Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File:                     W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier:          gfUlvAeOQ1/sfhNuJmCjn74lSWueGDrcSJXRDF6pBho=
Subject key identifier:   7D:D4:2D:1A:31:1D:16:18:C3:48:AF:A3:7F:34:81:D4:DB:34:69:14
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer:       /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial:       019041C0BD633F0C6D5F3AF09425DA376697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number:          0788
Signing time:             Sat 22 Jun 2024 21:01:08 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:08 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:08 +0000
Files and hashes:         1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: EfYcbmoVlv44seqy4TQYnMWTxYJFUU06mtZCAENYZH4=)
                          2: bGzkpeh6JAflWjNnkzYaCO0UjgM.roa (hash: nFQxwZRzeuMr9V1Jy6FU+NVLOl0LOYu7/3kUaFKQorw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:bd:63:3f:0c:6d:5f:3a:f0:94:25:da:37:66:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
        Validity
            Not Before: Jun 22 21:01:08 2024 GMT
            Not After : Jun 23 21:01:08 2024 GMT
        Subject: CN=7dd42d1a311d1618c348afa37f3481d4db346914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:2e:6e:12:3e:70:3d:b4:f8:36:ea:ce:73:
                    3f:17:ea:ce:18:bc:67:e6:54:86:e0:67:60:ee:54:
                    88:a2:ee:41:95:70:49:27:da:b3:a9:a5:81:8a:f6:
                    50:57:5a:22:98:16:2b:21:85:1e:cc:b3:f4:c7:a4:
                    99:07:5d:42:e3:9e:c0:17:98:fb:c8:c0:85:bb:67:
                    64:8b:03:1a:8f:7d:af:a4:86:85:a8:64:db:0b:25:
                    72:c2:da:70:e7:9f:a5:96:3f:d9:32:e8:5a:d3:e7:
                    74:c8:fe:3c:db:78:06:01:c3:31:92:bc:d6:b0:ac:
                    44:ef:3f:f2:2e:f5:5c:24:9d:2d:29:1e:20:d6:1c:
                    25:f3:fb:31:16:bf:fa:ad:4b:0f:0c:fa:41:c5:74:
                    90:06:4b:07:83:ff:43:90:7a:cc:b6:9f:ae:c0:5e:
                    31:c8:ef:3b:25:b6:29:39:92:ff:24:79:0f:dc:ea:
                    ce:4f:ba:d3:81:38:ee:5e:fb:8b:ea:a6:c6:a5:28:
                    74:4d:fa:ca:f0:a8:42:40:e9:62:f8:2b:30:6c:af:
                    22:40:8d:c2:77:ea:a8:7e:d8:28:58:74:f0:21:9f:
                    02:f5:c4:e7:23:23:b8:b5:9b:6d:d3:7d:db:2b:78:
                    1b:be:5f:fb:ef:10:cd:63:42:97:14:f4:95:c4:72:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:2D:1A:31:1D:16:18:C3:48:AF:A3:7F:34:81:D4:DB:34:69:14
            X509v3 Authority Key Identifier:
                keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:f3:33:07:56:56:f7:bd:de:3a:c2:6a:ed:2b:69:cf:ba:
         f6:99:49:7f:d7:c2:4d:94:22:d8:d2:36:24:36:d1:16:b2:f1:
         65:ee:56:02:ae:5f:9c:99:f1:d4:6a:35:7a:0c:b8:d7:73:c1:
         28:48:8a:e1:74:39:9a:33:08:ed:56:67:f7:47:9c:67:5b:7c:
         a8:02:cc:40:23:b6:51:2b:ce:55:e0:50:4e:9e:d4:9e:8b:49:
         76:e6:d7:41:0b:9a:9f:b6:9a:2d:5c:0f:8b:36:a1:be:de:99:
         44:ad:04:a3:5e:69:7b:d7:2b:b4:1d:43:87:98:69:6c:71:61:
         b7:15:05:33:fe:a8:bd:f3:ee:ff:e9:d6:65:87:e6:d5:d9:f9:
         0f:f4:13:b2:b5:33:23:c4:8d:e2:57:a0:c7:9d:a0:08:df:11:
         4c:56:e9:b6:c6:e5:8f:84:8a:ec:80:d3:e0:e0:4b:df:d8:bd:
         33:69:42:7a:1f:fc:79:f8:53:8d:87:ef:bf:7c:3a:1c:3d:59:
         de:7d:a3:ab:c6:06:16:f1:95:cb:50:87:ee:15:22:1e:e4:0e:
         7c:f7:01:2d:e0:2c:ed:6a:d2:af:65:62:8c:12:ae:12:ac:59:
         22:06:ff:42:e9:2c:eb:ba:c0:9a:84:89:f5:83:7b:78:b6:7f:
         5c:88:cc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:20:39 2024 by rpki-client on console-ams.rpki-client.org