Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File:                     WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier:          WcRWEdW12sjEOH6nshfo1VjmeJLGZWirRlo9iYuRW4k=
Subject key identifier:   DB:53:4F:D7:80:06:EA:E7:BE:25:87:74:7C:28:BB:11:C3:47:95:7A
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer:       /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial:       0194C49A714F476191DBEFCC1F420CBD752B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number:          51
Signing time:             Sun 02 Feb 2025 03:00:43 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:43 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:43 +0000
Files and hashes:         1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
                          2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: PkLX7MFS0/BT5U7Vk1j+sqrX0oE6839Pd+1SuOaqY0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:71:4f:47:61:91:db:ef:cc:1f:42:0c:bd:75:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
        Validity
            Not Before: Feb  2 03:00:43 2025 GMT
            Not After : Feb  3 03:00:43 2025 GMT
        Subject: CN=db534fd78006eae7be2587747c28bb11c347957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:14:6a:a1:39:fb:13:b2:a1:67:ab:6f:5d:
                    bf:75:48:d7:b1:b9:71:cd:af:fb:70:9e:b0:88:78:
                    41:10:13:bd:fb:cb:4e:5a:80:33:3a:3b:ef:e0:e9:
                    65:ae:a3:90:a2:14:f2:1f:95:4e:b3:4e:5c:a4:ae:
                    c1:1a:7f:f3:39:b9:f9:a7:2b:91:fb:4f:8e:0a:f5:
                    30:a6:98:6f:11:20:d3:35:94:ed:2b:c3:b2:9f:a4:
                    e8:73:3d:77:ac:43:4d:c6:9c:e3:38:40:81:58:07:
                    27:97:6d:fe:38:63:d8:f1:3b:f4:84:85:96:53:c1:
                    69:e5:b6:1d:f0:f8:15:2f:37:7e:65:b9:da:c3:a9:
                    74:f5:2a:28:9e:46:65:b8:f2:05:35:83:29:35:93:
                    db:f5:29:10:f1:43:76:21:6f:9a:39:9b:2f:85:5c:
                    29:38:2a:4b:5b:da:9d:4b:86:f6:84:cf:ae:d9:04:
                    82:02:91:bd:44:09:eb:10:cd:e8:f9:5f:03:71:ea:
                    ca:b8:d5:0e:14:04:eb:4b:fb:58:e9:5a:6b:33:c4:
                    d1:36:dd:aa:28:39:3c:3b:04:2f:b1:80:7f:8f:80:
                    2c:a8:a2:f5:80:1b:e1:07:33:82:e8:73:d2:ae:1c:
                    c6:6e:1d:ec:b4:b8:4e:a2:69:2f:f6:22:dd:b1:b2:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:4F:D7:80:06:EA:E7:BE:25:87:74:7C:28:BB:11:C3:47:95:7A
            X509v3 Authority Key Identifier:
                keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c4:a4:95:a4:33:4a:f8:6f:11:24:a0:26:9d:c7:42:4e:81:
         18:e4:9a:d4:dd:fa:63:03:df:0d:4f:54:b3:ae:ba:c6:fc:aa:
         91:0c:41:e8:8a:a8:a2:67:b2:48:e2:44:11:7c:a1:b1:a8:67:
         29:be:ef:51:cf:f2:fa:13:5a:dc:58:61:40:63:45:4c:66:97:
         f9:b5:f8:8c:8f:f7:b7:ac:8d:f1:7b:eb:29:86:eb:6e:32:18:
         5e:38:45:0f:8e:ea:bf:2b:59:a3:82:08:c5:2b:d3:b5:a4:8a:
         0f:45:9b:e1:6d:5a:9e:97:ac:0e:0e:c2:df:e5:42:d8:82:50:
         07:12:70:6b:69:10:16:c7:1d:37:8f:e1:ba:de:8e:18:46:b9:
         ac:c8:23:6f:65:0c:43:4b:9c:96:a9:b8:55:4b:0b:3a:19:c8:
         cf:ad:7d:dd:04:9b:33:37:1b:3c:e2:e1:4b:5d:97:fa:86:ac:
         7d:d1:e1:de:55:e3:dc:03:12:4a:e6:07:61:02:6c:c3:79:1b:
         38:30:32:b1:0e:78:3c:b6:ae:2b:48:d7:8d:86:ad:52:2d:c1:
         62:4b:b2:8a:22:00:66:b6:1e:69:16:59:dd:6b:b8:c3:e0:d2:
         62:ff:9d:8c:bb:6a:d7:83:0e:85:b8:9b:6e:ff:4f:7c:7d:e2:
         91:a4:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:36 2025 by rpki-client