Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          icPhTbNgcUymesvwdcWw+bP27NVEBMdv+u37qP8p2ZM=
Subject key identifier:   0D:3E:48:50:12:E5:DC:2E:51:2E:B6:5E:80:62:39:85:53:AE:2F:14
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       01901E21B193303BA032F532F0F3AA24DBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          0F1F
Signing time:             Sat 15 Jun 2024 23:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:42 +0000
Files and hashes:         1: Jb5m0jFng8_L7aGBE-v0zwbZfzo.roa (hash: d1i4Vfj7w6xWaAEe4OwPzqncJvbpmkuu5nFZE6UDatg=)
                          2: SEm9kuFoC2IP7CWDQD5b7Z33LPI.roa (hash: Yukig+GNqJGNUH8cCvBaao3hftVi07UP44GHqK0w8uU=)
                          3: VPRCw9qbHDjYK7HUQODKzTL5tHM.roa (hash: fQuFF3uSznRVnFmVddxMumjnQSsZeA+THJJXWVo8G/M=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: GynWuYdGAEvxl+j1+sUKpcsuDJ3LTkbG5eXGELq9En8=)
                          5: eA9hdjYTwO5lNK3NbbS59sWVZWQ.roa (hash: FExRic7tUzOr3pjRMbiAftlvKQxmD3zIaVMnJhYSWDo=)
                          6: pJkkV9IIycLjgnkqoNUc3eHg_sY.roa (hash: 4UYbWUlIqXlB8Yga0IFkgSmEBOdksb+I5tk+sP59anc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:b1:93:30:3b:a0:32:f5:32:f0:f3:aa:24:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Jun 15 23:00:42 2024 GMT
            Not After : Jun 16 23:00:42 2024 GMT
        Subject: CN=0d3e485012e5dc2e512eb65e8062398553ae2f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:e2:b9:e6:61:d7:32:e6:ac:a5:6e:1a:e1:
                    fe:24:49:cd:b1:9f:c7:87:b3:d7:50:78:5b:05:0b:
                    47:e4:52:e6:a9:f6:7b:4e:78:e3:38:63:d8:c9:6c:
                    9e:51:22:f2:b7:63:45:ad:e5:68:31:a9:ae:55:fd:
                    00:ac:17:44:f7:83:0a:29:d4:20:a2:e3:a3:74:3c:
                    e8:25:e9:17:a7:95:87:90:79:45:8b:73:71:ff:2e:
                    e6:ae:4c:4c:56:e2:ae:77:7a:39:01:cc:c5:88:66:
                    f4:a2:1e:1c:7a:60:d5:70:6a:fe:5a:15:a1:4c:ae:
                    f1:91:2e:17:bf:24:f6:58:eb:15:76:96:30:83:df:
                    59:10:95:fa:63:45:21:b2:f3:37:a1:ff:25:f1:90:
                    69:a7:ac:80:ae:26:2d:21:a0:fe:12:95:01:fd:34:
                    ae:40:57:d2:38:14:ce:91:37:10:df:36:0f:66:01:
                    2c:c7:52:8c:47:ec:1e:d7:61:fa:24:ba:15:5b:e8:
                    c4:b1:7c:11:33:a5:81:6a:74:6e:9d:16:dd:fc:2a:
                    2d:1f:37:7c:d1:67:2f:c0:ca:a9:c1:81:ac:19:d2:
                    07:11:22:b1:24:fd:48:6a:bf:b8:3d:69:6e:a9:fd:
                    00:c9:a3:4b:51:f7:fb:91:53:ab:de:73:02:e2:c1:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3E:48:50:12:E5:DC:2E:51:2E:B6:5E:80:62:39:85:53:AE:2F:14
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:c2:fe:41:66:5e:2e:e0:de:1f:ae:c8:0e:2a:9f:da:cf:
         55:6a:1d:3c:4e:96:38:ed:cc:0a:bd:bb:e6:fb:cb:c3:8d:13:
         50:d4:ca:29:d6:13:87:01:2e:7d:3d:8d:15:c7:88:b2:8d:d1:
         ec:ae:70:2a:f8:03:81:a5:be:95:f1:e6:3b:1a:a2:dc:6e:32:
         2d:53:58:b0:dc:36:b4:23:4c:d1:96:7f:44:e0:ff:35:ba:b0:
         b8:06:19:a2:d1:0c:a3:1a:14:e3:de:98:71:c6:92:d1:e3:84:
         9e:2c:86:dd:b1:fb:b3:e5:16:14:bb:76:3f:01:7a:b2:6c:f9:
         9b:bc:18:49:19:e3:28:b4:fb:76:cf:54:07:7e:e1:81:c9:f7:
         15:b2:97:1b:c9:39:a4:47:bc:3c:ac:04:3f:eb:a8:55:3a:3d:
         83:69:91:ca:9d:51:14:e0:bd:88:5f:0f:56:3b:e5:10:ed:66:
         7b:93:cb:3d:b8:fa:49:39:50:a4:9a:38:80:f4:01:b3:25:d4:
         3c:99:f5:1d:1a:91:1f:21:d3:0f:7b:77:e1:3b:c4:0a:de:ef:
         6c:82:5b:1a:60:0a:a0:91:66:78:e8:f6:4c:ac:1d:b4:9a:ea:
         1d:a6:1d:01:12:99:ee:49:12:84:03:6b:32:df:81:6e:f3:f1:
         9b:ba:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:53:17 2024 by rpki-client on console-fra.rpki-client.org