Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File:                     WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier:          uRykPge6CKyjOF2YWLbrCMIoVFSOD86zda4m+gRGTOs=
Subject key identifier:   5D:50:0F:DC:CE:6A:6E:7F:91:B5:54:28:49:9C:4B:1D:0D:86:F7:27
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer:       /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial:       018F8C01459A8EE4DCE460537D724351CA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number:          10E0
Signing time:             Sat 18 May 2024 14:00:44 +0000
Manifest this update:     Sat 18 May 2024 14:00:44 +0000
Manifest next update:     Sun 19 May 2024 14:00:44 +0000
Files and hashes:         1: 7jgOp-Pa45fk2e0qNyl3w_AJzTc.roa (hash: +H65YEWVaPKEF44wHOtfYZNp5JgrYOo4LwxT53fTZsU=)
                          2: 7zAn1vWlt1tNqbbrPVdptBjOHJw.roa (hash: 3SgMD/a5lXvcOcSnfwK2/xT1v/rB+kX4VzpyJK6yaT4=)
                          3: 9IIsoMMnpikvHBcuZSVkO4nrJKk.roa (hash: cSUdlP+G2mhJPfIQXK1yix+6qYdP2dph/ar8GExRPuM=)
                          4: DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa (hash: GTBm2Zn+cabRU10m7zKFPc/wroUHi+LD9Nug1yXUkuo=)
                          5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: q7SeFe9k9Y6oa3NTvLgephqI+MubhyxkIx6o5jfl9LU=)
                          6: j9Wn70r2LCuq043U7DB0eM4wNfQ.roa (hash: msanrrotk/IsyRJaqpc+/f2s3iAQ0p11heca5q0ntZM=)
                          7: lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa (hash: Rup0ioyoCeKO4bl3gu1plhaZy+FR134Kh8wcWKANp/0=)
                          8: qXHHkW-ruRBplMU7atKw7gOlLWs.roa (hash: J5vojE6NCOQeuxjbasIcKQe32e1wr3Z8HYvZ+ZUtHxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:01:45:9a:8e:e4:dc:e4:60:53:7d:72:43:51:ca:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
        Validity
            Not Before: May 18 14:00:44 2024 GMT
            Not After : May 19 14:00:44 2024 GMT
        Subject: CN=5d500fdcce6a6e7f91b55428499c4b1d0d86f727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:40:ee:ae:ac:63:13:31:43:2b:d0:98:7c:
                    39:0f:bf:ed:ba:81:bc:be:18:da:31:f5:bc:b2:8d:
                    28:54:65:36:bc:76:2d:3d:31:83:ad:a9:51:3a:b2:
                    7f:5b:3f:5f:96:3d:40:3f:36:84:9f:7a:f0:4a:dd:
                    3a:be:d9:0d:fa:eb:77:a4:f2:bc:f3:3a:e5:09:d5:
                    1c:a2:4c:7a:c3:eb:5e:3d:ce:f4:90:3d:c3:a5:ce:
                    18:c1:7d:d0:9d:45:db:cf:7c:56:f8:90:91:7b:00:
                    9f:57:fc:19:23:b3:8f:de:d9:d4:67:15:af:52:b0:
                    a7:a8:48:31:0e:f2:ab:7c:c9:96:83:3b:eb:c3:41:
                    c9:64:2d:6c:6c:2d:f7:f2:9b:d1:5a:5f:9c:f3:de:
                    16:7c:8f:de:1e:cf:fc:83:40:67:1c:d6:48:85:f3:
                    4e:6d:76:a6:b5:36:1b:84:60:fc:fa:76:95:cc:56:
                    28:b4:11:19:3f:37:33:66:34:f3:f1:5f:a1:97:0d:
                    a5:2f:12:de:47:3a:8a:76:c2:ab:b1:9b:4f:3d:aa:
                    be:ca:b1:1d:f6:d8:01:6a:7f:a4:a3:ed:2a:19:3b:
                    a9:f0:86:93:39:71:03:38:86:af:f4:8a:9b:ad:80:
                    a7:ca:26:4c:56:69:6c:56:06:f4:19:1a:58:9e:5b:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:50:0F:DC:CE:6A:6E:7F:91:B5:54:28:49:9C:4B:1D:0D:86:F7:27
            X509v3 Authority Key Identifier:
                keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:00:80:95:88:6d:2f:04:9c:f5:17:9a:85:85:f4:7b:fc:
         b6:f1:ac:fa:e1:19:64:d1:a0:69:4d:3e:5a:08:f5:c4:4d:83:
         26:46:f0:ca:a1:a0:1b:b9:35:5b:9b:37:9a:5c:02:8d:fa:8d:
         10:6a:78:cf:42:8e:51:03:ee:ae:e5:5a:10:b6:c5:88:9f:46:
         fa:40:87:bc:84:ef:a7:2e:5b:5a:32:41:4b:63:8c:0d:e2:60:
         ed:d3:c3:f7:6e:89:71:80:a9:1f:2e:72:a2:76:66:0b:d2:8c:
         d2:03:22:20:56:35:6e:b4:11:88:31:d0:35:a1:37:67:ea:19:
         ed:37:58:91:54:10:b9:92:e9:28:19:51:68:66:d0:9b:82:7e:
         cf:47:4d:7a:1b:d6:17:8c:bf:cd:b9:fa:fb:3d:9c:d2:12:e6:
         0e:df:c2:be:31:60:48:c3:ea:0c:16:36:4b:46:35:ca:67:41:
         f3:f2:4c:e6:0b:91:61:d1:95:d9:8d:bf:c7:cd:b2:53:cb:7f:
         75:d8:8a:2e:1b:ed:27:df:7e:52:a7:98:fb:26:1a:98:ac:bb:
         12:6c:dc:b7:b2:76:15:c4:04:df:de:e5:fc:92:68:a6:03:d6:
         7c:56:83:d4:cb:82:ac:9c:9d:4b:d1:dc:78:d6:2b:0c:b4:98:
         2a:ed:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:12 2024 by rpki-client on console-fra.rpki-client.org