Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File:                     WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier:          hWpjvpyKXMxjW0tisRmFgIcnuyUdlOhopl+oTLJ59Sw=
Subject key identifier:   A5:84:A8:41:EE:18:82:B7:93:72:FE:F0:36:B3:54:03:97:E7:94:52
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer:       /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial:       01936B22B10C5F5681BB516F304AC1F4000B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 01:00:55 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:55 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:55 +0000
Files and hashes:         1: HtaLZmDxk1WGveejRAoZU0QIGd4.roa (hash: UjZO03M0qlsVGTgmyrS94D4YFxu11EWolCt3fYO0ww0=)
                          2: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: sB3fwBtpY+MHR9ISOPHgX6x7dndFhnJTpaAR7/bD1fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b1:0c:5f:56:81:bb:51:6f:30:4a:c1:f4:00:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
        Validity
            Not Before: Nov 27 01:00:55 2024 GMT
            Not After : Nov 28 01:00:55 2024 GMT
        Subject: CN=a584a841ee1882b79372fef036b3540397e79452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:4d:32:5f:c2:06:c9:f6:f7:fd:90:fe:28:
                    22:e4:7b:2f:ce:62:03:9f:1f:43:bc:81:86:d1:c2:
                    73:13:f5:12:00:30:26:d5:4c:6a:cc:b7:47:34:31:
                    ba:ec:5e:db:ad:50:23:ed:38:08:41:03:26:ab:d6:
                    e8:d7:48:68:1d:ec:cd:72:ec:d3:df:d8:3c:57:ba:
                    ef:f7:1c:2a:c2:0a:8a:be:78:49:df:08:a5:fd:bd:
                    c8:e3:b3:67:7b:ed:2f:00:56:e3:27:76:56:2a:36:
                    02:6e:27:b2:73:e8:e3:44:16:d5:b9:75:00:11:69:
                    d9:06:cd:24:bf:0e:74:6e:13:72:7f:63:bf:d7:e1:
                    2a:dc:2e:d5:b6:07:75:cc:e6:2b:ea:57:85:30:22:
                    ff:ec:af:71:86:43:b5:af:ed:db:49:3c:81:12:0e:
                    41:07:61:0f:0b:30:92:11:16:6d:64:04:18:03:c8:
                    31:41:d1:7c:17:bc:98:bf:cd:c5:17:a8:80:70:86:
                    e8:60:01:ec:3d:a7:25:01:65:85:58:75:7b:2d:2b:
                    19:19:61:96:f8:61:4e:57:49:84:05:5e:f2:a8:ac:
                    c8:6e:4c:cb:a6:8a:5d:d6:9d:e8:58:19:49:ed:91:
                    fd:57:0c:ff:80:1d:59:a1:cb:aa:5d:90:2b:3e:f9:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:A8:41:EE:18:82:B7:93:72:FE:F0:36:B3:54:03:97:E7:94:52
            X509v3 Authority Key Identifier:
                keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:7f:1c:c5:88:dd:b6:d4:a0:db:6e:ba:4e:11:b2:8d:16:
         e1:a5:bd:a3:1f:7a:75:a8:f8:7e:20:29:7a:2c:12:7d:aa:b2:
         4e:05:8f:1f:83:12:01:eb:b6:b8:f7:f6:1d:c1:91:e2:1b:64:
         1a:ca:07:46:32:60:1d:8d:c5:89:32:bd:43:0b:7a:c0:a8:1a:
         24:37:b0:b0:2a:a2:14:5f:e2:ec:e7:bb:7b:5e:f6:87:eb:bc:
         da:cd:09:bc:de:c4:f7:0c:51:04:d5:05:d7:fb:3c:81:a0:91:
         9c:af:03:18:d7:70:81:bb:73:8d:3e:b4:04:72:7d:73:67:27:
         05:46:17:7c:33:d2:c8:85:73:97:7a:73:89:6e:66:27:3f:04:
         b6:ea:d2:ab:cd:2a:f9:d8:04:ff:08:e7:f5:93:e0:fd:15:4d:
         cb:df:5d:9f:e2:81:22:ee:76:e2:76:e2:b7:06:a9:8b:ca:3a:
         94:e7:35:e7:54:62:bd:4b:4a:6c:04:a8:42:02:c3:d1:11:31:
         30:75:c8:c3:f4:98:16:85:c5:35:8b:a3:fe:82:b2:45:0d:52:
         ad:45:ec:84:3a:6c:79:97:ac:b1:09:d7:38:b7:6e:aa:62:b9:
         b3:34:0b:04:0d:30:2f:07:39:1b:eb:d3:d3:80:39:c8:eb:7c:
         59:0d:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:04 2024 by rpki-client on console-ams.rpki-client.org