Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
File:                     W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json)
Hash identifier:          Jh4VfBoOadhKzvtyuBXKvtPXnRtUpJ0QxpFsNQparws=
Subject key identifier:   F6:87:25:CF:FA:5A:93:71:39:41:2B:BB:C1:2E:0E:54:1B:BD:23:2B
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Certificate issuer:       /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial:       019366A0F05BC7962C8F3013DACE0CA287EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
Manifest number:          1125
Signing time:             Tue 26 Nov 2024 04:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 04:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 04:00:43 +0000
Files and hashes:         1: 461Y9y958Bhw06ciZIL7gvVuFCo.roa (hash: uSpmPyatT2O83fxnpJk/WL7j11hGSOALKAXWXjJ2LWY=)
                          2: Ea-2PpVyemMWUSMWl_MN4OAHkec.roa (hash: LhdUhBpuN2/TNi7211T2vWgD+Nvg8bgAGeU83uBvU18=)
                          3: K5lc8mA-Q9RCBFMuqkH6MerCQk8.roa (hash: J3MGBwjE/o6x/+swXfHsA6tEONovXjCPjx8y80n02qE=)
                          4: Mv59xKNTEcz_kBacgEr8Dukm5gc.roa (hash: bVI3RHcR810CapDxisC4oWPJVa7P1bY+2fBgP7eqTdU=)
                          5: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: C1vzaRYFe1/HWvHGSp+tJ8e3wx+0uHzJ5MrEtSFeM7s=)
                          6: oAo1i3SjL8sGDBcKEaMDCmhfjCo.roa (hash: phfX6oAPyn8QaMEC7gw9Xw3HNSS3NfkkZyoBif9UPBQ=)
                          7: xVR339HjNchpMW42lFtq9oDAnEo.roa (hash: zG9alpJSb9GpLK/CP8Wvb8JC1EjmtFKsTUAQwH6/URI=)
                          8: zQduic7zuFMWNQmMiOT-7nKczfQ.roa (hash: Tuf5LaMVmnsEt85wot1+bx5M05Fyr+O2MGqZUukwDGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:a0:f0:5b:c7:96:2c:8f:30:13:da:ce:0c:a2:87:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
        Validity
            Not Before: Nov 26 04:00:43 2024 GMT
            Not After : Nov 27 04:00:43 2024 GMT
        Subject: CN=f68725cffa5a937139412bbbc12e0e541bbd232b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:b5:ff:06:63:5a:1b:37:e1:52:30:91:a3:
                    05:c8:e3:ce:df:31:c9:75:0d:e9:86:1b:f4:b5:85:
                    eb:82:ed:dc:84:11:8a:a6:d4:36:24:3c:14:04:b8:
                    6f:0f:c9:3a:44:6e:91:9d:0a:3b:6e:49:54:4e:e1:
                    2f:ce:a9:4c:17:6f:b4:e9:3f:8b:ea:cb:2e:f1:75:
                    58:09:a9:7b:f8:18:71:b8:da:25:25:ba:ed:bd:e1:
                    b9:53:a7:ed:4e:a4:f5:75:c5:e1:20:0c:02:a6:d6:
                    26:5d:9d:5c:ea:29:36:f4:30:7e:84:d8:22:e2:45:
                    f4:b0:23:06:95:cc:0b:3d:91:a7:0d:38:5e:c8:59:
                    2b:f2:40:a9:45:64:ab:5d:16:19:9d:be:18:b9:a8:
                    66:67:8f:db:37:3d:42:2c:52:0d:c8:97:19:5d:84:
                    9d:db:8b:a5:b7:be:29:f8:15:06:04:5a:35:59:81:
                    1f:a1:12:03:60:09:dc:7a:1f:b7:53:bb:78:1d:ff:
                    52:32:16:1e:38:98:92:7f:12:d6:0a:ca:d6:93:62:
                    58:d4:b8:10:c6:15:0c:d1:8e:45:5e:f3:61:2b:18:
                    ba:a8:f3:c7:ad:95:98:1b:81:10:cc:11:51:c1:dc:
                    23:e4:05:9e:d7:45:30:51:4e:59:99:e9:3a:97:b1:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:87:25:CF:FA:5A:93:71:39:41:2B:BB:C1:2E:0E:54:1B:BD:23:2B
            X509v3 Authority Key Identifier:
                keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:af:21:26:47:5f:71:04:a9:ee:d6:59:39:d9:d9:54:66:28:
         f7:3d:18:50:36:48:ef:5c:60:b8:5e:eb:d2:ea:04:5d:41:96:
         68:19:86:f6:4b:f7:15:b9:4a:88:7d:f8:94:a4:1b:b7:6a:a9:
         c4:c0:0c:39:44:6e:3a:58:e8:2a:2a:95:4d:ba:e4:87:99:cf:
         2c:03:72:01:a5:3c:ca:29:f1:10:b9:c1:4d:b0:c9:a2:db:3a:
         f4:30:dc:20:11:b5:bb:0f:bf:1c:f1:b5:5c:4b:a0:0e:99:e4:
         04:a9:84:38:91:87:bd:7e:e9:fa:65:bd:79:d5:2a:07:c6:4b:
         02:a3:a1:d8:a7:74:6e:51:87:ff:01:cf:79:b1:a0:90:03:53:
         37:b3:57:29:a9:96:22:ae:9d:98:3f:bc:4c:b2:8e:97:9c:79:
         c6:e9:71:c1:57:b3:6f:6b:71:8f:f2:08:75:10:25:70:a6:e1:
         86:44:03:83:c0:cc:66:94:13:0c:5a:bf:ec:4f:2f:f8:1c:f5:
         6c:fa:6d:10:e4:1d:26:8d:05:71:75:0f:ad:6f:f3:40:69:c6:
         34:fa:05:87:0a:41:96:32:6c:da:fa:9c:0d:bb:2d:f8:59:32:
         81:6c:2f:a1:a1:1b:d8:fe:42:8b:bc:fc:1a:b4:52:dd:d9:21:
         86:38:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:26:01 2024 by rpki-client on console-fra.rpki-client.org