Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          7T5mXiu+USC8bSFulNoXc+So8rUtGpLyjxcbfWkMgiY=
Subject key identifier:   72:AA:8B:F6:69:C2:B7:C7:62:C5:FD:B6:DB:CA:EF:AB:CF:29:97:04
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       01935689C93D9DF0F05A793DFCAAE59531EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:30 +0000
Files and hashes:         1: BJCMNKys3kbsaZzTXkR6E7cd1uE.roa (hash: kz79ofWr9CoX0kJFImrEbwFKsbqcDPqFGhpqDSu301w=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: WmNUAGOCahzZBptZVMjcMF/ts7AnKuw7OiModEJ92nk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c9:3d:9d:f0:f0:5a:79:3d:fc:aa:e5:95:31:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Nov 23 01:01:30 2024 GMT
            Not After : Nov 24 01:01:30 2024 GMT
        Subject: CN=72aa8bf669c2b7c762c5fdb6dbcaefabcf299704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:ff:16:c5:0c:a9:d3:91:5c:d8:73:1a:42:
                    4c:c2:84:74:31:19:31:bb:45:26:b0:e3:bb:06:15:
                    67:b8:14:cb:99:11:37:ad:56:28:c8:ed:92:c8:c8:
                    48:dc:c7:ea:2e:ec:bd:bf:0e:7d:29:fc:40:94:07:
                    26:04:96:4e:17:b6:cb:8c:0a:53:ac:02:5e:38:78:
                    8c:b5:5d:4b:fe:85:17:4d:56:0e:2e:07:c4:ed:83:
                    ef:09:f5:68:84:12:f3:68:92:5b:dc:6c:b4:86:e9:
                    26:77:44:16:84:41:f7:2b:a0:dd:61:3e:fc:16:12:
                    09:e1:fe:62:ed:98:fd:a2:a3:dd:63:3f:9a:79:5f:
                    dd:35:88:a0:a8:5e:69:4a:ee:36:61:f6:6b:93:85:
                    a8:ad:ff:2a:58:c2:35:6b:92:12:46:9c:2a:40:c5:
                    1f:0a:d1:56:2a:6f:2c:90:52:b2:34:fe:9f:ef:5c:
                    52:03:d0:5e:2a:13:e4:de:94:73:e5:25:55:7c:b0:
                    f4:98:67:29:1c:96:1c:f5:80:ce:ea:53:0f:dd:01:
                    dd:83:54:e6:3a:aa:6b:85:2b:aa:1d:7c:81:bb:14:
                    58:24:92:d7:51:0a:7c:d7:24:f0:0e:59:0a:6d:e5:
                    a1:ea:04:c1:cf:a1:8a:3f:74:a3:b7:28:60:c7:c0:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:8B:F6:69:C2:B7:C7:62:C5:FD:B6:DB:CA:EF:AB:CF:29:97:04
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:76:f7:d6:10:af:5e:4e:90:23:e9:5c:1b:35:e9:86:a7:1b:
         b9:f4:05:3c:f9:19:e2:ff:1c:61:87:c8:2a:d7:a7:43:86:9d:
         90:4f:d7:99:92:32:f5:dc:ad:d1:06:1e:94:5a:f2:f8:21:19:
         1c:50:83:5e:02:63:5b:0e:3b:21:7b:bc:a7:da:20:42:39:9a:
         d3:59:9a:6a:8c:67:55:d5:ca:e0:2e:09:3f:a0:e7:39:27:4c:
         bd:5a:bb:3a:fe:61:86:2e:63:c3:db:5b:75:8d:43:b1:90:17:
         ec:db:01:22:aa:03:7d:94:c1:d7:f4:be:bc:6e:f0:e3:10:20:
         91:95:94:60:6a:f3:92:a6:82:9c:dd:cc:3f:70:70:94:f3:9e:
         2e:f2:2f:76:9e:49:7a:67:0e:de:a0:65:85:c8:29:ef:e6:6d:
         5f:a9:2b:cf:a8:b5:fc:4b:43:44:a5:39:7e:68:6e:c2:64:52:
         bf:53:b9:cf:bf:b0:98:79:d0:f4:c4:4b:c1:d5:de:ad:5f:26:
         b1:77:22:97:dc:98:96:a1:02:1d:91:5f:66:a9:bc:9a:c7:8f:
         9e:c8:fd:8c:0f:ab:f9:d8:9d:73:2f:6b:1d:5a:7c:ad:ab:b1:
         a9:df:7f:2e:69:b1:af:f5:f6:b5:a7:e3:2c:f8:9d:48:72:f3:
         9e:c9:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:16 2024 by rpki-client on console-fra.rpki-client.org