Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          tQx3vW9JVS53Mm2ZmeqT6xZ33IQSJqBJLGekgRsrx30=
Subject key identifier:   CF:84:CD:A0:CB:CF:C0:42:84:B8:B5:1A:02:EB:83:EC:3C:C2:D5:E9
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       01901B57C77E1652598C29AEC31856E3EE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          0D58
Signing time:             Sat 15 Jun 2024 10:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:55 +0000
Files and hashes:         1: kgfC2MhvKjPAmPquecec_xdJBmY.roa (hash: fhbVNacdrQDLqhAwFfpiMJUfLRz+7XmpoUMdy+v5L74=)
                          2: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: xThNnwndPweXbSx+dhbr5PblpA0dL7/PKtkh5ixFADc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:c7:7e:16:52:59:8c:29:ae:c3:18:56:e3:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Jun 15 10:00:55 2024 GMT
            Not After : Jun 16 10:00:55 2024 GMT
        Subject: CN=cf84cda0cbcfc04284b8b51a02eb83ec3cc2d5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:4c:be:c1:c4:7c:0e:1c:41:5d:cf:d6:de:
                    09:cc:e7:3e:51:76:8d:29:0a:c4:61:fe:2f:cc:e5:
                    ec:e8:9b:a6:84:60:d0:2d:e3:63:f8:9f:a7:77:ac:
                    a7:ac:ec:85:3d:75:e9:f5:da:d9:34:64:0a:f4:1a:
                    c9:bb:ea:fb:f3:6f:a3:c3:b0:92:66:86:47:dc:e3:
                    e9:6d:8d:0f:8d:59:5c:e2:18:59:4a:e8:a7:06:b3:
                    ec:d9:58:1f:cd:b7:28:28:f7:92:74:73:85:2e:a0:
                    4b:46:8f:e4:c9:c7:94:b4:0a:93:30:13:02:63:cd:
                    6b:8c:48:a2:13:42:f0:44:fe:fc:15:22:dc:25:83:
                    9c:c6:fd:cf:9b:db:64:51:01:11:1e:43:f3:3a:04:
                    85:6f:53:93:40:42:2f:d0:ce:88:e4:b0:b6:72:69:
                    b6:0f:fc:85:6b:88:5e:cf:ff:7e:10:eb:c3:0d:83:
                    74:f4:51:3b:0c:5a:fc:62:d2:e6:2c:a3:34:a7:94:
                    35:fe:de:62:56:21:10:d0:b0:d2:31:ef:07:89:ae:
                    d5:0d:a7:a4:6d:70:e6:29:a9:57:f4:2e:7e:69:04:
                    51:06:5b:dc:98:fa:4e:de:69:7e:e3:20:10:f9:78:
                    c2:77:0d:cc:d3:e9:0e:13:c8:31:b2:8a:47:21:79:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:CD:A0:CB:CF:C0:42:84:B8:B5:1A:02:EB:83:EC:3C:C2:D5:E9
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:47:2e:17:ae:66:f9:49:c7:d5:29:74:9a:ab:1f:22:16:
         bf:ac:f1:08:4c:08:40:a2:23:93:26:ec:a4:ca:35:ad:c7:af:
         c0:b0:69:c4:b7:fd:7c:ee:01:cc:f8:7b:5c:2c:dd:17:4a:06:
         25:ea:2f:10:e1:f2:3c:4d:41:0b:62:19:ca:0f:a4:a1:80:97:
         64:ce:11:57:ad:b5:0e:ea:b9:e3:c5:33:2d:32:9f:45:ef:22:
         f3:21:cc:15:03:f3:a2:5b:39:46:85:35:f3:f6:94:e9:d6:42:
         f1:97:0b:37:fc:1e:3a:ac:b6:33:c3:b0:80:b0:6d:25:9a:2a:
         2c:f5:a3:db:98:27:e7:79:58:0f:86:39:b9:17:52:30:33:7c:
         b9:94:06:d5:4d:80:b8:36:2f:02:69:fa:6c:82:c3:07:43:fa:
         19:77:19:ca:b0:2d:c6:7b:88:d9:f7:68:f6:16:f5:42:b8:98:
         98:94:ab:44:01:b4:23:26:f0:8f:3c:0b:99:e0:fc:5f:44:5c:
         26:73:28:43:b3:d6:89:a6:d5:b7:fc:0d:2a:59:08:02:dd:02:
         84:0d:34:e3:07:bb:6c:e9:35:66:68:1f:ef:fa:28:ed:ae:b2:
         98:eb:8e:13:94:af:ec:77:fc:44:84:f9:13:6b:30:c9:0f:4b:
         22:8b:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:39:25 2024 by rpki-client on console-fra.rpki-client.org