Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File:                     WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier:          MHIVpBg+4NzXc+4SGJCZUWVv44hYdvj2E2giyxifTUw=
Subject key identifier:   94:6C:10:AB:EA:E5:EB:AB:CC:01:5F:A1:65:26:13:C1:02:17:F1:96
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer:       /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial:       019359530AC4A8E9CDEC0B6C68321B265CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 14:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:34 +0000
Files and hashes:         1: 0sP7TBnC3Diq6c23ctun0ofdEI0.roa (hash: yttEHfN1mSKO8NUgd9nMFrAwzDswWLCNaZ9jTYvwIvA=)
                          2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: Sp0yC1T/dlFOJO1TETGsd3MN8u891TUvcjLdvJtuSN4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:0a:c4:a8:e9:cd:ec:0b:6c:68:32:1b:26:5c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
        Validity
            Not Before: Nov 23 14:00:34 2024 GMT
            Not After : Nov 24 14:00:34 2024 GMT
        Subject: CN=946c10abeae5ebabcc015fa1652613c10217f196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:f5:22:e5:d2:0d:69:54:61:38:51:50:64:
                    f3:70:b4:01:e9:8a:f0:2a:eb:26:de:1f:29:8d:50:
                    09:93:62:b5:6a:b6:db:a6:ac:be:f0:d1:46:64:64:
                    8b:07:fe:1a:f4:27:6a:75:a8:dd:21:a2:c5:d6:64:
                    81:6d:2b:94:19:2a:01:b1:fc:fa:86:0a:b8:48:a4:
                    53:65:da:8a:91:10:5a:63:75:24:93:4f:f6:9c:a3:
                    49:f4:30:fe:8d:a4:b9:4b:e4:cf:97:0e:52:a9:3b:
                    c0:d4:ff:5c:d7:1c:6d:27:88:79:da:9a:69:bd:ce:
                    a1:57:1b:b5:11:74:a2:38:61:84:e5:d6:40:8e:34:
                    0c:6a:fd:24:53:73:76:36:b2:38:89:83:c1:db:72:
                    e9:65:03:7c:bc:03:bd:2b:3d:c7:b9:4f:ab:f0:b7:
                    5b:71:84:fc:ab:b4:65:6f:b3:ba:dd:3e:ce:8c:08:
                    8a:57:53:22:7d:c0:3a:7b:27:41:09:03:56:76:36:
                    d8:54:79:28:94:6c:ae:0a:8b:bf:4a:d8:22:64:77:
                    dc:49:25:56:ae:d8:0f:54:aa:69:f9:73:bf:c2:bb:
                    37:45:0b:ac:9d:21:c4:68:a2:8d:ad:81:1e:31:a8:
                    fa:57:22:b9:cd:59:0e:76:a7:6d:d6:29:3b:17:b8:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:10:AB:EA:E5:EB:AB:CC:01:5F:A1:65:26:13:C1:02:17:F1:96
            X509v3 Authority Key Identifier:
                keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:08:34:b0:ec:14:e0:c1:be:7d:e2:67:0e:e9:9f:18:9c:9b:
         86:6d:68:4b:44:3f:65:57:1c:60:52:c5:ef:d0:82:77:b6:6a:
         57:bc:7c:3c:43:1a:30:8c:8c:ef:91:5f:26:d2:56:34:ac:56:
         18:4a:76:7a:6d:50:e9:14:12:cc:6a:02:08:1e:9d:70:91:a4:
         06:cb:73:b5:5c:39:d5:b0:3b:5c:44:c4:ed:e4:9e:44:9f:df:
         c7:da:9f:13:8a:88:b6:1a:ae:5d:5e:6e:12:4b:0c:29:00:c3:
         5a:d9:06:8b:37:ec:4a:28:c9:98:d8:8e:1f:a2:27:0b:50:30:
         02:38:93:ea:45:6c:69:b2:ec:c6:33:3d:3b:fe:99:54:8c:47:
         d2:ce:01:48:cb:0e:3d:0a:7c:39:43:15:5c:f7:6d:99:e1:b6:
         94:49:95:2d:d1:17:4b:14:3e:5c:8e:fb:bb:4f:47:15:55:13:
         eb:9c:6a:92:21:1a:97:32:86:f9:9b:5c:cb:a3:02:99:31:c4:
         ad:85:63:ca:7b:a1:4b:92:50:45:68:ab:f8:b0:33:61:0a:24:
         d3:4b:89:0d:c8:0b:b1:db:3c:60:bb:f2:50:12:27:00:00:a6:
         06:1f:b9:8e:82:81:d3:bc:4b:6d:bd:fb:fc:fc:56:d0:bc:eb:
         04:ee:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:45 2024 by rpki-client on console-ams.rpki-client.org