Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File:                     W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier:          dTf1qRycrdCx4DcFYJEvG9VmzZFOpXyvQiieIfuhvhc=
Subject key identifier:   45:95:4A:83:A5:31:FE:FE:2A:0B:3D:9B:3B:8B:59:44:A3:68:60:D7
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer:       /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial:       0190448AFE5402947FDE3999F77B83D0B3F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number:          0F1A
Signing time:             Sun 23 Jun 2024 10:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:17 +0000
Files and hashes:         1: 09xuDhxewxxak2CN__JL1yeS8Es.roa (hash: 5WE00+ypoVFtWlILdfUD0CdpVawKnTGeU+0dQN5VAbs=)
                          2: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: F4TxuvR5/qqor6dvMYGbREPfeLa8usrBT0M65e+fT6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:fe:54:02:94:7f:de:39:99:f7:7b:83:d0:b3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
        Validity
            Not Before: Jun 23 10:01:17 2024 GMT
            Not After : Jun 24 10:01:17 2024 GMT
        Subject: CN=45954a83a531fefe2a0b3d9b3b8b5944a36860d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:57:68:02:fa:9e:ad:61:47:6c:fd:10:82:
                    d2:28:21:ee:e4:a5:d5:90:43:69:ef:53:42:2c:93:
                    a9:a0:ad:91:ef:d7:5b:4b:06:17:0c:d4:a9:29:d2:
                    13:0e:e8:da:a5:75:23:97:07:7b:68:a1:79:5f:b2:
                    99:d4:16:2a:b9:18:26:b7:de:1f:85:71:d9:36:01:
                    af:ef:28:de:7a:29:ee:c8:92:2e:a9:1c:d7:71:ba:
                    03:bd:d8:77:ae:87:cb:01:12:48:28:30:61:91:14:
                    05:fb:83:dd:35:53:9e:d9:39:b8:62:76:03:b5:ae:
                    a5:47:5b:e9:40:e2:3a:15:26:a4:21:b2:f3:01:b3:
                    86:36:57:1c:78:03:84:f5:76:ea:f4:81:99:9b:1d:
                    d2:57:bd:18:79:9e:7a:0e:10:b8:fe:0b:4d:10:7c:
                    34:96:e6:04:e2:a0:58:00:83:8e:ef:cf:14:73:c3:
                    cb:f6:63:27:f0:28:ef:79:62:c3:75:d7:5a:1c:10:
                    9b:85:66:2c:5e:ac:d8:03:f7:c9:9c:40:8f:cc:92:
                    6b:77:2d:84:a3:a0:64:fd:fa:bd:19:d8:84:72:a7:
                    4d:b3:00:e9:71:0d:51:5b:7c:32:73:7c:58:1f:98:
                    ed:de:a6:4e:f9:33:12:fd:89:7f:ab:9a:26:6e:81:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:95:4A:83:A5:31:FE:FE:2A:0B:3D:9B:3B:8B:59:44:A3:68:60:D7
            X509v3 Authority Key Identifier:
                keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:93:34:24:16:81:52:d7:7e:a5:82:d6:14:90:a5:56:3e:32:
         27:ef:2d:a1:20:1b:c2:67:65:ad:12:ac:21:aa:db:2b:7d:af:
         f3:3c:12:46:c8:ed:40:61:7c:6f:6e:bf:96:83:8f:9e:5d:10:
         50:0f:83:ef:13:d1:1d:de:ed:0e:db:c2:47:bf:09:55:e7:39:
         7d:87:99:da:fd:32:1c:51:07:94:73:cd:51:4c:a5:38:22:49:
         0c:7e:4c:b8:24:1f:9e:26:6b:be:7d:47:82:0f:ad:98:4c:bb:
         b8:0a:6b:a7:38:78:28:34:ce:36:c0:69:40:6d:3f:36:36:5c:
         63:c8:0e:65:5d:25:17:98:ab:63:d3:03:54:f0:c2:4a:9d:ac:
         da:a9:71:29:33:4e:f5:2c:ff:1c:cb:79:ad:a5:67:fe:3d:16:
         07:ef:03:37:50:60:48:a3:be:d2:f6:fc:88:f1:6f:1a:f1:04:
         bc:52:f1:00:19:29:0b:b6:b6:23:a0:ff:ba:88:31:2a:d6:c8:
         39:92:9c:b4:ed:f3:fa:d6:36:78:18:36:a8:2d:06:45:0f:1f:
         cf:d6:33:af:ae:b5:b5:19:8c:b7:13:e4:d7:b1:52:69:cd:32:
         17:01:a1:e3:91:b0:49:96:65:05:f9:a8:4f:93:a7:dd:6f:2c:
         21:ee:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:05 2024 by rpki-client on console-fra.rpki-client.org