Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File:                     wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier:          4KaNLo55+yHqvPb5nAYXz5E5fYrWJU+Psje6fistH44=
Subject key identifier:   AB:13:27:44:5F:D8:5D:27:73:2B:98:71:53:63:E2:41:60:8F:01:A4
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer:       /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial:       01901D0EF60E3A488E554B089D5025063E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 18:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:38 +0000
Files and hashes:         1: DxV1p9aD8CQkzJ1HeQl7L-g3-VY.roa (hash: hBcoF37TdpiYLw2j9VYFlJyUx1sU9aqkjH0yZ9U2OiE=)
                          2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: DkFbumHo/al9Tjay+SqKQR3xKBtT01Mo1UqKoBbqGgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f6:0e:3a:48:8e:55:4b:08:9d:50:25:06:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
        Validity
            Not Before: Jun 15 18:00:38 2024 GMT
            Not After : Jun 16 18:00:38 2024 GMT
        Subject: CN=ab1327445fd85d27732b98715363e241608f01a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:62:f1:4c:27:dd:a0:aa:38:34:1a:6a:07:
                    53:70:cf:c9:4b:68:ff:f9:18:c9:f1:be:84:a0:17:
                    04:46:4f:ad:d9:75:9a:d6:e4:71:6d:bd:99:a8:00:
                    45:90:62:63:ff:9c:e1:d5:7b:57:64:2d:ad:55:d6:
                    26:45:aa:57:c3:84:b3:cb:23:2e:df:a2:49:43:f8:
                    4e:77:36:05:a6:d6:7a:3c:2e:a9:09:7b:e5:6e:bc:
                    37:41:35:34:b1:06:27:16:5b:a7:86:c9:06:4f:cb:
                    e0:5d:ec:ae:86:17:cd:e8:44:e6:89:e2:84:52:65:
                    07:59:97:60:9e:2c:9d:21:5f:3e:d8:37:e3:b0:bd:
                    b2:d9:8e:63:b3:6b:20:e3:e0:73:37:ff:11:d2:ad:
                    1b:74:9a:5e:41:5b:a1:82:60:dc:e7:42:db:b3:0c:
                    01:20:d6:9e:4f:1e:cf:87:05:3c:8a:78:81:15:5d:
                    98:6a:c4:d0:64:3b:0e:65:99:2c:28:9b:d3:63:0e:
                    3c:d7:8b:34:68:88:bd:0e:eb:43:ed:b4:51:60:65:
                    58:12:84:be:b7:61:7b:e9:4a:d5:60:a7:88:03:06:
                    b7:7c:db:f2:99:b9:58:d0:ae:d6:76:f6:1b:c7:8b:
                    04:e1:71:af:5c:f7:b9:83:43:3c:d2:33:1a:e8:af:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:27:44:5F:D8:5D:27:73:2B:98:71:53:63:E2:41:60:8F:01:A4
            X509v3 Authority Key Identifier:
                keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:46:15:f5:ad:ef:c4:a4:23:84:2c:a7:eb:66:6c:a8:89:
         54:97:33:86:9f:e2:ad:e2:6e:91:aa:6e:49:16:e2:ad:7c:22:
         95:d1:fa:a3:c9:23:6d:5d:3c:50:1a:f9:54:d3:ee:41:17:c5:
         87:7d:06:c9:52:67:22:1b:cb:53:97:28:56:3d:8c:f0:05:1e:
         07:35:ac:c4:da:39:41:72:57:26:85:14:47:c6:e9:16:29:e3:
         81:ce:dd:a1:c6:2d:ca:91:6e:2d:6c:0a:97:57:03:ec:b8:37:
         ff:19:59:28:36:e2:56:31:21:17:d0:08:ee:18:6e:4a:8b:80:
         a1:ff:bb:75:fe:58:e2:a3:d3:37:31:3d:4b:3d:ad:3c:d4:61:
         8e:06:76:88:99:a3:98:2a:6c:84:ee:cd:63:09:90:09:16:41:
         2a:11:e6:35:6c:42:39:05:64:31:79:bc:be:bb:8e:f2:a3:46:
         df:94:4b:06:95:f8:96:62:40:e0:e4:bf:3c:a5:dd:40:d6:6d:
         47:9d:b9:ef:af:b2:f3:7b:b2:c0:b6:17:79:0d:a2:22:2b:94:
         60:1d:ff:7e:1c:3b:66:24:3a:4e:96:62:1e:b1:fe:44:23:54:
         80:9d:e5:90:d6:a0:df:b5:1e:df:84:fb:5c:cd:4f:ea:f0:86:
         a9:c1:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:42 2024 by rpki-client on console-ams.rpki-client.org