Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File:                     WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier:          jbhoMvjO71j9mqDMsWurmxlub2Nefxqa9smA7oS0uGM=
Subject key identifier:   14:31:28:86:4F:1B:F7:B2:74:C5:D7:E3:23:1D:8D:96:9B:52:A9:76
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer:       /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial:       019352072FA750BA440821066646646B58D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number:          12D6
Signing time:             Fri 22 Nov 2024 04:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:22 +0000
Files and hashes:         1: 66Fetc6opG5f3o9gsKuYABh6z7w.roa (hash: tgclufu3obPlFS+W5jgF7fp5X+me2/Jgin6BBpNoCAg=)
                          2: 7jgOp-Pa45fk2e0qNyl3w_AJzTc.roa (hash: +H65YEWVaPKEF44wHOtfYZNp5JgrYOo4LwxT53fTZsU=)
                          3: 7zAn1vWlt1tNqbbrPVdptBjOHJw.roa (hash: 3SgMD/a5lXvcOcSnfwK2/xT1v/rB+kX4VzpyJK6yaT4=)
                          4: 9IIsoMMnpikvHBcuZSVkO4nrJKk.roa (hash: cSUdlP+G2mhJPfIQXK1yix+6qYdP2dph/ar8GExRPuM=)
                          5: NMrDn4ATtRIWHPF9Tql1W4Ww7lc.roa (hash: xPht+61vkNeJJWUDjysXzxFpyYBm5uIP6VhFFH8bZIg=)
                          6: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: WdHlLSJxv4u6Tz5kELni6aEGlGsOj5lYLRVDwyHjTnk=)
                          7: ZSBpCirylz1vkki7QdtDm6OhFSQ.roa (hash: rNpFQ21SxVMLxDNKWrcn6pH4vM5IERMajBrOrJ9Qgus=)
                          8: j9Wn70r2LCuq043U7DB0eM4wNfQ.roa (hash: msanrrotk/IsyRJaqpc+/f2s3iAQ0p11heca5q0ntZM=)
                          9: lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa (hash: Rup0ioyoCeKO4bl3gu1plhaZy+FR134Kh8wcWKANp/0=)
                          10: qXHHkW-ruRBplMU7atKw7gOlLWs.roa (hash: J5vojE6NCOQeuxjbasIcKQe32e1wr3Z8HYvZ+ZUtHxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:2f:a7:50:ba:44:08:21:06:66:46:64:6b:58:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
        Validity
            Not Before: Nov 22 04:00:22 2024 GMT
            Not After : Nov 23 04:00:22 2024 GMT
        Subject: CN=143128864f1bf7b274c5d7e3231d8d969b52a976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:e6:6e:47:30:76:72:75:0f:d9:26:13:a0:
                    86:09:d8:11:a3:22:19:26:fc:c8:39:7e:10:5f:3c:
                    16:c2:73:86:21:79:88:76:e3:0c:51:86:a3:fd:b7:
                    ed:9f:3b:fb:cd:67:7d:e4:5d:f4:06:0e:c7:41:47:
                    96:98:0d:c1:93:9d:69:11:e9:30:61:bc:e0:d7:c8:
                    d3:d1:c1:5f:03:ff:de:db:e1:be:cd:97:5e:d4:11:
                    40:c4:7b:3c:b8:ff:db:31:3c:9c:18:6b:b6:0d:c5:
                    aa:22:39:0f:b4:3d:7a:bd:ff:34:e7:3b:e2:ea:79:
                    3d:0f:cf:69:df:bf:84:f1:33:e4:7b:24:bd:e0:07:
                    02:07:c2:f3:5e:c7:98:c2:e5:40:42:c5:d2:4a:0b:
                    b6:f3:ec:7c:6b:ef:6a:73:85:f4:13:c1:04:2c:2b:
                    10:27:02:e7:4f:9f:43:30:00:2a:d9:33:f4:e9:5c:
                    31:d0:56:99:37:d4:ea:a4:ce:9c:10:ef:fd:3b:15:
                    71:7e:e2:bd:dc:d1:3c:2b:5b:33:f4:25:e0:10:a4:
                    da:90:6c:f3:04:83:bb:8b:b1:cc:27:a8:12:4e:f6:
                    69:b0:bc:34:3f:47:95:7c:3f:4a:99:80:1e:b8:98:
                    a4:ba:4d:99:9b:df:3d:62:b6:80:46:13:1e:06:39:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:28:86:4F:1B:F7:B2:74:C5:D7:E3:23:1D:8D:96:9B:52:A9:76
            X509v3 Authority Key Identifier:
                keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:f4:18:e5:e7:4c:0c:72:63:37:2d:71:b0:dd:59:fe:6d:
         43:c3:82:16:0d:6d:1d:80:56:c5:d1:0d:54:6d:a1:34:11:32:
         89:30:f5:75:32:d3:73:04:4a:6f:b8:cf:0b:b7:17:12:17:d4:
         2e:ea:6a:2c:b1:d2:a3:3a:20:5a:cc:ed:ac:22:b8:b8:f8:07:
         ba:ed:f8:5f:5c:a8:a5:be:63:c4:fc:58:9e:a5:af:88:69:e4:
         2f:c4:a8:b6:d8:96:4c:6a:ea:c9:c2:28:22:af:e7:7f:c6:b1:
         9d:c0:c6:02:aa:b3:0d:77:aa:d2:af:7d:21:47:e4:83:b2:9f:
         e6:85:32:4a:60:62:1e:86:c4:83:e3:a8:d3:9d:70:f3:77:d8:
         2c:ea:48:25:e9:14:07:ff:b0:eb:5b:08:ea:f7:79:0b:41:4e:
         f2:8f:82:3e:83:0d:8f:0b:ad:ab:cb:10:98:18:70:57:34:46:
         a6:22:fb:30:f6:7d:2c:0a:17:c0:41:6d:93:9e:03:bc:76:2a:
         07:d0:c0:2b:bb:6b:35:59:2e:97:f3:6c:1b:b1:83:72:0c:b9:
         4f:a9:ad:d0:1b:55:c0:b2:d7:1e:40:38:e3:97:27:f6:54:51:
         55:fe:65:3d:9f:ad:f4:a0:e5:15:da:e0:ed:0a:67:7e:92:8c:
         65:20:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:06 2024 by rpki-client on console-ams.rpki-client.org