Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
File:                     WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json)
Hash identifier:          aQBp6pD7nEcqYYTNCVyuCbXMfT+kui5Elz0m/i37TD8=
Subject key identifier:   50:BE:EE:6A:DE:D8:EE:B6:3A:F2:FD:5A:5B:DC:64:5E:D1:52:F0:6B
Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Certificate issuer:       /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Certificate serial:       0193549BA7A27975CFC9F4E9F3AB8725A0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
Manifest number:          086C
Signing time:             Fri 22 Nov 2024 16:01:47 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:47 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:47 +0000
Files and hashes:         1: 2LxCXwcdBvnOAshJGnPWvVFHma0.roa (hash: sJcMIIVWJakaN7to4ADKrt8Ln9TEBgGy4sCYmtLKqPY=)
                          2: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: 5HqFAPdTp7cQDqkfppRFRq3LpHOMfamZQoKN09MJdNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:a7:a2:79:75:cf:c9:f4:e9:f3:ab:87:25:a0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
        Validity
            Not Before: Nov 22 16:01:47 2024 GMT
            Not After : Nov 23 16:01:47 2024 GMT
        Subject: CN=50beee6aded8eeb63af2fd5a5bdc645ed152f06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:1b:5e:aa:f5:1f:35:5c:39:fc:1e:b5:e7:
                    49:f8:bc:56:75:48:4f:48:6a:27:57:82:3f:f5:41:
                    4a:8c:26:dc:20:ef:71:3f:fe:da:dd:d3:b7:c3:65:
                    66:1b:65:c7:dd:bf:43:f4:6b:e3:ed:50:86:e9:be:
                    8f:3a:3d:08:27:c9:07:ee:e7:52:8d:8d:25:ac:4e:
                    bb:74:71:3d:d2:49:c0:64:2f:72:3e:f5:99:2c:28:
                    b1:4f:bc:f1:70:39:88:d3:0c:77:27:6e:94:ea:d8:
                    cc:93:25:20:40:83:32:d6:b4:a3:1d:f2:c3:36:04:
                    57:94:d7:2a:63:b3:c5:2b:6b:21:1d:14:43:92:2c:
                    3b:dc:48:bd:c2:92:2c:5d:57:e6:b1:b2:ea:2e:d2:
                    49:ed:09:43:86:90:01:ae:a4:81:9e:58:c6:42:0f:
                    a0:36:d6:5f:30:bb:46:12:cf:f0:32:9d:cf:58:7a:
                    54:87:84:b8:3c:30:35:b2:67:a3:4e:f4:56:83:a0:
                    03:6f:9b:e6:7d:d4:2e:6d:8a:09:07:85:67:01:4b:
                    d6:7a:51:10:c3:6d:75:de:63:8a:61:3c:fc:54:93:
                    e9:d1:ad:cf:4d:df:71:57:67:e9:e4:1a:a1:44:85:
                    3b:34:41:79:1b:c6:d8:ff:df:9b:3c:9a:e9:0c:02:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:EE:6A:DE:D8:EE:B6:3A:F2:FD:5A:5B:DC:64:5E:D1:52:F0:6B
            X509v3 Authority Key Identifier:
                keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f9:77:09:00:7d:3e:44:69:13:95:46:57:94:a4:09:8b:16:
         7d:96:17:ac:2a:f8:8d:a9:32:6e:b6:3c:29:75:fc:eb:3b:ae:
         a3:ee:79:ca:b2:ea:91:9c:37:a1:ba:8b:f0:15:ae:11:be:74:
         61:1c:7b:8b:7f:56:69:e2:f9:42:71:92:0d:43:23:3a:3c:c8:
         5b:55:fb:e8:1b:e5:30:ce:fd:ef:d0:3e:b4:5f:af:61:ef:4a:
         65:e0:96:99:f7:5f:c9:40:24:c4:6b:bd:80:76:2e:ae:17:91:
         fb:cc:a2:b0:fb:c3:f5:f4:9d:b9:f4:83:ea:af:2f:d0:51:1e:
         a7:9d:49:9a:c5:9a:d3:0e:81:4a:24:e5:10:7e:1d:f5:c1:0f:
         47:48:2e:dc:6a:88:b0:99:ec:27:15:56:4c:4b:f5:d9:eb:68:
         6f:0a:07:31:8c:07:ef:e5:44:8a:e7:22:ef:a6:64:41:1f:59:
         f0:12:a4:73:94:94:69:f3:7b:6a:d8:b6:d5:83:54:34:68:2e:
         b0:6f:43:a0:58:4a:db:9c:4d:af:9d:42:a8:46:a6:39:35:91:
         39:3f:3c:60:ea:13:b9:bf:0a:dc:4a:37:d1:9b:b7:58:1b:62:
         55:7b:18:00:2e:48:14:6c:11:01:d1:21:d3:45:6c:85:97:3c:
         c0:ee:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:09 2024 by rpki-client on console-ams.rpki-client.org