Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          nsw1b2/ero50mJE5QE7e1fDdd4Z63J2pLGi6iZhl9z8=
Subject key identifier:   DF:5B:E9:FD:D4:77:21:44:42:76:D2:27:46:94:7F:B1:4E:C3:64:DE
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       019352AD1A0E1B6E25081EE9E0B457B7693E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 07:01:36 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:36 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:36 +0000
Files and hashes:         1: 6Y5ZBM-hAiIwryCyGGcxvRj-mfU.roa (hash: dMWRtyVNfg9IHpoRkTYpSLpWscLW042PnLVaxYc/B78=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: p00W7iOOyGGlRNMV6bvbic2moycJZu4jqAtAfKLNPeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:1a:0e:1b:6e:25:08:1e:e9:e0:b4:57:b7:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Nov 22 07:01:36 2024 GMT
            Not After : Nov 23 07:01:36 2024 GMT
        Subject: CN=df5be9fdd47721444276d22746947fb14ec364de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:f8:90:cd:aa:cb:fe:74:3d:59:63:6e:54:
                    c8:4b:2d:5c:f3:1a:98:4b:60:d6:c5:85:d5:2f:b0:
                    a1:b9:85:f3:bf:ba:dd:65:ce:87:e9:d3:0f:f9:5c:
                    89:47:2d:e0:ec:f6:b3:84:9b:d5:e5:8b:9f:f6:67:
                    be:5e:a6:d4:d2:43:41:40:84:c9:9e:de:a2:c7:bf:
                    f6:a4:32:84:d1:ec:b8:ad:44:ce:50:7a:14:03:d9:
                    6d:08:24:47:f7:f0:e0:a2:a8:85:b3:a4:b5:62:a6:
                    92:01:49:5b:ea:15:b0:d3:ac:75:db:ee:af:cf:96:
                    01:67:f4:a4:d0:d2:5f:60:c4:c7:ea:87:51:14:00:
                    f3:cd:fa:8e:84:c6:f5:07:8a:2f:cd:e9:0b:20:9d:
                    f6:91:c5:ea:7b:4c:8a:7e:7a:77:5f:d9:63:b5:fc:
                    49:93:5a:fd:59:9d:13:31:c0:a6:d1:9f:94:b0:50:
                    fd:9d:40:b9:a9:f3:73:62:d4:c2:20:8b:0c:b8:bb:
                    ea:05:78:99:24:5a:84:a8:09:a4:7c:43:c0:ed:93:
                    5f:df:ed:1a:6d:cd:b8:04:ba:34:56:1d:bc:40:04:
                    b5:42:a5:05:fa:b6:19:3c:d3:ca:ad:79:54:26:29:
                    73:3c:ac:ab:5b:4c:25:d0:64:34:52:c5:25:e6:1f:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:E9:FD:D4:77:21:44:42:76:D2:27:46:94:7F:B1:4E:C3:64:DE
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:d6:3e:3d:0e:49:48:f3:65:59:81:82:8d:1d:f7:88:0f:
         f4:19:31:44:c5:8e:a6:0b:a7:b6:ac:11:18:4d:da:c1:50:95:
         5e:f9:05:4c:4b:47:67:48:1a:c9:39:31:2a:8e:46:9f:30:6c:
         4c:00:db:55:ee:ea:fb:d7:25:d0:9f:b8:c2:4f:0f:a9:ab:f9:
         02:38:ba:85:11:10:b7:69:b7:6b:62:b7:92:bf:f3:b1:d3:4a:
         16:c4:d4:60:10:e0:63:ae:a4:fe:5a:6b:f8:6c:d3:d8:ce:a6:
         21:05:9d:4b:19:c4:65:52:c1:bf:ba:3d:54:87:4d:ea:ad:a0:
         f7:53:d4:6b:36:a4:9c:21:e7:cd:7b:9f:39:21:5c:1b:a7:dc:
         3b:87:00:9d:54:b9:32:15:68:41:6c:14:18:58:57:26:60:ec:
         27:64:b5:b6:bf:70:a0:96:50:8a:f1:54:7d:d4:fe:8e:38:cb:
         3f:9e:88:e2:2a:c2:ad:42:40:65:ff:01:ab:97:ae:80:41:8d:
         12:6a:97:ef:66:b7:5b:21:b3:c8:65:8f:9d:71:3c:d9:8e:df:
         ac:25:2c:c4:46:17:ab:d3:bc:a1:c6:91:e9:cc:a7:0c:b6:a2:
         c8:a3:eb:a8:46:3c:40:e9:05:07:67:c5:52:19:5b:0a:b4:ff:
         63:2d:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:26 2024 by rpki-client on console-ams.rpki-client.org