Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          EL4LR7dub59uEyI+OhsJmHpc6zaUoofbO/BmClg86wI=
Subject key identifier:   03:0D:1D:83:BB:80:D4:46:91:09:08:17:D3:58:7D:38:A0:7F:2F:B6
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       0193591BBD38321BAA586FBF5BC8DD6386F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 13:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:10 +0000
Files and hashes:         1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: QNhcrkMYHm1IKzl3JNVQstrYKLnT4oCpbUk8tZLgXpY=)
                          2: dleRO-UOr7fB3SzgxQ9LgYosKGc.roa (hash: wuPTdddeNwUhbnfg9VIffONNFaGvOP1vidlx66sw7fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1b:bd:38:32:1b:aa:58:6f:bf:5b:c8:dd:63:86:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: Nov 23 13:00:10 2024 GMT
            Not After : Nov 24 13:00:10 2024 GMT
        Subject: CN=030d1d83bb80d44691090817d3587d38a07f2fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:00:a2:e6:b4:27:b7:8a:92:1b:fe:6f:ab:
                    71:3c:a7:2f:4d:3b:a9:25:42:58:8d:3e:20:2b:1b:
                    39:70:2f:25:00:0d:4b:30:0c:cc:6a:2c:70:c7:98:
                    fe:39:2d:f5:c9:69:4e:90:60:ab:f3:8e:ea:60:c1:
                    99:9d:45:7c:09:98:17:50:38:7c:f6:42:ea:30:ad:
                    f7:f3:62:15:05:cb:e8:1b:3a:f1:d2:dc:2a:53:5e:
                    c6:f5:68:43:fe:43:69:50:64:06:2b:bd:2d:39:87:
                    50:84:0d:ff:cf:5b:a0:80:da:2e:c7:fd:70:b4:56:
                    e7:69:9e:30:a5:09:92:3e:72:69:27:85:03:56:c7:
                    ad:00:14:66:77:62:15:c2:e6:29:4e:9b:44:85:57:
                    af:a7:d2:d9:30:22:7b:62:e2:67:22:56:4d:19:9b:
                    e6:68:92:4d:86:a2:44:c9:c9:e0:3d:f4:de:82:b5:
                    81:6c:95:71:99:b5:58:2c:eb:d0:57:0a:d4:63:9e:
                    27:4d:aa:9a:95:b5:31:cc:f7:20:79:a8:ae:c2:da:
                    80:ae:82:e9:6d:6d:ed:47:f8:00:42:41:78:53:db:
                    19:84:f6:86:3e:69:60:79:53:29:9e:5c:53:5e:d8:
                    c0:54:dc:9c:11:f3:51:3f:f2:e7:c7:ac:0c:da:8b:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:1D:83:BB:80:D4:46:91:09:08:17:D3:58:7D:38:A0:7F:2F:B6
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:8d:63:9a:f0:7e:76:85:29:48:43:bc:bc:2c:65:30:29:
         4c:ff:ce:6e:11:5f:ad:d3:b8:52:c1:ff:85:64:9c:cf:d0:cf:
         bb:d9:d9:04:ee:60:54:9f:e9:ee:25:06:28:6d:1e:e7:c5:5a:
         22:42:ad:b1:08:6c:14:ec:e1:eb:87:ad:e5:d4:57:41:89:2a:
         6e:e4:fe:6b:fb:d6:85:35:93:fb:fd:04:81:65:f2:58:74:60:
         7c:2e:40:c7:ba:36:75:6b:62:06:72:7c:71:c2:c4:57:f1:90:
         2b:c3:cb:91:01:c5:27:e6:9c:d0:e2:6f:6c:cc:a8:9a:86:65:
         bd:89:26:0b:4f:4a:81:73:8a:8f:08:29:e5:54:16:6b:2f:54:
         2b:75:00:c2:eb:b2:2a:85:35:a3:3c:b9:05:1b:1c:31:01:bd:
         a7:02:b9:b2:f5:f2:80:91:25:e8:f3:1a:28:2c:ab:08:40:2a:
         9e:9f:52:2d:b9:97:de:f7:1e:2f:20:0c:31:38:a2:41:b1:9e:
         8d:68:68:d3:81:71:b9:eb:a2:e9:9a:45:aa:22:34:59:fe:99:
         73:ac:72:97:54:4b:75:50:a8:2d:ba:c7:3c:0f:9b:b2:3c:e3:
         9a:9d:01:9d:9d:f4:db:3b:e3:e3:46:f2:7c:60:49:9d:5d:f2:
         40:e1:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:13 2024 by rpki-client on console-fra.rpki-client.org