Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File:                     WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier:          5cxFOhiLShlSswAxuy+zocAqxn0tEpSvt/WZRKDZLJs=
Subject key identifier:   C3:40:AD:70:A9:DF:19:69:4A:62:4E:41:52:DB:83:D4:CE:49:FC:09
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer:       /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial:       01935764CCCE7AD105BB7152DF96947CF16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number:          107E
Signing time:             Sat 23 Nov 2024 05:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:44 +0000
Files and hashes:         1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: kv1j5EhUGfOK5VGM4ULRAheHWg06YgTyZZo6q1KtDmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:cc:ce:7a:d1:05:bb:71:52:df:96:94:7c:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
        Validity
            Not Before: Nov 23 05:00:44 2024 GMT
            Not After : Nov 24 05:00:44 2024 GMT
        Subject: CN=c340ad70a9df19694a624e4152db83d4ce49fc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:18:7a:d7:88:88:93:fa:75:12:2f:e3:6e:
                    fe:a3:9c:36:4f:55:3b:67:6d:c6:45:b5:50:9e:41:
                    b4:9b:c7:1c:6d:ec:d9:96:aa:0f:44:f8:b0:12:5e:
                    2f:59:38:bb:5a:c3:5b:02:74:60:9b:1a:21:2b:ac:
                    84:d8:bf:07:1f:c2:95:09:1c:7e:9a:85:2d:51:2b:
                    52:f7:9a:2b:46:d7:1a:7d:42:e6:ad:15:c4:ff:4d:
                    4c:6d:16:18:7c:51:9a:25:8c:31:4e:f7:76:dc:91:
                    df:f3:a9:46:3f:4a:94:b4:b5:cd:d3:e0:05:12:f4:
                    a2:aa:9c:e7:04:81:62:33:08:7f:1e:22:79:de:1c:
                    81:9e:be:f4:dc:19:2f:8f:32:75:71:70:af:dd:c0:
                    bd:6c:75:e5:47:d5:df:94:ff:31:84:ae:49:3d:d4:
                    5f:1e:e9:c6:44:84:14:f3:a4:59:1a:73:17:8f:e2:
                    3b:a4:92:90:39:c5:c7:73:49:8a:1c:26:85:a8:6b:
                    58:57:2d:bf:b5:ce:20:cb:0e:a8:97:b6:7e:c3:31:
                    19:83:42:05:2c:e2:65:a7:c4:64:4f:31:5f:b8:96:
                    75:f7:4c:5f:26:db:ce:cc:7a:fa:03:d9:1a:9e:d1:
                    8f:a3:76:b4:e9:30:50:f0:b8:d9:4f:ab:c1:82:08:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:AD:70:A9:DF:19:69:4A:62:4E:41:52:DB:83:D4:CE:49:FC:09
            X509v3 Authority Key Identifier:
                keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c9:87:b3:e6:68:da:b7:42:f7:24:d8:14:7d:a7:20:76:bd:
         11:2c:ec:a1:cf:30:05:00:de:d7:87:a7:8d:f6:68:8d:a8:27:
         db:0c:64:69:9c:43:e2:c0:d6:54:f9:10:59:68:cb:e3:71:15:
         fe:72:b0:2e:45:29:dd:4e:0a:8f:56:2c:80:f1:74:cb:0d:50:
         f8:21:0b:84:df:a7:62:98:59:6c:3b:b4:4e:a5:d6:54:78:55:
         8e:b3:87:af:59:38:87:c7:0e:25:44:75:eb:ad:e1:4b:85:c8:
         d0:25:af:21:bf:33:c0:09:d5:5c:43:31:3e:da:db:61:c5:92:
         53:24:6f:f4:f9:05:b1:61:85:19:61:17:40:b8:02:20:ab:a5:
         5c:93:64:ad:b9:9b:d0:1a:56:8d:ce:b5:0b:2a:aa:c7:5e:08:
         a3:53:15:c4:5a:37:c0:bf:99:0f:c9:34:7f:75:3b:cd:9a:23:
         f7:17:0e:a5:3e:ad:4e:5e:f7:6f:d6:31:7f:d0:22:cd:a4:86:
         6f:2b:1f:4c:90:7f:8b:34:37:b1:43:4a:15:1d:32:39:b8:de:
         02:f7:39:74:44:61:b3:ef:d3:eb:5e:d8:a7:63:76:10:1f:47:
         c9:1b:10:b2:fe:5a:a4:19:76:93:3c:df:85:1e:92:00:c2:cb:
         a0:90:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:18 2024 by rpki-client on console-ams.rpki-client.org