Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          cz+yUUpJGX4xpn66BfYlhK/53GyC+8jxNXEreNdIptU=
Subject key identifier:   53:D5:74:FD:BF:C8:81:F9:64:C2:AE:67:25:78:03:07:B8:D9:3D:69
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       019354D1281EBA67F47DCBCE4907ED7E91D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          0640
Signing time:             Fri 22 Nov 2024 17:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:13 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: 0S6amZQSivR4bmyb3yzhITU/9EstLcuDDYshmR5U84M=)
                          2: nuCDYMjfdPtsYVU7WTW5x_sW2cg.roa (hash: 1LZK4FHuHQKaGJZSj7Gnkyh3poCpi+Q0Dy5dwtFDmx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:28:1e:ba:67:f4:7d:cb:ce:49:07:ed:7e:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Nov 22 17:00:13 2024 GMT
            Not After : Nov 23 17:00:13 2024 GMT
        Subject: CN=53d574fdbfc881f964c2ae6725780307b8d93d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:4a:9c:5f:8e:54:86:e8:d6:da:43:d2:af:
                    39:6c:6c:9d:9b:30:31:11:f0:77:6e:a6:80:f9:2c:
                    50:e4:9a:e5:8e:72:73:bc:d0:d1:33:52:43:7e:80:
                    ae:fa:8c:cf:7d:98:62:d6:dd:5c:35:2f:b3:4b:73:
                    de:e7:e3:e7:89:75:aa:54:82:0f:63:1a:5f:0c:37:
                    d3:4a:65:22:55:a1:bc:7b:ad:90:6b:4c:a9:0e:e7:
                    aa:12:0c:f2:56:76:ae:22:4a:7a:a5:08:04:49:28:
                    10:fc:1c:61:54:a4:c2:55:57:20:cd:06:4e:24:cd:
                    e1:70:81:9f:52:5a:13:70:fa:ad:db:9c:94:04:ae:
                    a0:df:46:19:d7:35:19:70:fa:f7:a7:93:66:da:26:
                    2b:6c:85:20:4d:29:9e:ab:ee:4c:31:f1:20:2a:b5:
                    12:72:63:b0:b8:a8:a1:9a:1d:a4:88:5e:66:45:2e:
                    a5:aa:27:74:fc:e3:e0:be:c6:3c:44:e7:be:83:38:
                    5e:c6:ba:a9:4e:a0:48:db:df:10:47:5a:a2:a1:08:
                    97:12:c0:47:72:7d:0f:98:80:70:58:06:a1:1b:55:
                    93:fc:16:27:c6:c8:7b:da:4d:e5:69:07:32:39:46:
                    de:59:ca:1f:07:47:df:f8:12:06:6d:4a:1b:6b:43:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:74:FD:BF:C8:81:F9:64:C2:AE:67:25:78:03:07:B8:D9:3D:69
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:d2:8a:df:a5:74:ca:ff:f3:25:5d:29:74:e4:40:9b:10:
         7d:a9:1c:73:71:5f:99:c3:ed:fc:b1:52:07:65:16:98:11:53:
         1c:42:c5:2f:a0:80:4d:4e:a3:bb:16:b2:77:3b:c2:a4:ee:09:
         e7:cf:8b:59:ea:6f:9f:70:38:4d:c6:ec:c3:09:9a:f6:bb:74:
         3c:99:7e:53:7a:96:cb:2d:42:b3:30:26:9a:a4:57:b3:e4:cb:
         dd:1f:d0:8f:2b:15:ac:a7:7b:5c:6e:5c:24:5a:b2:d3:9f:6f:
         06:cc:d9:ec:3e:73:01:a0:cd:3c:88:ba:1a:e6:16:61:02:6e:
         69:75:b6:76:4b:98:d5:d5:65:b7:e6:33:d7:b9:a5:89:b9:cc:
         5b:8c:2b:72:76:8a:e4:4d:f9:f3:59:75:bb:96:f4:37:65:30:
         19:56:b1:6f:d2:32:38:3a:41:2a:da:26:f3:ae:e9:eb:b0:40:
         77:f3:44:8c:08:f6:f5:dc:c2:e7:aa:a7:8e:44:f0:25:56:7c:
         0d:c6:be:27:1d:f9:05:86:37:33:d6:4a:46:d2:88:51:e1:bf:
         03:3a:76:4c:ae:20:9c:10:65:56:b0:f1:39:a8:1c:2b:1e:83:
         c0:f6:18:1a:e6:25:4e:a4:21:b3:66:bc:fc:2d:c3:52:62:ea:
         ae:0d:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:59 2024 by rpki-client on console-fra.rpki-client.org