Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.mft
File:                     W5wUVAMgNESVm8JhmqaBmhxdAdk.mft (raw, json)
Hash identifier:          ++BHnERR7AigFFwiuqpvS+AjS2YP/Ib8hTlWayeAkjA=
Subject key identifier:   64:AC:E0:DD:77:6D:E5:87:19:08:B0:17:7C:2B:8E:66:C5:E0:CD:BC
Authority key identifier: 5B:9C:14:54:03:20:34:44:95:9B:C2:61:9A:A6:81:9A:1C:5D:01:D9
Certificate issuer:       /CN=5b9c145403203444959bc2619aa6819a1c5d01d9
Certificate serial:       019355E435DA8240D6854333C316089D39AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5wUVAMgNESVm8JhmqaBmhxdAdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.mft
Manifest number:          0B39
Signing time:             Fri 22 Nov 2024 22:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:39 +0000
Files and hashes:         1: VFk9TuHxsZS2OGnHCNtHEjoBMsg.roa (hash: WjrHaiu8zgTSQkyQGNXMQKrBXwTrrOST7UoJAT25avI=)
                          2: W5wUVAMgNESVm8JhmqaBmhxdAdk.crl (hash: 5T3Vm7MAww3JXLmNhg7vzkGhXQMGwQ201CN9OuQOTlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5wUVAMgNESVm8JhmqaBmhxdAdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:35:da:82:40:d6:85:43:33:c3:16:08:9d:39:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9c145403203444959bc2619aa6819a1c5d01d9
        Validity
            Not Before: Nov 22 22:00:39 2024 GMT
            Not After : Nov 23 22:00:39 2024 GMT
        Subject: CN=64ace0dd776de5871908b0177c2b8e66c5e0cdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:d9:70:f4:c8:81:13:a0:4a:18:93:2c:d5:
                    da:cc:2f:d4:e4:d1:b8:0d:00:f7:ba:4b:b7:c3:77:
                    38:e2:36:99:5c:99:36:a3:d8:a1:3c:db:bd:44:ce:
                    f4:92:8f:4b:58:fb:93:4e:8d:fb:36:20:2f:27:be:
                    6e:4c:3f:10:bf:a2:73:e2:89:24:55:c2:22:96:b7:
                    09:c4:56:29:a7:13:b2:a2:d0:f5:2b:44:66:db:00:
                    41:58:63:97:4f:07:d8:4c:61:87:f7:5b:2f:ac:38:
                    77:3a:9b:d2:02:60:77:21:ee:e5:a7:95:65:6b:35:
                    ed:8e:1c:bc:67:0b:99:d2:93:b8:e8:c0:b5:8b:99:
                    b7:53:35:fe:7b:ad:01:4f:4d:e0:20:09:47:b8:4c:
                    e4:e6:9c:ce:a2:88:79:0c:24:90:d9:bf:10:74:33:
                    c2:c5:94:c7:b9:9a:b7:bc:ad:26:98:96:42:fa:97:
                    cd:b2:38:df:04:01:da:96:5d:bc:1f:b3:0c:04:50:
                    3a:d6:aa:62:b8:34:6f:0d:91:7d:24:da:71:b9:7c:
                    c9:8d:56:31:12:66:14:06:f2:42:0e:3e:eb:1f:8e:
                    ed:8b:7e:77:38:33:bc:a7:09:90:35:bb:f4:d8:8d:
                    37:fa:ab:a9:fd:c9:79:74:44:e4:22:34:d7:ea:c7:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:E0:DD:77:6D:E5:87:19:08:B0:17:7C:2B:8E:66:C5:E0:CD:BC
            X509v3 Authority Key Identifier:
                keyid:5B:9C:14:54:03:20:34:44:95:9B:C2:61:9A:A6:81:9A:1C:5D:01:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5wUVAMgNESVm8JhmqaBmhxdAdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7609a0-af3a-4d7d-bb21-7fbde58c4429/1/W5wUVAMgNESVm8JhmqaBmhxdAdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:ac:78:d5:7a:00:b1:6b:10:cc:8e:e8:b4:4f:59:d7:1e:
         87:f2:15:cb:dd:8d:5e:5b:de:5c:56:cd:ce:f4:28:24:48:9f:
         88:e0:04:31:5c:37:68:26:d6:c2:db:fa:9a:6c:c8:10:da:be:
         51:ab:71:ec:00:8b:10:29:a2:f8:00:da:d7:e8:38:d8:b3:3b:
         a9:ef:b0:86:4d:1f:3d:2b:c9:e3:c0:0b:5c:79:02:7e:94:ae:
         40:64:a1:1d:2c:46:d9:a0:b6:4b:1c:a6:f6:09:42:86:a2:5f:
         ee:d1:4b:95:32:9b:56:ee:fe:55:79:67:2e:14:9f:a2:a2:e2:
         21:7c:f7:fb:8f:ac:65:e6:5b:1c:ea:c0:74:7e:cc:19:e6:31:
         c9:a2:c0:e5:8c:fb:0e:0a:0a:96:7d:70:53:47:b6:cf:3a:cd:
         61:eb:35:fb:77:69:17:bd:2c:37:7b:0b:ec:0b:00:7d:b2:b6:
         e3:2d:10:b3:3f:2e:33:34:cc:e8:7b:9c:98:6a:98:84:6f:e2:
         d9:24:cf:90:2f:29:67:35:8d:df:3a:1b:55:cc:2a:c0:55:bd:
         0b:ee:53:2f:e2:d9:7b:62:fb:a3:bf:cc:87:ef:a9:26:0f:ee:
         18:12:09:55:35:24:ee:10:8c:4d:ab:20:ed:d9:0d:81:fb:1c:
         b0:7f:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:42 2024 by rpki-client on console-ams.rpki-client.org