Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File:                     WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier:          uqypA6EW+UdD2BjoAADOC0Pz2pcSPbzyOYA7gOdYRVo=
Subject key identifier:   DE:44:85:95:93:41:B6:44:39:34:C1:F8:50:40:D2:BB:55:0B:F3:1B
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer:       /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial:       01935689626C42CC54811ACB77C17E243856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number:          09F8
Signing time:             Sat 23 Nov 2024 01:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:03 +0000
Files and hashes:         1: TPZfJtwOUWtdt9KH-QRxf81_IGU.roa (hash: JKHenM/BB3kw5Z4XMXbr1rTem7Ji/hzCvLOclsUq2ls=)
                          2: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: c72we/Nj9XJWBtEDUcBDZCrEliq/fLCmMIys7UJY6dk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:62:6c:42:cc:54:81:1a:cb:77:c1:7e:24:38:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
        Validity
            Not Before: Nov 23 01:01:03 2024 GMT
            Not After : Nov 24 01:01:03 2024 GMT
        Subject: CN=de4485959341b6443934c1f85040d2bb550bf31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:3a:52:fc:9c:1b:c3:47:5e:5e:ad:17:dc:
                    68:27:db:5c:63:2b:8b:24:e0:b2:b9:7f:80:ea:61:
                    65:df:f2:89:66:2c:82:8e:88:cc:2d:ad:f0:7a:4e:
                    db:06:df:8b:ed:e2:52:49:7a:e8:fe:90:1f:66:71:
                    7c:b9:2f:a1:c0:18:41:26:99:8f:6b:36:a5:b5:6c:
                    d9:2e:ec:a0:f8:b8:ea:10:01:34:d0:d4:74:ff:95:
                    99:73:fa:68:33:a4:bc:2f:ce:c6:b8:f0:e1:f5:bd:
                    ac:24:f0:8c:70:64:43:67:00:32:bd:47:53:a0:c6:
                    ac:fe:0a:e9:d0:fe:20:4b:45:56:d3:65:48:1c:7e:
                    96:75:16:e6:f0:ed:ef:60:55:75:42:45:e8:5b:3b:
                    ae:bb:7b:b5:51:87:8d:f4:90:0b:17:b0:e2:ba:62:
                    7b:44:1b:5c:62:43:a1:19:15:9a:12:24:30:0f:07:
                    0a:b2:79:43:1a:54:71:b6:e8:81:fe:8a:2d:47:d9:
                    91:bb:a6:cd:6d:6e:88:07:f4:18:11:17:c6:80:85:
                    dc:25:74:a5:28:80:92:97:13:8b:81:b6:d1:1a:f2:
                    99:f2:1f:bf:27:90:ca:24:eb:67:6e:a9:2f:1c:63:
                    33:75:cb:7d:85:83:a0:4f:76:e6:bf:3a:f7:13:4b:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:85:95:93:41:B6:44:39:34:C1:F8:50:40:D2:BB:55:0B:F3:1B
            X509v3 Authority Key Identifier:
                keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:42:74:59:40:e9:99:65:7f:93:47:86:f6:e7:1d:67:2a:d8:
         19:ef:ca:b0:67:b5:91:6a:59:8f:29:be:f9:4c:61:e1:23:24:
         72:7c:9c:5e:1d:6c:c8:16:ad:ff:e1:ad:a3:ad:fe:a0:92:28:
         e2:c3:92:a9:6e:0a:49:30:b8:20:6d:4c:c0:a1:0d:b5:f3:f4:
         a5:33:d7:9c:23:d0:61:1f:ae:7b:c8:b7:f8:f2:60:5c:b9:39:
         9f:44:7c:ea:09:d8:d5:21:a8:94:4d:aa:db:75:3a:f8:52:88:
         f2:3f:46:d4:bb:e6:e0:91:50:22:ef:86:5d:61:c8:01:77:36:
         0b:1e:97:4e:03:77:b3:7a:62:3a:ef:b3:df:00:74:3c:ac:87:
         8b:f0:54:0c:db:53:12:a8:f9:fb:29:06:4f:fd:d3:83:f0:ac:
         82:8c:ab:05:e5:2b:9f:c5:53:59:b1:2b:41:62:b9:b2:2b:58:
         1d:25:22:98:db:61:b5:50:e5:28:df:de:a1:ef:62:4f:2f:75:
         be:14:9f:7d:e9:58:68:e7:52:6b:76:0d:ac:da:83:25:1b:0d:
         c4:e9:a1:cf:2c:64:0d:42:6f:b3:2d:d6:4a:23:ec:ad:ed:e1:
         f8:10:2d:4f:21:1e:38:8c:b7:eb:22:99:83:76:48:0b:03:11:
         f4:77:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:31 2024 by rpki-client on console-fra.rpki-client.org