Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File:                     WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier:          qb8Lkj0HW/sy93A9XHV15Wx54phLjYLwwVGELQyWhiI=
Subject key identifier:   B8:88:AA:BF:2D:01:1B:9C:A5:A4:2D:76:5E:79:20:94:19:04:75:4F
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer:       /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial:       0193549B72BDCB54914B9CB9E9A0ABAB75FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number:          1303
Signing time:             Fri 22 Nov 2024 16:01:33 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:33 +0000
Files and hashes:         1: 9L8cLTRV5dWqtEZxxMwC6cIxFbw.roa (hash: uOst1jEvtvR4Fw1CNdIOPHqrP6FjR/aTU5pBzUC4ykI=)
                          2: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: BVoTopgfGDXtYksr/3I0pofhFUb58WpyXj1XTkFtM1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:72:bd:cb:54:91:4b:9c:b9:e9:a0:ab:ab:75:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
        Validity
            Not Before: Nov 22 16:01:33 2024 GMT
            Not After : Nov 23 16:01:33 2024 GMT
        Subject: CN=b888aabf2d011b9ca5a42d765e7920941904754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:9b:9c:0a:f7:78:21:e7:50:af:59:03:09:
                    2e:cb:b3:19:ad:be:b3:1a:75:cf:aa:b4:0f:28:09:
                    20:92:80:d2:13:4d:49:aa:06:65:b7:c0:fe:0d:83:
                    3b:b1:d9:33:f4:cf:8d:95:0a:dd:9b:b4:ac:52:c7:
                    42:72:0a:55:07:51:a5:2b:6f:5d:1a:62:3d:f4:97:
                    6a:16:c2:d4:8f:70:70:e3:7e:ec:23:1e:37:2c:b2:
                    1a:17:41:eb:d8:c5:59:99:d0:9a:58:f7:19:9f:03:
                    f6:ef:c2:25:b2:24:92:a8:b8:a0:0b:22:1f:a9:68:
                    32:e6:0b:d9:33:5b:ef:ef:4f:03:3f:42:90:f6:f1:
                    97:d4:15:56:13:19:72:d0:21:a4:af:42:6a:71:3b:
                    ee:03:97:30:59:89:61:99:4b:df:b6:15:12:ca:ff:
                    f6:9d:e3:f9:e3:03:08:22:9e:7c:c7:df:47:46:73:
                    0a:26:d0:f7:e9:af:10:50:4d:4f:e3:bf:b0:9f:12:
                    87:ba:e0:5c:02:c9:c9:63:c0:15:59:8a:b6:ff:17:
                    9f:36:47:9a:f1:2f:96:f2:10:c3:b7:bc:b5:3d:da:
                    8b:f8:c5:d5:58:66:a6:9d:30:e0:a5:99:72:6a:52:
                    06:c0:6a:86:56:6f:11:f0:af:4b:10:59:7b:a0:bb:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:88:AA:BF:2D:01:1B:9C:A5:A4:2D:76:5E:79:20:94:19:04:75:4F
            X509v3 Authority Key Identifier:
                keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:c2:19:c4:f5:86:e8:8a:3e:10:4e:8f:e7:0d:ad:2b:ab:
         7c:a8:9d:14:83:24:80:7a:13:59:e1:b9:2a:9c:d9:45:74:56:
         ba:be:a7:98:ca:bd:24:ac:b7:e7:cc:ee:7e:cc:04:de:e9:5c:
         eb:05:13:fa:b6:2d:67:11:ba:91:b4:07:a9:d0:15:b4:ec:47:
         37:f5:3f:d8:cd:49:a1:cb:0a:ba:19:50:22:95:b5:72:c1:05:
         c5:b6:39:32:ef:a6:fa:72:54:d4:a1:fa:a1:d6:2c:37:e0:5b:
         26:50:19:94:62:f7:c7:74:77:10:29:84:3e:d7:f9:14:b4:61:
         bf:1b:7f:1d:d1:26:59:d0:7d:0b:bb:77:d2:d7:06:0f:61:7c:
         cc:ad:a6:31:01:e3:fb:7c:ee:ee:10:d7:47:d3:7e:8e:14:0a:
         69:4d:87:38:1b:ad:ee:3a:df:33:52:f5:82:1d:bd:ad:da:20:
         42:8d:97:07:0f:0c:21:b9:de:e3:b6:41:a7:cf:e3:07:5f:d9:
         f5:e6:f1:95:90:fa:18:4d:44:75:6e:d4:03:0a:1e:29:4f:e1:
         66:f1:3e:21:4b:28:30:13:9c:4b:d2:44:12:86:d3:63:66:ea:
         30:26:7f:c9:be:46:52:44:9f:b4:ab:7f:df:e7:f2:25:16:21:
         59:58:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:13 2024 by rpki-client on console-fra.rpki-client.org