Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File:                     WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier:          IQo5lo7Phgi6xot2ngqYUE1bqA/Pie/VQbXnC2RToVo=
Subject key identifier:   83:9A:84:9F:74:7B:CE:8D:D5:C7:19:C6:91:F3:F1:33:18:44:14:0C
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer:       /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial:       0193523E085390C99166CD102A41B1122BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 05:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:17 +0000
Files and hashes:         1: 41inKs2yTgIgP7Chioo94ya5ILg.roa (hash: bhCtk0cZp0hdAKuaLt7vAFINAdOSy5VIarNd96C2ElQ=)
                          2: BDvvL2ukIbk3mMW38BP8JOq8c5I.roa (hash: gRta/cBEZd9YqT3NmuxWqZZqrSrpVU3ZLtPajN9uQWE=)
                          3: FFNMR0W6GkxMPvIZRjAm0gwnVlU.roa (hash: TawGzYD+27D/NvePDO25WOGE+pcUbEFcV9ccjXwvWwo=)
                          4: M6GtxjvyWIzcnUXc4JSIazo_sGY.roa (hash: 1iW9Y8yEu9PK9Ojnd+FUE3qiXwqFZOtSoayrnT16ibc=)
                          5: USeQ8HFxZR17dy-kLzswUQPIRo4.roa (hash: kj80ns0nRwYqgHq9Rj26SNhXJHlUTaYGAq4vMBQYlC8=)
                          6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: b8VxhUDJwnVRTIAJ5bed4rZoE8D4OOXnwF+yEkf8yl0=)
                          7: fyhjFNrYi7vXHEKpjMzy8eMRtJ8.roa (hash: E+KfRqj3uDuhLCIxqZA9CDxRA5PEnPTPALouxqVSlb4=)
                          8: mezxrm9AtbuLbzqPHqTEj-w8f7k.roa (hash: cfvhnFHCHKMP/2JFc6tbVh5YqYVag51TYOTZ7W5Xomw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:08:53:90:c9:91:66:cd:10:2a:41:b1:12:2b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
        Validity
            Not Before: Nov 22 05:00:17 2024 GMT
            Not After : Nov 23 05:00:17 2024 GMT
        Subject: CN=839a849f747bce8dd5c719c691f3f1331844140c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:63:d9:65:bf:f3:82:d4:be:05:35:47:39:
                    3c:b4:84:87:60:8d:e9:b4:13:e6:ff:26:62:0a:07:
                    47:88:66:f4:5e:b4:52:07:99:34:8d:ea:f3:20:9e:
                    fe:50:ef:08:af:be:65:b6:cf:73:94:d8:3d:b7:c2:
                    68:5b:6b:57:ef:14:3b:76:8d:99:2f:fd:8b:fe:ae:
                    58:3f:c1:c3:b6:d1:ba:24:6e:71:59:57:35:89:b0:
                    16:7d:4c:10:7d:fd:44:4f:6f:9a:40:e4:de:07:9f:
                    53:6e:f2:44:d4:ad:1b:b6:f3:57:e6:b7:b3:e9:64:
                    6b:36:23:32:a7:c6:06:a5:29:75:dd:29:10:7c:50:
                    bc:8d:f0:91:b9:a9:27:6f:e9:6d:7c:e4:d5:7a:84:
                    f4:b1:4e:59:51:dc:99:b5:00:f4:04:94:45:85:e1:
                    c2:cd:1f:9f:4d:14:00:f2:95:71:58:69:e6:be:b5:
                    15:c0:e1:bd:fd:4b:d8:df:32:40:6c:9b:f3:b4:ed:
                    8c:31:3d:49:da:2c:47:41:86:63:99:17:3d:3e:b5:
                    01:a2:57:8c:8d:11:52:7d:c8:da:72:d2:ef:fa:61:
                    82:fb:01:db:16:af:bd:38:6e:f1:33:1f:b6:01:8d:
                    e2:cd:82:39:69:8e:69:22:29:47:d9:c7:f1:84:34:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:84:9F:74:7B:CE:8D:D5:C7:19:C6:91:F3:F1:33:18:44:14:0C
            X509v3 Authority Key Identifier:
                keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:60:62:f9:b1:29:54:62:b3:aa:84:2b:93:07:80:0d:d0:
         26:9c:fa:86:4c:f2:51:0b:08:8a:80:df:5f:6e:06:5f:77:25:
         63:b7:30:1b:21:db:6e:6e:40:b2:ae:22:6d:c0:f5:0e:73:48:
         78:6b:24:e7:ac:f1:cb:8a:9d:f4:3f:4b:4f:64:9b:6e:bb:72:
         2a:ea:0d:93:68:df:4b:3d:5e:e6:e8:c2:dd:a5:91:48:0b:80:
         12:33:eb:91:e0:1c:6f:3d:07:af:a4:6a:7a:b3:f4:36:ee:66:
         aa:64:24:c0:64:40:ca:79:7f:e6:78:5a:7b:f7:6a:93:cc:61:
         37:be:77:86:35:32:f8:24:32:46:9f:d9:2b:72:71:30:ad:ff:
         3a:bb:e0:8c:89:61:4b:e8:e2:0f:43:1e:6a:71:ff:b1:5a:9a:
         d6:27:c6:70:b0:2f:14:43:cc:4d:5a:bb:52:8d:d1:dd:1f:1e:
         29:c2:00:e4:5f:ae:9d:c1:34:be:0a:ba:16:26:96:76:c1:ff:
         7a:16:bb:89:1c:82:3a:ac:b1:6d:16:c9:e1:b3:ac:e1:61:6b:
         9f:89:b4:be:9e:14:a6:3d:0a:34:d8:63:98:0e:52:50:1b:2d:
         a3:99:2d:a8:3a:f9:8f:4a:d6:2d:ad:1d:4e:17:fa:09:d3:68:
         1b:28:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:51 2024 by rpki-client on console-fra.rpki-client.org