Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          055gpZTU8EkAnIZSjYgUVGVcqCviwKlvUi1qWs+5Iqg=
Subject key identifier:   F4:03:D6:15:EB:00:E7:49:6F:56:B9:ED:D5:A6:0B:93:88:C2:B2:38
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019355084D4E95CD8E3947431F6D10844D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          0418
Signing time:             Fri 22 Nov 2024 18:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:27 +0000
Files and hashes:         1: IH8PlVGKZQJwwtQtjUd7rFVeiAE.roa (hash: aB4/lt+P3UzZUfM0UROBxPauyxBATMU0165+ysAjchQ=)
                          2: OSE6z2Iy8HjQerNGH4U8jEHNn1o.roa (hash: kZwkpOk1WxYlWqEmCFBP3qtIAbjf5Teg/tdX+b6PcmU=)
                          3: OwhCX0yQo070ad7ZlKSR6Xq8148.roa (hash: 1gKErjonv3WLAvRQja2D0Yt5J15TsZKHtH8vv8xklRk=)
                          4: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: S2KX438cOwuw7spa36OH245iKPLYM0x6yYNvbXsf0Is=)
                          5: YCUiy90Jw4qTY7cYPCKbMqUHd-8.roa (hash: 8Rzlt7thUsdTJdRr8bceclLfRg/lXj+ZFkte9Psa8MU=)
                          6: eSspHHlcdDnE5Qwus2Jmg_LTyBU.roa (hash: OP6NNp7EvnCRLcMFneeCdVzdkPsZOtd7ILVWELHebMA=)
                          7: gjO2VFNvYrI6HCGYMhnkI-xD7YE.roa (hash: ZM+EzBGJF44SDdS4pI4QInPJhbDzY5vcuEER1aEku6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:4d:4e:95:cd:8e:39:47:43:1f:6d:10:84:4d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Nov 22 18:00:27 2024 GMT
            Not After : Nov 23 18:00:27 2024 GMT
        Subject: CN=f403d615eb00e7496f56b9edd5a60b9388c2b238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:d8:19:4f:b3:ab:4e:86:39:e0:16:42:08:
                    44:d1:6a:da:c0:f8:4a:81:d2:29:28:ac:ce:48:19:
                    a7:75:34:6a:f1:d3:6b:61:11:14:22:3a:ca:e1:83:
                    9c:e1:80:56:50:b8:ac:cf:3f:53:7e:12:5d:c1:23:
                    63:29:3b:1e:b8:41:c3:de:aa:ca:ea:7a:15:25:90:
                    37:6e:71:4d:93:61:3c:f4:0d:2f:69:dc:5f:f1:88:
                    cb:45:c0:d4:7f:14:e9:1b:04:5e:b8:fb:42:bf:31:
                    ca:88:0d:25:69:18:37:ce:d2:d2:0d:6a:85:fa:9e:
                    c9:c0:34:0d:dd:a7:4a:c0:e1:b6:be:f4:e1:60:4a:
                    e4:3e:70:cd:e8:3d:f3:4c:03:87:43:91:ae:e6:d3:
                    03:fd:a9:31:5c:e2:7a:f9:ba:26:85:4c:a5:a2:87:
                    9b:d2:d4:8c:8e:92:d3:6f:0e:d0:e6:7d:60:24:ac:
                    85:7c:2a:20:09:fb:b9:24:0c:34:7c:3b:57:e1:4a:
                    50:76:b2:62:68:6b:3c:42:48:65:9f:d3:70:be:a6:
                    1c:c9:0a:f7:98:6b:8d:1f:46:05:f0:47:eb:7f:48:
                    13:69:44:75:49:56:41:90:23:4e:fd:07:95:61:f5:
                    59:5e:ef:ff:28:9f:64:a8:a4:74:cf:bb:fa:d8:e0:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:D6:15:EB:00:E7:49:6F:56:B9:ED:D5:A6:0B:93:88:C2:B2:38
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:61:d2:db:b9:3f:45:73:ce:0b:30:ae:8c:6d:8c:58:db:5a:
         35:33:5a:d6:f2:cf:cd:7c:22:05:b3:ac:9a:26:fe:5e:81:35:
         14:c0:53:3f:8e:a2:a4:e4:7c:46:03:96:56:9e:6c:03:22:c2:
         7b:c5:42:7c:79:d5:cc:47:fb:39:5f:65:9f:d0:69:81:8f:c8:
         14:f1:63:89:c6:2b:c2:fa:89:a3:77:14:e1:85:0d:b7:23:ea:
         44:e2:b0:aa:18:8b:52:cb:d1:b1:c0:e4:d0:0f:32:7d:34:ff:
         ac:ac:47:4b:f6:0f:32:68:f8:ab:9a:0a:45:44:ab:db:40:73:
         35:b4:a9:ca:60:29:5f:9f:66:dc:79:e1:70:c0:1d:aa:c7:6e:
         9f:da:bd:ca:14:75:f6:76:0c:6d:d6:68:70:17:73:99:f2:cf:
         a3:88:d4:c2:27:4a:e9:d2:c5:98:0d:cb:c7:b0:e5:d9:51:0a:
         92:69:34:e0:68:2f:5c:a0:df:79:0d:13:a8:ed:c6:e2:24:3d:
         a0:f0:76:97:e5:80:17:ae:c9:7f:f7:92:af:0d:8c:c7:d4:88:
         59:8c:3b:5b:b7:bc:35:c0:04:1a:5b:0b:4b:fd:42:2a:ee:6a:
         85:33:a8:01:84:d8:15:35:f0:9f:a2:6b:4b:b3:ac:72:40:0d:
         c4:db:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:11 2024 by rpki-client on console-fra.rpki-client.org