Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File:                     WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier:          Kz5y7/9CWqtqrSfwI/jOSZSLO6USBilKVHY000wd4/Y=
Subject key identifier:   DA:6D:98:C6:1F:B9:84:75:65:DB:07:55:C4:B7:19:D6:10:A7:48:44
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer:       /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial:       0193549BA447DC83DF8085599AE2F94BDDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number:          0ACA
Signing time:             Fri 22 Nov 2024 16:01:46 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:46 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:46 +0000
Files and hashes:         1: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: 4l2BlncbVicGVv70kGmF5zcWWZyCU+Flfbo+VKNy5KE=)
                          2: kQmCOx_7PnqCEbV6y_mYXrekXbw.roa (hash: v2Pf8yDtppfQLNrE+6fFbrSFK6q9P3T4matULj94Jf8=)
                          3: uNOrHQGUF2mTCKTzJa-Ru1YS9AE.roa (hash: 2jdo/JYx0JN7/a5LrQMQgFZ9Ij5LIcWEM/iDqRimaG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:a4:47:dc:83:df:80:85:59:9a:e2:f9:4b:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
        Validity
            Not Before: Nov 22 16:01:46 2024 GMT
            Not After : Nov 23 16:01:46 2024 GMT
        Subject: CN=da6d98c61fb9847565db0755c4b719d610a74844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d0:96:79:a7:0f:74:16:d5:03:7b:1f:c1:eb:
                    95:96:ce:b7:dc:a3:f5:06:42:a3:be:31:fc:84:7e:
                    1a:59:44:49:2e:15:d5:13:b0:71:86:e5:a4:db:2f:
                    de:55:f0:79:6b:30:04:6d:0a:af:5b:63:0f:f9:4b:
                    e5:b2:33:61:e3:b4:88:0d:e7:24:97:c6:0d:83:36:
                    a6:a5:bd:b9:59:41:49:61:f8:c9:93:cc:c1:40:23:
                    a1:f5:fd:fa:40:75:e1:aa:4d:17:92:e8:7c:eb:73:
                    33:07:1a:7b:9f:b9:5c:1e:8d:a6:82:08:1e:f4:23:
                    bf:52:30:08:b4:db:82:72:e0:b8:de:a9:29:0b:70:
                    8c:79:07:3d:6e:aa:c7:26:d3:e4:24:3d:bc:28:6e:
                    63:86:01:d4:c1:34:05:35:37:a6:0d:63:fe:89:90:
                    46:7b:2f:02:16:d0:ba:1a:a4:00:86:22:3d:29:ea:
                    43:49:48:ea:e3:cf:a4:59:dc:9e:7f:3b:3a:88:84:
                    5e:5e:00:15:ca:23:4b:69:2c:23:2e:0e:46:e3:bf:
                    f0:f9:3f:ee:5e:19:87:3f:5c:9b:64:25:ed:33:4b:
                    89:8c:42:83:de:79:12:7b:d7:81:31:d3:c8:7a:f1:
                    51:92:c1:ba:6a:99:3c:e2:32:8e:b6:61:ff:10:bf:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:98:C6:1F:B9:84:75:65:DB:07:55:C4:B7:19:D6:10:A7:48:44
            X509v3 Authority Key Identifier:
                keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:57:4a:72:f5:a5:1b:66:d5:22:e8:65:4e:ac:b1:ca:e7:b8:
         5b:1b:f7:8d:a0:76:34:7b:2d:ed:79:49:1a:15:1b:20:b4:f3:
         8f:fe:87:c8:ae:4d:e3:88:4d:d9:46:05:08:77:ea:e3:11:0c:
         7f:3c:23:97:7e:3b:e5:a7:99:97:59:f2:83:4e:fe:f0:ed:7e:
         ad:38:a9:39:f7:f9:29:16:dc:37:76:68:59:55:13:3b:a8:d0:
         91:66:85:a4:2a:f7:41:29:9e:82:80:1c:bd:44:7e:3c:0b:35:
         9f:72:62:a6:b0:b4:12:1c:7d:00:be:dd:8a:d7:d6:e0:ae:d1:
         bf:24:87:cf:68:24:88:96:0f:c9:1a:f6:dd:3f:40:f5:04:7d:
         1b:ab:b4:e2:38:00:33:10:7f:cd:f8:ad:90:f3:42:5c:72:f1:
         27:69:21:43:f8:36:a0:2b:df:c0:63:e6:24:e7:8e:bb:65:f7:
         1c:ce:ca:02:de:e4:e0:d5:34:e3:18:b0:46:2f:fc:ed:c1:c6:
         b0:0e:f0:3b:a2:cc:17:7f:f0:24:8c:9e:d5:c9:69:55:da:56:
         64:8a:63:d9:da:f4:a9:e3:41:e1:65:35:4d:29:f9:0b:b6:4a:
         a2:49:47:ab:5c:d6:f6:ec:da:a9:cf:b0:38:9a:73:c4:df:13:
         24:6c:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:07 2024 by rpki-client on console-ams.rpki-client.org