49:c6:64:2e:a4:0b:7c:
         81:2d:8b:6a:57:0a:af:ed:f3:3d:b4:7a:4c:eb:7e:98:b5:69:
         42:e4:df:dc:b2:e1:0a:f0:f2:a4:e8:b2:20:66:0b:98:c1:c3:
         cb:c6:73:1e:73:ec:9a:48:0c:8e:18:01:3b:a1:80:fb:ed:7d:
         b4:3d:a1:f5:01:00:84:a9:a8:9a:ea:db:25:6f:c0:ab:82:66:
         5a:85:77:0d:5c:c5:66:21:e3:65:1e:31:22:76:08:a7:b7:f9:
         5f:3c:d1:43:06:dc:76:2d:e4:56:9a:bb:2f:9b:99:df:83:2b:
         bb:3a:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:21 2024 by rpki-client on console-fra.rpki-client.org