Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File:                     WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier:          IEQbX3qLpWxu0DDFUUaSQxowgmx15wclJIXGVCv1qAo=
Subject key identifier:   43:9F:9D:E9:B2:F7:94:8D:F3:36:BC:A2:58:B1:32:78:C6:00:42:44
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer:       /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial:       01901EFD587A56F65F89D0F242F280403570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number:          04F5
Signing time:             Sun 16 Jun 2024 03:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:37 +0000
Files and hashes:         1: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: pPi0ysiOeFnmkogpyKdjiFnHACHX0p1m9JHHc81mtfU=)
                          2: e8keRH_fZsFbx29y6vNPeDnTKk8.roa (hash: LTKeB9qOYlGSkChRjVpoZfCsHhyZXmMAd2Oo/BNtE2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:58:7a:56:f6:5f:89:d0:f2:42:f2:80:40:35:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
        Validity
            Not Before: Jun 16 03:00:37 2024 GMT
            Not After : Jun 17 03:00:37 2024 GMT
        Subject: CN=439f9de9b2f7948df336bca258b13278c6004244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:00:bc:6d:58:64:db:47:35:84:18:f1:01:
                    07:52:3c:1c:67:4b:ae:08:57:7a:eb:8b:1e:4c:c6:
                    3c:27:58:86:b5:85:09:e4:b3:a1:d9:af:00:89:93:
                    1e:dd:85:de:69:dc:3e:2d:5c:41:43:d7:78:9c:cf:
                    00:44:ec:66:7f:d4:34:96:2f:10:c6:9e:2d:0d:48:
                    37:88:61:44:6f:d6:2d:de:28:ff:e5:19:2d:f3:1d:
                    3a:47:48:20:7f:e9:7b:73:f6:71:b5:83:bc:35:88:
                    f2:94:83:57:f5:d3:19:23:b5:15:e5:43:37:ee:8f:
                    97:09:73:82:a9:fd:20:27:cf:25:06:4b:47:2c:b4:
                    f4:1d:64:4e:37:31:6e:24:1e:4e:76:27:f8:d6:c8:
                    f3:f7:a8:68:3d:69:ae:e6:9f:f3:1b:87:f9:93:28:
                    f0:55:73:3c:ff:67:3b:88:09:bc:6c:57:b6:fa:86:
                    32:f3:d5:e1:34:58:30:af:c0:06:47:4a:6f:dc:30:
                    d4:f8:c1:70:c5:e4:0a:6f:8e:97:74:1b:11:a4:a8:
                    2d:16:f0:6b:9c:87:a5:22:63:68:8e:6f:e6:6c:03:
                    cc:62:4b:7e:b8:28:4c:a3:78:e4:39:61:0d:ea:d5:
                    12:32:e1:75:97:f5:03:44:77:23:fc:5e:e0:bc:9e:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:9D:E9:B2:F7:94:8D:F3:36:BC:A2:58:B1:32:78:C6:00:42:44
            X509v3 Authority Key Identifier:
                keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:42:91:7c:d3:15:e3:d3:a6:44:fe:1a:4d:81:c4:5c:93:
         61:7a:bd:9c:c6:00:5a:08:6d:64:b7:98:b7:fe:8d:a1:0a:f2:
         66:89:cc:58:04:aa:9a:24:2f:ea:de:d6:ba:3f:2e:a0:bc:75:
         42:b5:44:b9:28:91:48:d0:c7:36:5b:e4:28:05:1e:03:77:7e:
         33:8e:76:99:0e:ca:3d:8f:13:a5:09:c9:6d:d4:96:d9:b8:13:
         fe:fe:05:b8:e2:22:b4:aa:0e:64:cf:e1:cd:18:c9:5e:ed:14:
         f7:0f:0e:11:4c:46:25:ea:1b:39:f6:b7:f9:c2:ad:3e:df:d3:
         82:f8:aa:ab:2f:38:78:42:7f:a3:de:24:f5:6b:93:7f:f8:4e:
         8b:7f:a8:22:d9:97:3f:be:d5:a1:08:58:6f:85:99:94:32:97:
         43:80:08:e8:9a:8c:bd:76:f3:29:a1:b9:03:61:36:a9:a8:31:
         6d:6c:fb:16:bf:5f:7b:2c:17:b2:96:72:92:84:ac:54:38:51:
         23:62:41:b0:3a:6b:82:f2:ae:ca:e0:4f:5c:17:2c:96:c5:53:
         4c:c3:37:06:95:43:4d:92:4c:35:b2:35:9d:55:f1:8a:ba:8e:
         b5:58:91:ca:0f:72:2b:75:a3:78:ce:da:ad:13:86:5f:17:47:
         93:1a:64:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/Vh6VvZfidDyQvKAQDVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTVkMmUzNDVhMWY0ZGFhNGVkZmU3YzA1Y2U1ZGY3NmI1
OWFjZjAwHhcNMjQwNjE2MDMwMDM3WhcNMjQwNjE3MDMwMDM3WjAzMTEwLwYDVQQD
Eyg0MzlmOWRlOWIyZjc5NDhkZjMzNmJjYTI1OGIxMzI3OGM2MDA0MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpAAvG1YZNtHNYQY8QEHUjwcZ0uu
CFd664seTMY8J1iGtYUJ5LOh2a8AiZMe3YXeadw+LVxBQ9d4nM8AROxmf9Q0li8Q
xp4tDUg3iGFEb9Yt3ij/5Rkt8x06R0ggf+l7c/ZxtYO8NYjylINX9dMZI7UV5UM3
7o+XCXOCqf0gJ88lBktHLLT0HWRONzFuJB5Odif41sjz96hoPWmu5p/zG4f5kyjw
VXM8/2c7iAm8bFe2+oYy89XhNFgwr8AGR0pv3DDU+MFwxeQKb46XdBsRpKgtFvBr
nIelImNojm/mbAPMYkt+uChMo3jkOWEN6tUSMuF1l/UDRHcj/F7gvJ57NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOfnemy95SN8za8olixMnjGAEJEMB8GA1UdIwQY
MBaAFFqV0uNFofTapO3+fAXOXfdrWazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BYUzQwV2g5TnFrN2Y1OEJjNWQ5MnRaclBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xYWRmM2MtYmEzMy00MzViLWE2ZDUt
OTU3YWFiYmM4NDgzLzEvV3BYUzQwV2g5TnFrN2Y1OEJjNWQ5MnRaclBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xYWRmM2MtYmEzMy00MzViLWE2ZDUtOTU3YWFiYmM4NDgz
LzEvV3BYUzQwV2g5TnFrN2Y1OEJjNWQ5MnRaclBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX9CkXzT
FePTpkT+Gk2BxFyTYXq9nMYAWghtZLeYt/6NoQryZonMWASqmiQv6t7Wuj8uoLx1
QrVEuSiRSNDHNlvkKAUeA3d+M452mQ7KPY8TpQnJbdSW2bgT/v4FuOIitKoOZM/h
zRjJXu0U9w8OEUxGJeobOfa3+cKtPt/Tgviqqy84eEJ/o94k9WuTf/hOi3+oItmX
P77VoQhYb4WZlDKXQ4AI6JqMvXbzKaG5A2E2qagxbWz7Fr9feywXspZykoSsVDhR
I2JBsDprgvKuyuBPXBcslsVTTMM3BpVDTZJMNbI1nVXxirqOtViRyg9yK3WjeM7a
rROGXxdHkxpkkA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:57 2024 by rpki-client on console-fra.rpki-client.org