Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File:                     Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier:          1ytBDEofTHfaT0ka2Iz2fFhN4Sq5HQOtNxFjrC8/Qc0=
Subject key identifier:   13:12:26:1F:1F:9E:A7:6A:E8:3C:44:2D:52:50:48:BF:46:DD:A3:53
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer:       /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial:       01903E1B265447DDD9E05D16130F495510D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 04:01:24 +0000
Manifest this update:     Sat 22 Jun 2024 04:01:24 +0000
Manifest next update:     Sun 23 Jun 2024 04:01:24 +0000
Files and hashes:         1: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: hJTwWIdKXhf0T/gPgpoIzYYDjk9caJs26D3HFxL2sEI=)
                          2: qRQJ0SQ_f3Rvasa3AfzSu5I9wRI.roa (hash: oRutdqHwqPnSDcqjcBMU6gUFwIvBs8PWS+2lRpzlbFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:1b:26:54:47:dd:d9:e0:5d:16:13:0f:49:55:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
        Validity
            Not Before: Jun 22 04:01:24 2024 GMT
            Not After : Jun 23 04:01:24 2024 GMT
        Subject: CN=1312261f1f9ea76ae83c442d525048bf46dda353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:f5:af:d2:59:65:89:f4:50:37:bc:1e:98:
                    3f:99:7b:8e:35:bc:b3:a6:89:5a:51:8a:42:8e:1f:
                    e0:53:c1:0e:14:1f:57:ce:d6:17:78:20:13:fd:57:
                    1a:6a:65:44:21:f0:8e:e5:99:c4:91:01:ef:05:aa:
                    2d:3f:cb:e5:c0:01:b2:9d:4e:ff:c5:b7:8b:3c:96:
                    02:b0:18:54:b9:cc:fa:df:f0:bc:26:86:df:d1:99:
                    9e:23:75:8d:ae:c7:40:d2:b4:3d:3b:6f:ff:43:1e:
                    31:bf:f1:82:ac:9f:94:8b:9d:e4:0c:3d:99:6e:63:
                    27:f7:a8:ba:2b:12:33:c3:6d:76:e9:55:51:98:a3:
                    6d:34:27:a4:0a:67:f1:24:2c:c3:a7:77:63:7d:bd:
                    e2:88:e2:cf:8c:ff:c4:11:e9:a5:14:0d:5e:34:7f:
                    e4:ab:8e:bd:84:8f:f9:18:00:de:06:3d:44:b8:ff:
                    43:05:8e:8d:ac:e9:ba:c2:6d:f6:8e:61:bd:50:68:
                    ca:ca:81:2f:23:00:6a:5e:da:52:c6:0d:ab:bd:45:
                    05:cd:48:bd:ee:e3:b3:8b:47:26:3d:b3:28:e6:02:
                    c7:ce:bd:ed:f8:3f:59:66:95:50:60:41:19:ea:0f:
                    7b:e4:01:bc:8c:16:ac:f3:52:3e:80:1b:f0:6b:ff:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:26:1F:1F:9E:A7:6A:E8:3C:44:2D:52:50:48:BF:46:DD:A3:53
            X509v3 Authority Key Identifier:
                keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e7:f2:d1:3e:00:78:fb:34:9e:34:08:20:6f:e2:28:3f:56:
         48:06:9c:77:8f:ee:48:78:2e:17:27:13:12:60:f4:ed:da:fc:
         ed:28:9b:0d:8e:a7:b6:34:3f:cf:31:87:c3:87:74:27:cf:fb:
         4d:c5:01:9e:2a:a8:20:b9:82:fb:6d:89:84:f7:b3:57:ae:3b:
         0d:32:fd:ba:24:89:b3:33:0f:79:b8:08:a0:ac:bb:20:23:97:
         90:f1:36:b6:4b:69:b1:05:91:34:f1:2d:f7:dc:f9:f1:e8:7e:
         f7:25:1c:4e:29:43:e2:4a:10:09:91:ec:32:35:26:36:e1:1a:
         b2:f5:a7:8d:45:17:d4:b1:76:5c:9b:d3:8b:a1:3f:a0:c5:16:
         11:0e:56:20:5c:d6:43:9b:8e:73:dc:35:6e:af:43:53:04:c1:
         60:38:62:37:7f:8a:e1:86:0d:e1:9e:64:31:3a:9f:4a:01:cf:
         62:f0:ab:c8:48:a2:25:16:55:75:23:bf:98:74:e9:e1:1b:73:
         3d:f3:22:4a:7b:20:cf:1b:0b:a8:6d:29:eb:a8:6b:30:6f:9f:
         4f:5d:75:40:84:1d:27:41:8f:12:34:ae:95:44:87:4e:b1:59:
         79:c1:25:ad:9d:70:ea:19:1c:ff:19:9b:3a:3a:61:84:c1:ec:
         a4:57:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:07:49 2024 by rpki-client on console-ams.rpki-client.org