Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
File:                     9dkBIB_wsbl-89GnLaQeGPAUV2I.mft (raw, json)
Hash identifier:          ONYlH0XzvP+W4jT8Udo0BCxzeBv+vHuBkBya1fek42E=
Subject key identifier:   A5:8F:3E:39:93:30:F8:9C:9F:55:93:01:DC:D1:4A:C4:C0:1F:74:98
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Certificate issuer:       /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial:       01936AB45470FE290F92F7E569035F419E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
Manifest number:          0CE5
Signing time:             Tue 26 Nov 2024 23:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:23 +0000
Files and hashes:         1: 3qKI9nW-WcVhSthRfLoDbYau-wg.roa (hash: IQIz54ysxyNeHETnk77/eb6Fbhqcrs840PAcQ4htnu4=)
                          2: 7GA7gfcJcKMV6DPJbgkSIM4NNEM.roa (hash: DlKDuKr0bxtqG4AsECFolpQk1l2nM98ja5ytgrborW4=)
                          3: 9dkBIB_wsbl-89GnLaQeGPAUV2I.crl (hash: cu/VXyi5x9g+OFlIhAI7PECs2KFGbxohdPGhoRQJInw=)
                          4: U_d7fSqTV3HdQhCWVPQcDw41Lcc.roa (hash: lAnmEX/AOkIsIh6DMre9126SVGD6rCZ/KiU7vyFqPvE=)
                          5: Yu5eIRc5bOaiLtU_-Eju-fVaJTk.roa (hash: e2VT9LS+drV4Yx78zv4D1CVdMTi/Q1x412xTajIq4TU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:54:70:fe:29:0f:92:f7:e5:69:03:5f:41:9e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
        Validity
            Not Before: Nov 26 23:00:23 2024 GMT
            Not After : Nov 27 23:00:23 2024 GMT
        Subject: CN=a58f3e399330f89c9f559301dcd14ac4c01f7498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:e8:3c:25:44:52:5c:38:61:ae:75:12:60:
                    15:00:fa:24:59:60:06:7b:db:cf:e1:2e:28:20:50:
                    ad:81:3e:7d:c6:15:e5:6c:5b:e6:14:e5:68:58:bc:
                    7d:88:f9:af:36:d4:63:ad:ca:29:2a:94:06:0d:ee:
                    c3:02:1f:c4:21:88:32:0d:21:ef:9f:c9:d8:68:ac:
                    6e:2f:f6:36:15:fe:40:8f:64:73:c8:83:49:2d:ff:
                    f8:fb:4f:cf:c6:fa:15:17:a3:59:f4:6f:81:19:2b:
                    a2:a5:67:cf:82:7e:4b:f1:78:f8:04:54:d0:f3:cb:
                    54:e9:15:18:95:7d:39:16:b8:e2:93:ff:8a:76:45:
                    99:99:5e:40:1a:c2:ea:e4:3f:e5:75:a6:49:33:fb:
                    54:ed:b6:d7:d0:0f:b7:e3:d1:47:21:9d:b6:4b:de:
                    dc:bb:9e:06:7d:dc:91:4d:df:68:01:1a:6d:5c:bc:
                    a4:f5:01:cd:46:4d:2d:1b:81:f6:fe:28:d5:d0:6a:
                    be:55:fa:2c:9c:b2:f3:30:fd:5d:42:cc:7f:cf:8c:
                    5a:d1:27:e9:5b:ab:c6:21:40:f9:74:15:1e:a8:db:
                    c4:e0:38:b8:a7:6a:2c:9a:51:37:0a:ec:f5:f6:1e:
                    79:fe:1a:d5:a3:06:b0:5d:54:6e:00:58:07:12:40:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:3E:39:93:30:F8:9C:9F:55:93:01:DC:D1:4A:C4:C0:1F:74:98
            X509v3 Authority Key Identifier:
                keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:59:3b:42:c0:29:de:64:be:36:75:26:17:41:06:c4:47:
         a9:7d:e5:58:c6:bd:cc:64:d3:52:96:45:dd:1d:17:42:86:bf:
         23:fe:cd:f8:39:6f:2d:47:5c:56:fb:5b:4d:b4:94:f6:00:29:
         64:26:8d:c2:8d:d1:3a:f3:38:54:ff:a1:4b:6c:8f:9e:ab:fe:
         08:3a:40:80:09:4a:b1:af:ef:9b:62:6a:41:55:7c:03:c2:28:
         06:0b:f1:ca:23:ff:5c:4a:42:59:c0:33:f4:22:db:97:92:1e:
         6e:ed:cc:5f:c0:83:94:c8:0e:2b:cb:ef:19:4e:3d:63:6b:29:
         05:ac:ee:34:b4:39:33:66:61:00:71:1a:ce:87:a1:e4:72:d3:
         46:c5:98:e5:ad:a5:00:e5:18:b1:10:77:3e:14:b1:20:2a:a0:
         7b:93:96:17:7f:ad:32:b4:5f:8f:1d:85:49:ff:0c:c0:fb:f9:
         75:35:38:db:f5:5f:af:02:4d:72:1e:48:3b:da:55:c4:3a:1a:
         7e:b5:16:00:7b:2c:9f:07:30:64:67:11:d8:b1:94:b2:16:bb:
         d2:12:90:38:f3:2d:dc:c7:2d:26:a6:43:97:85:4f:b0:9a:49:
         db:84:d3:09:3a:ed:df:f6:02:92:6e:23:f5:12:69:86:8f:70:
         75:d3:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:07 2024 by rpki-client on console-fra.rpki-client.org