Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File:                     PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier:          l+qHwpvgkgLJMU/MP1tqsb/P9IM/v0iym1scMVDBHD8=
Subject key identifier:   88:74:74:39:B3:1D:C2:90:A2:47:E4:BF:0B:8A:48:2E:F4:7C:12:4E
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer:       /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial:       01901DEADD3C09A312B11862D911703588CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number:          0D17
Signing time:             Sat 15 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:49 +0000
Files and hashes:         1: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: t20gTtoUW6lTO6dcL4NtATFfe87qyfmH0WEMnaRof1c=)
                          2: tDZsyW3iTPAuDOXO7VMGk6VLL14.roa (hash: 3h+ZJt5W4MNfkrd5M4UIhgyRDobWLwbNau5FNRwwp7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:dd:3c:09:a3:12:b1:18:62:d9:11:70:35:88:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
        Validity
            Not Before: Jun 15 22:00:49 2024 GMT
            Not After : Jun 16 22:00:49 2024 GMT
        Subject: CN=88747439b31dc290a247e4bf0b8a482ef47c124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:36:94:90:e1:ac:fe:f6:f3:d4:b9:2d:d0:
                    13:3a:8b:cf:24:3f:38:93:d0:08:c0:db:92:1f:32:
                    c0:e0:80:fd:d7:d0:ea:3d:d9:d4:ab:8b:54:95:db:
                    1d:7c:6c:91:17:f5:2f:d1:4e:23:42:4f:d7:88:da:
                    16:80:e2:8e:22:28:6b:53:6e:82:0f:18:a3:97:b5:
                    72:e1:b1:8a:40:3d:6a:36:1e:9c:61:1d:90:34:e5:
                    90:8b:97:b4:2c:f4:24:5e:71:f4:08:63:c2:e6:4e:
                    fa:32:62:4e:6b:79:ee:e8:6b:b1:27:1d:68:42:ca:
                    30:38:af:81:26:13:e1:0f:eb:ae:ed:71:25:58:14:
                    98:ed:01:e6:53:a0:7d:54:23:41:fb:40:1d:4d:e2:
                    ae:1c:f0:df:63:b8:14:06:22:76:a5:3a:1d:12:2d:
                    4b:ad:79:0e:61:e5:3c:05:22:c0:72:85:98:85:24:
                    37:6f:85:b6:73:b9:f0:2a:45:98:23:7d:80:81:2f:
                    09:29:33:bc:25:66:2e:78:ba:70:fe:75:33:b0:af:
                    cc:f2:f8:f1:ab:5e:f5:89:17:09:19:ad:d9:7d:db:
                    c2:72:de:a9:21:8d:56:0d:fe:38:a4:35:62:c5:fd:
                    ad:2f:4f:87:d1:a8:1d:3b:5b:96:c9:36:a2:6c:e4:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:74:39:B3:1D:C2:90:A2:47:E4:BF:0B:8A:48:2E:F4:7C:12:4E
            X509v3 Authority Key Identifier:
                keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:3d:0d:dc:47:3f:61:5b:0b:98:e8:6a:aa:4e:b5:27:0f:
         6b:78:f2:1c:66:c0:7c:b2:18:f2:e6:e9:45:a0:3e:1d:93:d5:
         f1:a5:83:cd:fe:5e:b4:ed:e8:f5:95:48:e7:b4:fd:ce:ea:84:
         ec:81:12:c3:01:d3:a8:a7:0a:f3:b8:d7:13:ca:b8:3d:a0:ed:
         aa:fd:18:c9:2a:25:5f:c7:7c:78:29:c3:21:f5:8d:93:c7:1d:
         eb:df:27:c8:31:97:73:2c:06:f0:7e:af:7e:3c:ed:fd:db:84:
         d1:91:68:56:f0:4a:fd:1c:2c:0d:e1:1e:0a:90:f9:77:1c:9a:
         21:38:9d:ae:29:e8:c0:31:b1:72:58:e4:00:70:3e:1e:7d:a9:
         21:4f:cd:ee:6d:f1:66:35:06:64:6b:94:8d:ab:64:bd:e8:4b:
         2b:71:f3:55:3b:3c:34:c8:2e:0c:fa:3f:bb:f4:92:dc:cc:1d:
         cc:51:d4:db:b3:d4:cc:ce:b7:e8:86:b9:46:e3:18:33:ac:95:
         b9:f8:36:9a:04:fa:ce:73:d4:fa:e9:f3:a0:77:49:32:b3:b0:
         b6:03:99:5a:0b:22:5f:7f:8a:ae:2a:ef:67:fd:32:4e:64:f3:
         a7:43:fa:56:04:1a:14:f3:fc:63:68:47:1e:de:57:2e:ac:9f:
         0b:38:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:34 2024 by rpki-client on console-fra.rpki-client.org