Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier:          OhIVYL9byYeHKJ781GWDputOjjqvlXyP+W05OGB9B8U=
Subject key identifier:   B5:E7:B4:E3:F0:57:4D:43:E7:EF:DB:7F:61:65:47:4E:F0:34:69:A2
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer:       /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial:       019353BEFA3D68D62022D7024E37D0901D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 12:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:45 +0000
Files and hashes:         1: OvijQP_hjdyZtqhsxeLQdpmeLFQ.roa (hash: MxipALCRw7xpKVsd2o9jGrHon4SO5aiAJLEiyyyuWu4=)
                          2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: Y/AmUy1kHo6YWUKkVuS0tvIctatK0cC+bM/kN4t0Ufw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:fa:3d:68:d6:20:22:d7:02:4e:37:d0:90:1d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Validity
            Not Before: Nov 22 12:00:45 2024 GMT
            Not After : Nov 23 12:00:45 2024 GMT
        Subject: CN=b5e7b4e3f0574d43e7efdb7f6165474ef03469a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:11:7f:a4:4d:e6:67:a6:2c:a7:fe:98:4c:
                    f0:5a:a1:79:7b:ac:4b:19:6a:3e:3b:a9:40:8f:2b:
                    18:2a:53:3c:75:86:75:22:6d:3d:77:62:e6:f3:5b:
                    6e:3f:43:d4:cd:be:1e:64:25:9b:75:48:af:50:c6:
                    9c:04:b5:da:93:af:16:90:46:cd:9a:ff:de:36:b5:
                    9e:75:db:c6:01:a0:51:20:8c:2e:34:a6:08:9c:f2:
                    63:a8:a0:f0:c5:cf:9c:b3:c3:b8:57:27:a5:2c:ba:
                    f4:46:97:d3:80:ec:12:82:67:98:23:9d:11:d7:81:
                    fc:78:33:1a:fd:c6:c7:f7:8b:52:64:5f:ac:26:c8:
                    08:f0:e2:86:9a:65:24:34:be:32:f8:16:ae:71:7a:
                    80:63:bb:60:4c:c8:d6:55:2b:d3:a3:ca:62:36:0b:
                    c2:f2:94:e9:00:b4:5e:28:06:5f:41:8c:f7:a7:5d:
                    33:11:b8:9e:0e:d5:8c:fa:a5:ec:16:3d:95:60:5a:
                    65:bd:20:23:4f:71:35:45:4a:3f:eb:5f:aa:5b:e6:
                    ec:4a:77:6a:a7:b7:f3:ef:6b:40:9c:05:00:75:91:
                    8c:62:c3:b4:1b:37:27:6a:93:c4:1a:1b:80:7e:8a:
                    76:43:ae:54:c0:2a:33:aa:ed:e5:d4:1e:62:a3:0e:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:B4:E3:F0:57:4D:43:E7:EF:DB:7F:61:65:47:4E:F0:34:69:A2
            X509v3 Authority Key Identifier:
                keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:6c:98:62:08:16:12:b5:65:8f:3e:42:47:6b:49:3e:16:
         00:17:40:26:3d:f2:5c:79:be:f3:26:ac:4d:c0:78:07:d3:88:
         dc:6a:a2:ca:6b:93:3f:be:13:5f:02:f7:dd:9d:76:7e:10:b3:
         20:ce:43:dc:22:57:c0:c3:42:ab:c2:b8:eb:20:86:83:61:c2:
         d5:dd:77:b8:4a:06:ac:33:12:80:60:42:04:58:78:d8:39:69:
         e6:f6:e6:e4:ec:00:b8:e2:67:f5:33:87:23:3d:36:aa:18:a4:
         e1:b5:25:79:d3:23:5e:cd:cf:a3:80:d6:fb:a0:8e:00:61:b8:
         54:b6:d7:b1:7d:01:1a:73:de:d8:cc:bc:d1:25:85:4a:60:b2:
         11:7e:2d:08:c8:26:31:b2:cb:13:80:eb:67:b2:e1:dd:14:f6:
         29:6d:8d:46:4c:e6:9d:4e:29:06:32:c4:1b:ad:5d:e5:c6:76:
         bc:59:21:2f:eb:00:95:e4:fc:7e:69:39:aa:a2:fc:d6:68:c3:
         58:6b:b0:78:4a:73:14:12:44:0d:e7:84:a4:d3:c6:b3:3f:04:
         f5:73:0d:f6:5d:f1:57:62:ed:5c:82:7d:f0:51:40:52:f3:48:
         81:fa:5d:78:33:59:68:da:97:52:69:bd:84:ac:1f:e7:3a:38:
         86:d8:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:21 2024 by rpki-client on console-fra.rpki-client.org