Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File:                     wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier:          YCqd2SVrpOcCp2WbXCULjoCviTzt3qaCHWDJopT4C1Y=
Subject key identifier:   90:3A:79:35:D5:D1:05:5D:91:B0:15:68:82:EC:4E:93:13:02:E3:C1
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer:       /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial:       0194C42C598029AF2263B5D9D284D7A95C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number:          1430
Signing time:             Sun 02 Feb 2025 01:00:28 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:28 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:28 +0000
Files and hashes:         1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
                          2: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
                          3: suBVFY86lLLNw-jyyfI-FYfhvNA.roa (hash: 81WEqdV7PNWoCGw6D45g6WF3xPhoMsG1WXe8GERJGtA=)
                          4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
                          5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: mG0PixA66jTPUmjvxmz+0fvH+elnyNHp7kmbpej0Gcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:59:80:29:af:22:63:b5:d9:d2:84:d7:a9:5c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
        Validity
            Not Before: Feb  2 01:00:28 2025 GMT
            Not After : Feb  3 01:00:28 2025 GMT
        Subject: CN=903a7935d5d1055d91b0156882ec4e931302e3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:e1:63:0c:5a:03:5a:e4:fa:71:12:eb:c3:
                    31:18:19:e1:7a:3d:ee:ab:85:3a:ee:dd:e3:13:6e:
                    fb:2c:82:b5:b0:0f:81:d3:9d:e4:9c:43:e1:4e:8d:
                    50:5d:7e:56:4b:e4:c9:8b:e3:46:e2:f5:c4:9b:39:
                    64:09:90:04:69:13:50:29:cf:97:9b:33:b7:45:5c:
                    e1:77:32:d2:d6:a2:c3:0d:ed:51:04:90:09:3e:56:
                    70:2f:b1:4b:06:d6:53:93:9a:dd:be:e7:af:95:73:
                    4d:76:f0:85:99:54:22:f2:0d:de:97:7b:fc:b6:4a:
                    4b:37:61:d8:4b:12:15:83:74:76:ba:32:d7:fa:de:
                    96:8b:24:96:9f:14:3e:65:17:36:2b:0b:60:f7:bb:
                    9a:70:49:6b:b5:d4:e2:bb:6b:0d:8a:79:2c:54:23:
                    fd:a4:77:21:03:f4:32:94:d4:78:8f:65:66:80:19:
                    70:b7:5a:a8:5f:29:fb:8c:46:a4:78:fb:5e:e3:ab:
                    29:53:1a:32:a6:bb:a6:1c:6d:77:ca:a2:1f:29:de:
                    fb:94:52:94:0f:ba:b1:d7:72:16:f7:67:1d:21:ee:
                    79:f5:10:98:ef:6a:55:76:d9:6b:a2:42:5a:27:1c:
                    4c:6d:79:a8:92:a3:05:36:7e:6b:ff:87:ef:31:b4:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:79:35:D5:D1:05:5D:91:B0:15:68:82:EC:4E:93:13:02:E3:C1
            X509v3 Authority Key Identifier:
                keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:f1:8d:41:3f:4e:27:ad:d3:b8:0a:e2:11:70:4b:0a:5d:
         34:d4:d3:6b:e5:a1:09:c7:46:26:09:46:e9:00:92:43:38:77:
         4d:37:18:aa:89:ac:24:9a:d5:ab:7a:99:73:2c:0f:46:95:7f:
         75:a5:fd:68:98:f1:f3:d6:e4:8f:3e:53:10:57:24:1e:55:94:
         fc:22:6c:ca:0d:32:27:b2:76:2e:ee:40:bb:59:0f:4c:63:0d:
         2d:31:e1:54:4f:4f:8b:6f:cb:f3:ea:cb:2a:de:ab:ef:67:94:
         7b:78:68:34:2e:d6:b5:d2:b8:3d:aa:9d:f1:3f:85:5b:0e:83:
         a1:56:82:79:00:8f:48:40:9f:76:1c:f9:58:68:b6:96:a3:c7:
         d7:21:64:52:6b:f8:2b:59:64:6f:3f:4c:85:87:0b:57:d0:1a:
         c5:95:46:8a:3e:57:0e:65:36:79:cd:b9:d4:34:fa:89:1d:e9:
         55:df:7e:ed:85:10:62:91:1c:21:45:56:35:e9:fd:da:73:17:
         46:78:87:55:aa:b3:1c:ed:61:41:31:91:76:6e:20:67:4e:33:
         fe:8b:52:df:48:54:df:64:80:ce:fa:0b:c3:f3:f3:e2:fd:87:
         17:8c:1a:e5:86:cf:d6:65:04:1c:d0:79:26:ff:d5:94:3a:5c:
         e3:84:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:46:13 2025 by rpki-client