Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File:                     X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier:          VHVd7mhW/7jSVUdam0IJPcHi/toYMxM9keAy5Sb530U=
Subject key identifier:   A1:0C:5E:AD:5E:CE:1A:9E:F3:A8:46:0E:FD:BC:17:4D:B2:DC:E2:FC
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer:       /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial:       019049B12FB1D8A4A2B281F1182051B4F89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number:          0CA7
Signing time:             Mon 24 Jun 2024 10:01:07 +0000
Manifest this update:     Mon 24 Jun 2024 10:01:07 +0000
Manifest next update:     Tue 25 Jun 2024 10:01:07 +0000
Files and hashes:         1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: 6CT20FeJYujJO71nbWEv8LBHOKLf50mSsYFlGnv+xUw=)
                          2: i3DwN6lJy8EPnTNtTaSWnpQMZXY.roa (hash: ySuXNuaplT8iRj4swZT+lEoDRhD6P1DW5EJ5EiRiXn8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:2f:b1:d8:a4:a2:b2:81:f1:18:20:51:b4:f8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
        Validity
            Not Before: Jun 24 10:01:07 2024 GMT
            Not After : Jun 25 10:01:07 2024 GMT
        Subject: CN=a10c5ead5ece1a9ef3a8460efdbc174db2dce2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:69:a9:8f:cf:68:ab:2e:3a:9e:b3:b4:c5:
                    1a:5e:7c:52:c9:89:92:8a:5b:05:0e:a7:72:26:6e:
                    55:84:94:90:fa:26:30:cd:cf:d4:36:b9:e6:f7:c2:
                    c0:24:d1:2d:8b:32:bb:9f:75:59:0d:5e:2e:c9:47:
                    8a:85:58:cb:e1:a4:73:ef:28:a8:44:cb:31:83:a7:
                    33:75:a0:fd:15:78:ae:5a:b8:58:9d:6f:c4:3b:ae:
                    07:d0:83:8c:fd:e3:36:42:96:14:34:e3:36:71:e3:
                    34:fa:ab:19:91:35:2a:36:3d:2d:7e:b6:1f:7f:1f:
                    f2:22:c4:c6:02:fd:80:0c:e8:15:14:f2:98:08:72:
                    26:da:65:24:55:02:50:a0:b2:47:b5:bc:a6:a8:4d:
                    54:4a:77:e2:94:2a:bb:b4:75:17:40:b3:75:82:74:
                    10:6c:f7:91:03:d8:63:04:a5:33:2d:a3:6f:d3:82:
                    0c:d2:5f:c5:54:23:0e:f4:80:bb:b5:5d:62:ce:d0:
                    fd:b0:b5:c7:26:c0:e5:be:84:fb:7c:93:8a:1c:7b:
                    c0:72:21:17:3a:7f:f3:8f:da:08:b4:31:b5:b7:98:
                    19:1d:57:dd:74:f4:6c:22:ea:43:55:13:46:2e:08:
                    be:a4:d7:bc:61:3f:8f:74:5d:b5:18:a7:16:c7:5f:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:5E:AD:5E:CE:1A:9E:F3:A8:46:0E:FD:BC:17:4D:B2:DC:E2:FC
            X509v3 Authority Key Identifier:
                keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:40:0a:a7:e0:5a:83:d5:fd:13:95:b5:00:6c:41:3d:82:
         0c:f6:ee:37:df:6d:03:01:c8:47:07:29:8e:a8:ad:3e:c7:86:
         0e:e3:36:4e:88:95:b4:33:18:8e:d8:5c:58:12:a5:37:4c:4e:
         34:bb:3c:67:e2:bc:03:94:8a:65:02:55:ee:0d:89:98:f0:e7:
         0f:d1:44:3d:12:ae:ad:42:63:c6:54:3c:71:5c:be:84:38:6d:
         0e:40:af:f0:2e:de:f9:6f:c0:a2:8c:0c:35:11:a3:0d:c2:fd:
         3a:34:a7:8c:d3:a1:d7:4f:d1:eb:1d:b2:d7:d0:31:9d:44:f5:
         61:e3:54:9f:93:f7:8a:62:bf:fa:43:82:dc:dd:e5:46:b8:59:
         26:db:8e:49:89:75:5b:d3:93:c8:18:fe:56:af:99:3b:42:36:
         47:76:b2:c9:ec:43:69:f4:60:69:85:5d:2a:08:30:59:d7:15:
         96:2e:92:26:92:37:74:9a:17:c4:59:12:eb:b8:c8:c8:3e:7f:
         aa:42:e2:ca:69:14:99:5d:4f:03:81:41:45:be:b7:1f:5f:5b:
         2f:2b:ad:1c:5d:cf:4b:e1:b8:bc:87:e8:cc:0e:63:b7:07:f7:
         63:51:d2:a9:08:e2:a1:63:33:ad:1f:c6:dc:5a:c9:c4:e3:5c:
         1f:4c:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:30:37 2024 by rpki-client on console-ams.rpki-client.org