Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          ZGa4xN3MZy8LcJqsaoJgErhB5tiAdfjqDiZCPm+Yu9g=
Subject key identifier:   08:F8:0B:6E:F6:6C:F5:CC:2E:4C:B6:61:EB:5C:6F:FB:79:F5:74:C9
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       019352075CCB361C47E5A02F0E3F2AE0B36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          0DEB
Signing time:             Fri 22 Nov 2024 04:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:34 +0000
Files and hashes:         1: 1x9OUBgUhODwmMf208Vg2yzAN7o.roa (hash: ub2FuvXTNQ9O3Ob5pLwurK9WpwdC/e4GNwtq+7+ufqs=)
                          2: Bv0vZdAupj1HGgLi2psWKoqz2tM.roa (hash: c734MOTAD1JZod7/AQwj/uDqQLF4jQnAxs+/5qzBi9Y=)
                          3: MdKwAvU3TWXJ7z3RBqwTCPadIyk.roa (hash: vEWmPy1hXQdS+UjS+59I5YYb276X7UhHes9A5kdsafg=)
                          4: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: c4M31XbEaMLd+bPSez/q45dDpKj6xsFSIhpFetzLPgc=)
                          5: Wo1SbWj4uIj2VYAk9L8zjvnKfYg.roa (hash: Isba/EFENs9w9xAI9cJ6bNzZvJSwvJZ/kezAG6TZI54=)
                          6: l9GgAqlHfx7gpa_DkY4McnmS8p8.roa (hash: 1VTOSBtRowBjeUwFVLUeU8haTuSDVW5lIX656zjJHco=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:5c:cb:36:1c:47:e5:a0:2f:0e:3f:2a:e0:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Nov 22 04:00:34 2024 GMT
            Not After : Nov 23 04:00:34 2024 GMT
        Subject: CN=08f80b6ef66cf5cc2e4cb661eb5c6ffb79f574c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:1c:a5:1b:18:84:c7:b9:9e:1e:e1:f7:a7:
                    eb:a9:f4:e8:35:6a:ec:36:4a:bb:92:7d:73:60:33:
                    a6:0b:91:47:3a:18:fb:07:55:3b:ec:e2:29:c7:04:
                    d7:c1:43:77:e4:58:8a:30:be:67:7a:e1:a9:82:55:
                    3b:ca:4c:1d:d1:83:3a:0c:b8:a7:ab:1a:51:7d:b1:
                    10:14:84:d2:91:17:c4:48:b6:cb:e1:b3:b5:72:44:
                    5a:35:93:c7:92:2b:f0:ed:eb:7c:8e:76:7c:67:3c:
                    e8:64:70:36:05:8e:14:a6:17:6d:d1:8b:58:94:dc:
                    12:c6:f4:cd:43:3f:10:5f:61:4b:aa:06:28:fe:85:
                    a4:7d:b2:86:0d:d3:aa:8d:b9:e5:98:b8:5c:4f:4c:
                    9f:32:68:8d:75:db:c4:14:91:82:e0:8c:4f:fc:15:
                    c4:ce:22:46:c9:68:d9:18:ac:3c:89:a7:d8:a9:b8:
                    0f:37:23:19:a9:6e:0f:74:05:de:77:11:57:c0:3c:
                    0c:66:47:e0:06:0c:16:81:b9:c9:65:d8:01:e3:02:
                    92:27:f6:7d:bc:31:0c:a5:e6:7c:87:19:d7:d2:5a:
                    fa:6f:71:da:8e:15:94:80:b6:c3:15:0e:ef:f6:25:
                    19:d5:5e:26:6b:8e:70:07:3a:77:85:f5:9d:ee:7e:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:0B:6E:F6:6C:F5:CC:2E:4C:B6:61:EB:5C:6F:FB:79:F5:74:C9
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:fe:76:33:2e:eb:20:16:b4:65:e8:bf:3a:25:99:e0:73:
         34:dc:8a:75:e6:8e:c2:37:dd:4c:80:43:2b:9a:78:a7:90:e6:
         7c:c1:7f:26:a1:cd:c8:fd:bf:35:37:eb:d4:93:b1:1c:fd:ad:
         50:1b:b7:fe:92:e6:6a:5e:55:a6:2d:70:93:68:c0:7f:8a:3f:
         8a:8a:78:74:9c:ba:5f:d6:9b:d3:0e:57:2c:ed:e7:e7:1e:36:
         4c:2e:94:07:06:52:87:1d:0b:7d:c9:9d:b4:d0:ce:0d:88:44:
         3b:e9:cb:c6:f7:a0:a3:03:4b:e2:c4:8d:25:e4:40:b8:1e:c1:
         a4:b5:b9:f7:1e:3b:56:73:78:32:f0:77:09:a4:e0:cd:aa:2e:
         51:ec:1a:79:13:2e:b4:cb:18:51:17:53:94:9a:26:82:1b:c2:
         00:2a:a9:4c:0b:03:ce:28:56:03:9c:d2:c6:4c:24:d1:cc:77:
         48:d9:df:f7:bf:78:ca:8c:38:65:e5:d2:e9:2e:98:59:65:1f:
         52:6c:e6:66:b5:84:1a:84:05:a0:b0:d5:37:2d:90:ac:8f:ef:
         f8:e4:12:7b:0f:f8:8c:da:69:7a:ae:9a:50:92:7d:dc:4d:ba:
         91:59:e0:0e:82:4a:48:96:3b:cf:33:3a:90:cd:92:85:33:55:
         c7:54:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:40 2024 by rpki-client on console-ams.rpki-client.org