Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File:                     WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier:          X00RvlBtM3/5wU2mCPG810YOCoY1bNRnIgYaPy/APOc=
Subject key identifier:   66:ED:A4:72:39:4D:1D:77:F9:CD:40:50:8F:A0:AA:7B:E6:CE:B6:9E
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer:       /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial:       0193688F7EADB5A827BE1EDECA8E5EB04072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number:          0B19
Signing time:             Tue 26 Nov 2024 13:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:54 +0000
Files and hashes:         1: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: AYVxfQfs2wuHdzjfN030kqrM5nx9QF+3kjmzklFdEdI=)
                          2: rYeplhaP-bM1vtML5OdP2mTR4zM.roa (hash: dcrS48E/evh0i243g2qqBxAi+DhSRS+xTPRC0JW9u44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:7e:ad:b5:a8:27:be:1e:de:ca:8e:5e:b0:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
        Validity
            Not Before: Nov 26 13:00:54 2024 GMT
            Not After : Nov 27 13:00:54 2024 GMT
        Subject: CN=66eda472394d1d77f9cd40508fa0aa7be6ceb69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:06:08:25:c8:ab:fb:37:42:54:f9:95:ab:
                    99:41:87:b3:42:84:dd:20:55:4c:da:82:74:25:25:
                    32:e1:af:1e:7f:4a:12:ac:fa:c5:96:dc:63:9c:31:
                    5b:b4:dc:95:18:1b:d9:24:a7:37:c3:c7:85:90:c9:
                    fa:ce:e5:4b:49:3d:d5:a8:27:90:31:9b:75:07:04:
                    eb:61:b0:ac:15:6f:f4:b2:49:76:9c:49:56:e2:ad:
                    1f:c7:0a:5f:cb:de:59:21:30:ee:f4:3c:83:95:31:
                    7d:0f:a9:2c:7a:77:5f:17:67:86:73:81:f0:28:8c:
                    ce:b0:8d:aa:08:d6:f4:fd:fb:97:a5:ff:31:1a:d1:
                    d9:13:37:46:75:e4:3e:c4:ce:ad:64:2f:29:3a:aa:
                    ee:bc:40:4f:de:49:fd:da:f3:c8:d3:57:48:94:92:
                    d7:69:05:b0:1c:37:ee:6b:94:a3:04:21:74:0a:44:
                    ab:17:df:c7:ed:78:86:b1:39:0b:d9:c2:70:82:d2:
                    0f:4b:fd:d3:0f:73:7f:46:98:31:4c:bc:a9:4d:c6:
                    a8:40:69:09:79:61:3c:d4:74:90:3f:e2:5d:1f:c4:
                    5d:8b:37:9f:85:9c:66:50:5e:2e:6b:e4:d3:58:ff:
                    06:de:c0:ac:6f:0f:03:0d:d4:1c:c9:3d:b6:21:ca:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:A4:72:39:4D:1D:77:F9:CD:40:50:8F:A0:AA:7B:E6:CE:B6:9E
            X509v3 Authority Key Identifier:
                keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:91:41:58:0e:b8:a5:5b:91:44:c0:85:56:fb:6b:10:5e:
         80:a0:2c:00:48:04:d2:31:db:39:a1:0a:b9:8c:e1:2c:4f:77:
         0a:42:28:95:f6:17:da:4e:2f:14:71:25:ca:5d:f5:26:2b:0b:
         e1:be:88:0c:92:f1:66:a9:a9:18:bc:a9:9f:f2:48:89:c6:75:
         e2:d9:ea:fc:05:3e:d1:c8:aa:9f:37:95:ab:91:60:e2:08:c3:
         79:fc:2e:c2:ab:65:1b:3a:55:fd:f4:3e:16:32:26:97:af:9f:
         26:59:3f:f6:c5:12:e2:0a:2f:e2:c7:7d:50:ae:fa:5a:21:b5:
         e7:40:55:30:0d:a2:5e:4d:b9:e1:53:9c:50:eb:2f:0a:39:29:
         53:c7:cf:df:70:d9:47:ad:6b:08:53:6a:53:33:0f:8f:3f:1c:
         fe:76:58:9a:22:4f:f0:d8:8a:cc:b3:6d:9b:b9:f9:ad:29:c8:
         c2:b4:98:ca:7b:32:e8:98:0f:b8:1d:66:2d:e9:03:f0:05:8b:
         e4:46:ad:84:3a:04:1f:fb:4d:d5:78:0b:95:64:8e:2b:16:4d:
         62:14:a6:3a:32:da:9a:55:1a:06:60:31:94:1b:2d:9d:8b:b2:
         ca:36:4d:10:51:2d:7c:d9:80:bb:73:b8:12:79:66:c7:6b:8e:
         a9:b1:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:15 2024 by rpki-client on console-ams.rpki-client.org