Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File:                     WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier:          N0rRHoYjjc7KUJvHNoKt8FMVcD+bYsEbv3uNgJzj02k=
Subject key identifier:   49:A7:10:55:90:AB:F3:13:2E:E6:2E:4C:29:49:85:8F:C8:17:B4:D6
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer:       /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial:       01935689C2E82C06FA974C9428A6A6666A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number:          0AD7
Signing time:             Sat 23 Nov 2024 01:01:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:28 +0000
Files and hashes:         1: VMVnclwVco8xnDBY2RKFb7JtIJI.roa (hash: UbSx9ru3MPr6YvZKD0fF4/l79uTe7gOWptlTS6Wn+II=)
                          2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: ULNyq27pFZPjltR8YpkQaBcfMqHqdoyNg2mY8ZYOHFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c2:e8:2c:06:fa:97:4c:94:28:a6:a6:66:6a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
        Validity
            Not Before: Nov 23 01:01:28 2024 GMT
            Not After : Nov 24 01:01:28 2024 GMT
        Subject: CN=49a7105590abf3132ee62e4c2949858fc817b4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:5c:f2:56:d1:05:c6:7c:24:de:b3:16:1a:
                    3d:77:6f:09:4c:45:54:78:7b:3a:99:91:1d:f1:13:
                    2d:bb:d4:01:3c:67:17:25:36:d4:9b:cd:11:15:24:
                    d2:d0:df:d2:06:ca:df:e0:37:6d:fc:5b:b0:9b:28:
                    fc:51:57:d0:0e:d1:db:56:fe:9b:8a:72:1b:6f:d7:
                    a1:13:c0:1c:39:8c:28:b5:c2:ba:ce:c8:59:1b:b4:
                    1c:9f:79:0f:47:8a:9f:84:ac:36:dd:67:8d:0c:cc:
                    2f:4c:f8:57:17:fa:b2:c5:3e:c2:12:89:09:27:53:
                    d3:22:73:1d:26:bc:bf:67:ab:5e:6c:13:ff:f9:c6:
                    48:7b:bc:14:64:33:94:99:55:fb:cd:6d:5c:ef:4f:
                    e6:01:cd:4e:52:b3:cf:83:25:f3:ce:d4:18:23:a4:
                    6e:3c:c2:19:30:b1:43:0e:8c:a1:b5:f8:52:50:5c:
                    40:b1:99:37:52:ff:3d:34:78:91:b5:3f:c6:e2:c0:
                    5b:ed:9c:06:67:b3:b1:8f:ad:34:18:51:50:16:dd:
                    4c:64:f4:cb:a6:46:f1:2e:49:31:91:3e:92:10:14:
                    bf:f8:e2:59:2d:69:03:ab:e9:c2:ce:50:32:a3:29:
                    02:d3:07:81:58:f6:17:52:50:ab:ee:dc:da:94:c8:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:10:55:90:AB:F3:13:2E:E6:2E:4C:29:49:85:8F:C8:17:B4:D6
            X509v3 Authority Key Identifier:
                keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:ba:91:a2:dc:62:e2:72:2a:8f:96:a6:70:58:6d:1e:5e:
         33:3d:0f:f6:2d:21:47:e1:f4:e6:7d:f9:46:c5:d2:e0:95:20:
         a3:3b:d0:55:05:05:61:a9:53:a4:9a:db:fe:d9:1a:9c:3b:57:
         1c:1b:57:5f:e2:b8:44:78:24:c5:bf:aa:25:3f:e9:7e:41:5f:
         1d:c9:99:9d:86:99:1a:2c:40:b9:5b:5d:e3:ad:07:f7:2c:4a:
         20:ec:15:6e:06:63:30:20:c1:08:98:5f:1a:16:e7:c9:ba:70:
         5c:f6:0d:31:93:dc:a3:e6:97:8c:0b:d0:d1:4c:ea:a5:97:49:
         f1:da:f8:d8:c6:d0:5c:7e:5a:a9:c1:9c:56:77:cc:86:c5:1f:
         28:dd:0b:33:04:d2:44:98:57:86:a2:7e:08:38:d2:d5:15:7c:
         67:2c:fa:12:38:6c:c5:f1:89:d1:d3:ed:75:31:e2:5f:d4:b2:
         1a:f4:3d:bf:5f:9e:af:46:26:70:f3:31:8e:0e:47:16:79:0b:
         5a:99:9b:a4:66:5b:08:a1:01:46:4c:4f:eb:0f:fc:97:3b:f2:
         99:b4:e8:97:52:18:ce:8c:cf:43:56:91:cb:eb:04:89:9b:03:
         a1:1c:6d:0b:5e:5d:f1:5c:c8:9c:d1:5b:1f:98:6c:b5:3b:e9:
         dd:09:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:38 2024 by rpki-client on console-fra.rpki-client.org