Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          PPI8NeSzFgHA7HqzOeJI0ktMD7C6VU6XQWj2eO+/d6A=
Subject key identifier:   39:D5:48:4E:54:41:23:42:3F:BD:FC:D0:CD:B0:6B:40:19:B8:F5:D5
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019048685403CF7EDE891FCBEE14FA0B9603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          11DD
Signing time:             Mon 24 Jun 2024 04:01:55 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:55 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:55 +0000
Files and hashes:         1: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: kOhgRsVSPL9OQkukNrV6MILtz8P6w8ttU7Bb7vbBXT0=)
                          2: yo8ZqxdIfDt-MqMWvXNK8K8pPYI.roa (hash: VxAtrBzorR5PgKS2HAW+16G4t+6adVYC2syIodpKoZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:54:03:cf:7e:de:89:1f:cb:ee:14:fa:0b:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Jun 24 04:01:55 2024 GMT
            Not After : Jun 25 04:01:55 2024 GMT
        Subject: CN=39d5484e544123423fbdfcd0cdb06b4019b8f5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:87:f9:94:c2:85:35:28:36:04:5d:58:9d:
                    7c:ff:15:06:42:7c:6b:72:02:41:75:3c:02:b8:24:
                    9c:91:55:ff:ef:26:83:2e:bd:ce:4b:58:80:26:61:
                    86:9b:ea:73:1d:5f:78:d8:96:84:ad:ef:08:c2:a5:
                    7e:b9:c2:70:aa:5f:30:d8:f2:0f:27:d2:78:6e:5f:
                    4e:55:92:80:82:0f:73:26:0a:20:b2:32:ad:36:89:
                    bc:38:5b:21:9b:f6:83:79:a3:61:42:12:13:44:53:
                    49:cc:04:6c:52:dc:cd:90:54:1e:3d:9b:fc:ec:ea:
                    f7:88:81:d9:bf:ac:f9:62:d5:0a:38:9d:4b:f6:38:
                    3a:b7:f9:0b:04:b8:b9:fd:34:4c:05:eb:25:72:2e:
                    19:81:04:4a:4c:95:50:d3:ab:19:4b:f3:39:be:38:
                    9d:0d:5a:d5:ad:6b:70:37:22:a5:d2:bc:12:41:e1:
                    f9:4c:f5:0a:89:16:2c:46:be:2c:6f:33:d0:cd:40:
                    f6:ee:5f:25:e9:30:62:71:cd:29:2c:ad:a4:44:36:
                    80:ae:0c:da:0d:12:41:6e:21:65:28:32:b2:f3:9c:
                    85:f7:05:e0:ef:1e:07:2a:bb:29:d2:b0:21:b8:45:
                    c3:30:cf:dc:6b:02:27:7e:b2:c4:e7:48:f8:37:91:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:48:4E:54:41:23:42:3F:BD:FC:D0:CD:B0:6B:40:19:B8:F5:D5
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:ab:7c:fe:77:d8:23:e0:74:7a:9d:f9:51:4c:b6:fb:4c:
         1f:e7:fa:92:4b:e8:f5:85:47:4e:cb:b7:42:31:0d:0e:2a:b8:
         ee:65:ad:44:23:e7:ab:6d:2e:84:e3:ee:c0:81:00:72:3f:74:
         88:84:de:6c:de:68:4d:eb:75:af:d6:3b:e1:8e:ab:f0:bc:4d:
         00:33:6c:2e:fd:d8:10:4e:7e:5d:8a:e0:09:47:b7:dd:50:50:
         66:91:c4:b5:c6:71:ac:f0:e7:c5:28:15:2e:3e:83:6a:d2:9a:
         13:11:4f:81:de:16:23:ed:39:ac:c8:df:f2:c9:df:62:20:97:
         e0:4b:13:e6:50:ec:f3:fd:12:df:18:f5:40:91:c9:15:28:5f:
         93:c2:83:09:98:b1:be:e3:15:82:47:8c:e4:c5:9b:9d:49:a6:
         11:a1:75:af:d3:f8:45:bc:93:70:17:41:48:57:2d:b5:30:40:
         66:10:d1:22:e4:43:48:a6:39:60:ae:54:34:62:be:05:4f:99:
         c7:c7:b8:45:d8:b0:a4:48:e7:68:53:d4:7e:37:cc:dc:22:8a:
         9b:fa:c9:7a:5b:78:82:0a:67:35:fe:12:20:36:17:25:89:74:
         22:ce:f8:e2:34:a8:2e:38:42:bb:3d:54:fb:d0:95:a9:65:62:
         a0:3d:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:36:27 2024 by rpki-client on console-fra.rpki-client.org