Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File:                     w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier:          43FnLb8HYuGGi2Gu5KzL2Ce20s0TJXCG3jY2JKk42Yw=
Subject key identifier:   BC:37:53:CB:62:44:11:52:9A:B9:DD:33:09:3F:24:09:9E:77:EA:F2
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       0193512BE7241BD2D8B7E1F60CFFB612EC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number:          1390
Signing time:             Fri 22 Nov 2024 00:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:51 +0000
Files and hashes:         1: 1-JNNS1mFQGJm-BQGwLz1QYiUOPI.roa (hash: FqkUvbZ2H4aVsC+aHL6fEVdU/yb1gke5M2ubrf/E0ms=)
                          2: 24xQZ5GeEZicZ6eO1GoHSOOFrSY.roa (hash: TvM/klG8BAVwuBv2o4xlqafjXwI8pF+DqVXOZFHCJac=)
                          3: 3t22je3xmIgT6ua65kKXd-0fdJ0.roa (hash: /AaSKN0NagoZpu+P4pUPyTk6lpVh7MDyMxksnm1VBeI=)
                          4: FADEUj2gGzec8Dobr-HLREFt3do.roa (hash: X18qYtf4+FUmCGfG5qXUe2X1A800bfZKDj58yFm12sU=)
                          5: GuUirRr9ro-L5RKFTZKdMaDKgns.roa (hash: NvRMMLXBvbp7pw+Uz90pD+5NQdj8A+dO10OEOgDxb80=)
                          6: IOBd2POXbGnn5KU_U8FAlEDub08.roa (hash: ZGml1aGLYoTV7HuHDmrMJx1RrHXzZOljdZ3jBhcwWzo=)
                          7: N8BTmdBlB3czrZvrkyKXhrBwJGA.roa (hash: pmq1cd4SHzw3WR9dfmIXuZmzLOEJWii7AGKdxUMzzqY=)
                          8: ZMg10GXfxSXg5NXgyYa77O2_lgk.roa (hash: 9w6ARyW9uWqBFH+xxDwJRwjZlBUsZF1f3K9rs9jsrIA=)
                          9: fIjDjyLqM8cF2KeOfOqKRaDUG4U.roa (hash: GfndL3IKaUV7l5CzQzQ1kyPGUXTqH2lmj13eHVTzGt4=)
                          10: jXWFdlYX9sPvuIWoV3uuCglqv90.roa (hash: Z8plA067F30P1XlqVItbP9PxmtkVT3bNFcg1I2JmYdI=)
                          11: jz_G-SDUB3fUsGSxejB8oG3IHsA.roa (hash: /yvnPrWZ/xUFCipmEIjdNkjb3BB6SImpGVawDqYXO6M=)
                          12: n80W8K5oVE875H00lB0iswOXEFE.roa (hash: VRcqvG2dEMG8Y3oR+5n5jVGNXEvZ6CJPL9ygPJdy7zM=)
                          13: ndVfyZHBxXkQK4Jm6WsVdF3mhTE.roa (hash: yudKwVTnVxtxZJoh+k9PXsE+/JIpc81XQgGoD6sk3Qk=)
                          14: tslTlWPTFt5jytEFAuJyzOdIgW0.roa (hash: rAMHdU8R4Ahz7drTq2Niq3XS2v3mNKPuMMsgdcGqsd0=)
                          15: uGvhE5BCsgC4I20aOScKI7_p_0E.roa (hash: Bn5g+NYuNXHiCGdmSnjhYpiRFIuKEeJY4+b0ZJMZBN4=)
                          16: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: AtnIx46MU0n63xlRgvev3xZCRy71tEDk4/6AyyULQHE=)
                          17: yTS4omUImA7JH_aCrNf_3NcsDb8.roa (hash: uaFK9p24IJms+WtrudH5Vw/qLH12vdS8MdEMtfdThiA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:e7:24:1b:d2:d8:b7:e1:f6:0c:ff:b6:12:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Nov 22 00:00:51 2024 GMT
            Not After : Nov 23 00:00:51 2024 GMT
        Subject: CN=bc3753cb624411529ab9dd33093f24099e77eaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:5c:7c:e0:17:e2:3a:17:fb:d8:56:8a:27:
                    d1:86:1a:1d:07:a2:cc:85:59:b6:4d:98:e9:04:62:
                    f0:dc:a3:8a:49:27:0d:70:68:3e:15:70:b3:03:2c:
                    ce:cf:59:fa:48:80:c1:47:d9:f8:7a:eb:f1:3f:8c:
                    6d:34:38:1b:c5:6f:27:b8:c3:9e:7e:b3:df:58:1b:
                    77:86:ff:22:5b:4b:d6:cf:ea:ed:b5:aa:8c:c5:f8:
                    97:c3:dd:5d:a9:28:4b:40:17:d6:c1:5d:6d:3b:7b:
                    33:b7:28:85:6e:f4:f9:58:08:7b:42:35:ad:0e:39:
                    32:de:a1:0e:71:aa:6f:96:f4:55:ac:32:9e:47:70:
                    c7:ad:f9:92:34:0f:8f:0e:8d:61:c5:fe:ee:d9:db:
                    61:4b:76:79:98:25:4c:1b:20:84:7f:48:dd:de:a6:
                    fa:fe:d6:f0:f9:be:cc:ef:18:aa:57:76:19:d3:96:
                    42:6c:73:21:f1:25:b7:e3:cd:c0:c9:a4:4d:dd:0c:
                    b8:ab:39:b7:68:12:b6:a2:b0:69:44:81:93:69:b4:
                    b0:eb:15:1e:dd:b4:bd:06:72:b6:aa:6a:e5:f4:38:
                    de:51:e7:8b:1f:55:5d:9a:06:59:5a:c3:d6:24:d9:
                    88:2c:cf:14:a4:20:78:f1:35:c3:fb:c0:5f:11:f6:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:37:53:CB:62:44:11:52:9A:B9:DD:33:09:3F:24:09:9E:77:EA:F2
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:80:5e:4f:f4:f3:88:f4:77:cc:7d:d8:42:dc:89:f6:0f:e7:
         5f:df:58:83:7d:9b:fc:e6:71:15:0e:ab:e0:c4:3e:a2:36:14:
         42:15:62:58:69:86:7f:1b:e7:e1:77:b5:56:09:b6:58:a7:88:
         70:bf:73:bc:1a:0e:20:78:54:64:12:93:7d:a4:ec:61:ad:95:
         78:d3:e0:9e:ec:c9:67:ef:23:e0:5d:e5:9a:45:54:d6:7f:3d:
         b8:2a:d7:3f:4d:d3:e6:e7:a1:66:02:39:e5:7a:37:1d:b6:71:
         6a:ff:24:bd:b1:44:c4:1d:4d:f1:2a:cf:95:c8:e3:8d:93:00:
         08:28:96:0e:0d:88:e1:6f:e7:20:cd:4a:15:d4:74:70:27:b2:
         48:1f:a1:64:7f:d1:7a:d1:54:0a:cc:d3:62:ba:db:60:06:90:
         65:9c:03:75:ac:a3:f3:10:26:bb:12:a5:7a:01:50:6a:76:bd:
         b5:2b:eb:4a:d4:94:54:a5:23:e7:51:4e:94:dd:b7:30:05:6b:
         dd:b5:69:9c:38:30:5f:c4:83:81:5c:f1:9e:65:37:0f:d8:6f:
         cb:a1:f9:2c:13:b0:46:0f:f1:4f:2e:a9:3c:24:f0:96:52:be:
         ad:b7:c9:7f:30:b3:93:2f:da:03:4d:ec:01:43:33:be:cd:b2:
         ec:e5:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:10 2024 by rpki-client on console-fra.rpki-client.org