Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          5L+z7UKA6ur2OI/m8RS8h6F3S39Luio1PL892GOrb5g=
Subject key identifier:   75:7E:3B:F2:75:7E:33:D9:8B:74:DA:A2:25:71:9C:D3:4F:64:38:7C
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       0194BABB2307B7DA0325C8B0D002DD21CD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 05:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:13 +0000
Files and hashes:         1: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (hash: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=)
                          2: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: MPnZDppNZE6d2din9uZfYMUeE1q/FMaM3SvCAP3SzTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:23:07:b7:da:03:25:c8:b0:d0:02:dd:21:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Jan 31 05:00:13 2025 GMT
            Not After : Feb  1 05:00:13 2025 GMT
        Subject: CN=757e3bf2757e33d98b74daa225719cd34f64387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:6e:de:57:de:30:e1:2b:6d:ea:cd:5a:79:
                    df:14:d9:04:38:38:b3:13:49:c7:66:92:66:5f:95:
                    c9:ed:ca:a0:41:c2:f2:66:64:0d:64:49:35:29:f7:
                    c3:3d:de:32:b5:95:ac:0d:4d:3d:56:3c:40:8f:b4:
                    7d:45:a3:ac:c4:f0:39:73:88:6f:0b:ae:44:04:1e:
                    2d:e5:ed:41:c1:d4:c8:8d:ad:7b:76:0b:70:75:ec:
                    39:b1:dd:70:d6:59:5e:f8:4e:52:a9:d0:4c:80:6b:
                    49:75:03:14:e3:6e:9a:bb:08:c1:6f:f6:e0:7c:6d:
                    3b:42:23:42:b2:75:7a:04:e6:b9:f8:d1:2e:ec:ad:
                    d5:41:99:f4:7b:1a:23:f4:d5:05:18:cd:57:c1:6c:
                    03:f9:e0:c9:8e:23:3d:96:d5:e8:fc:ee:51:61:cb:
                    c9:2d:aa:d6:a2:3a:c3:ea:58:07:80:1d:c5:3a:12:
                    ff:c0:f3:19:f5:0b:eb:83:0f:c0:0c:f7:ce:a5:d6:
                    a1:1c:0f:4a:0a:90:2e:e0:3a:eb:57:94:90:5b:64:
                    8f:61:50:7d:be:7f:46:a4:b8:3c:1d:92:b2:e2:43:
                    73:18:c8:b9:93:c1:2e:3f:af:90:8e:6c:ce:43:07:
                    59:7b:2c:2d:f9:f6:79:19:34:94:7a:f5:e7:e7:fb:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:3B:F2:75:7E:33:D9:8B:74:DA:A2:25:71:9C:D3:4F:64:38:7C
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cc:59:9f:16:13:11:f2:14:e0:cc:2b:b5:8a:d9:02:9f:20:
         f4:f9:57:f4:23:1d:5a:03:33:13:c5:49:2e:13:31:f0:22:e4:
         fc:9d:9a:4d:1c:96:56:d0:f5:f6:95:2a:43:b5:23:27:c4:e0:
         5d:21:f1:06:53:af:4b:e3:d9:16:61:50:5c:21:3f:1b:9d:37:
         65:28:a7:b8:00:6e:a8:a8:1d:d0:81:21:31:39:1d:0b:aa:dd:
         e8:5d:38:d9:35:d9:6f:d0:c0:1c:f6:5a:98:6f:e6:c5:97:df:
         73:e5:b7:09:65:4e:ef:99:85:32:17:d8:e0:67:4e:76:24:e1:
         7e:98:ab:16:c6:2c:ad:c6:e4:2c:83:38:32:34:38:b6:54:fa:
         79:85:f3:d1:90:cd:94:d1:f8:df:ae:cc:f0:72:fa:f6:04:96:
         00:22:ba:e9:1c:91:80:fc:bd:ec:25:22:c9:1f:a6:5d:cf:d2:
         28:e0:f7:5d:d1:bc:d2:51:e2:7c:7f:74:63:d3:a9:1a:44:d0:
         4c:0a:c7:32:c5:6c:17:2f:f1:38:0e:58:0a:f9:92:e4:ec:bd:
         73:dc:a0:32:04:a0:d2:b7:3e:3c:aa:6b:34:92:b2:fd:e1:80:
         7c:6a:88:e3:61:05:2a:d6:a5:bf:62:04:ec:b4:0d:88:f4:3b:
         c9:c4:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:14 2025 by rpki-client on console-fra.rpki-client.org