Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          PxEZrJINjUN1sTFEt/yqE32gFXiuwTfN2+xn/btjcrA=
Subject key identifier:   D1:73:31:C1:23:9A:21:0D:25:F0:7C:53:9B:A7:E3:8F:68:97:02:1A
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       01935350D6EA17CF92A781FE29EA48894556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 10:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:27 +0000
Files and hashes:         1: BDV5h-uf036rT8MfxntggzJDzk8.roa (hash: AsJGU1Ra6YyFB2JUcIMbGcIplRsSDPkmgO4Z5bENLHY=)
                          2: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: qhDkr4UtBcWEhGR2tr4QtWF3n/PDDP6jgCU5cAajotA=)
                          3: XwtTzgmbaOEUpqfGYf24GnyAEj0.roa (hash: p/9fWNiDnigkJrBOhUuTQkdrSzcw6vDImyW1B2N5V6E=)
                          4: YIHHz30ItkklVM8LB36TIFYDY_g.roa (hash: sya4R2cJ2GYcBVKd3/v69J/jKr2a1W3LQasvtjygfHI=)
                          5: Zn9ZH3VhlpDzwehpVSjoKX12jqs.roa (hash: qQZrbFJ2GH/O4uTXOU3tNNpdJ2brKmI6Aj36wzUGVrU=)
                          6: bZWRIOHLScv4G_o29PUjg9ElAJU.roa (hash: /3adZNaAEmI6/Dn1P0IxzbxypSyk06ylEQ7X7CVs0ng=)
                          7: xFHDl2EFXLlhwJW765m3wGHugoc.roa (hash: XKiKtBjnxIJjDalqTIJR/kKEV1HUg360dUwEk9ImX4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:d6:ea:17:cf:92:a7:81:fe:29:ea:48:89:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Nov 22 10:00:27 2024 GMT
            Not After : Nov 23 10:00:27 2024 GMT
        Subject: CN=d17331c1239a210d25f07c539ba7e38f6897021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5d:cb:64:e9:a1:b3:05:90:fe:55:c9:b3:4c:
                    37:84:2c:3c:8e:80:8d:f2:b4:30:16:db:e2:18:7f:
                    31:1b:a3:8a:34:37:11:a7:ea:4b:d5:db:7e:d6:bd:
                    d0:80:c4:ab:ca:fe:d1:cf:26:af:89:95:44:83:1d:
                    79:96:7c:81:db:16:35:a8:3f:c5:43:1f:8b:ae:12:
                    6b:c5:81:0d:03:06:88:51:a8:85:b5:c2:1b:98:48:
                    03:d6:6b:12:52:a2:a8:78:4b:be:99:87:16:ee:0d:
                    eb:64:f9:75:cf:e8:ec:ec:cf:04:7c:b4:55:b3:44:
                    00:c4:25:72:e1:86:31:3c:09:2d:88:56:7d:d8:a3:
                    18:4c:bc:41:da:5c:49:0a:64:a9:2f:16:34:d1:97:
                    be:0a:8e:92:13:55:fd:af:1b:65:8b:58:b2:6e:4f:
                    d7:80:40:47:20:ba:8a:4e:c0:97:39:a6:1e:9f:e7:
                    dc:6f:1d:65:a4:82:a9:23:c7:7c:a3:8c:18:0b:18:
                    aa:53:50:06:1a:76:b9:ad:bf:da:56:d0:0a:76:33:
                    81:e3:6d:e3:67:23:ae:56:d5:c9:f0:09:c6:5b:a8:
                    3c:61:0a:ca:6d:d1:7e:3a:b4:e4:35:2b:0b:38:23:
                    7f:49:41:b0:0f:09:47:30:14:bd:ea:ab:2f:dd:c8:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:73:31:C1:23:9A:21:0D:25:F0:7C:53:9B:A7:E3:8F:68:97:02:1A
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:19:29:73:17:8a:bf:c2:db:37:d7:bf:20:fa:e3:9c:ef:15:
         45:e9:77:1c:15:86:29:3e:1d:fb:ae:d4:d5:01:be:d6:96:29:
         2b:16:5f:aa:e8:77:db:cb:98:43:38:3d:60:ca:bf:71:61:8a:
         c0:1e:12:7f:10:32:64:57:28:9b:7f:c7:04:ed:28:fb:96:6f:
         e9:b1:22:b0:e3:f4:a7:a3:a3:62:a6:07:ab:f4:f0:c7:e0:7f:
         dd:ec:d2:e8:3a:43:58:57:5b:3d:3a:34:82:b9:3c:ed:d7:e9:
         80:d7:dc:c4:0f:7f:e9:3f:bf:7d:df:d0:14:e5:dc:76:70:c6:
         48:cf:c1:6c:78:7b:87:ac:5d:79:2c:c6:f1:b0:e7:32:2f:70:
         6a:15:63:ee:2c:7d:5a:70:96:de:79:b7:02:6e:65:e0:ed:7d:
         89:aa:94:ab:06:0b:d3:35:6c:ae:22:1d:d2:6a:07:cc:4a:14:
         c0:a3:2c:0f:86:e3:52:77:c6:4a:9f:25:0e:69:17:3f:65:5d:
         4d:d4:62:b9:3b:87:0a:09:c0:0d:eb:59:75:3e:b4:b3:37:d4:
         16:e3:57:c2:3c:84:39:22:92:51:8f:fa:a3:3a:b7:ad:7c:b8:
         2c:a0:db:42:3e:68:34:60:77:2a:4e:fd:e7:9a:dd:cc:5c:1a:
         09:f8:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:48:25 2024 by rpki-client on console-ams.rpki-client.org