Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File:                     wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier:          nM97rfvX81zkpwOEsOy3DYNB7IKYIBkXE/UYhOGvTKY=
Subject key identifier:   77:B7:F2:F1:EE:B8:81:7D:15:35:C4:17:9B:D6:F6:06:A0:66:D9:7F
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer:       /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial:       01901DEBBD520D31375B6ADF6402B7462582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number:          02C1
Signing time:             Sat 15 Jun 2024 22:01:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:46 +0000
Files and hashes:         1: a7r43nSeeFkucPZdOIY_ccU3h9w.roa (hash: eqskUS+WB+IzzDa+JNssKTWqfGmm3nTWPX9Gh40Wbkc=)
                          2: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: RnHkSuwiNuV5zgc4CmDDQUE/H+oUt23HOC0SLdcSIQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:bd:52:0d:31:37:5b:6a:df:64:02:b7:46:25:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
        Validity
            Not Before: Jun 15 22:01:46 2024 GMT
            Not After : Jun 16 22:01:46 2024 GMT
        Subject: CN=77b7f2f1eeb8817d1535c4179bd6f606a066d97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:aa:b1:93:22:73:02:4a:02:82:d3:07:6c:
                    a7:e4:d9:c8:be:21:7e:e4:52:d0:d1:6d:29:2b:05:
                    40:fa:20:cb:3f:c0:46:d3:84:93:d6:29:7a:a6:06:
                    80:74:6e:ff:f3:e6:2d:ee:ce:a3:40:93:2c:d1:c9:
                    f4:15:87:60:38:c8:06:9e:5c:df:ec:62:1a:34:0e:
                    b7:f1:54:9a:12:bb:a8:76:e5:05:b3:6e:36:be:b0:
                    1f:f7:60:37:4f:c6:4c:c7:fa:c4:f9:48:83:f6:c9:
                    84:1a:62:0b:b8:57:94:8d:d4:0f:87:7c:db:e7:1e:
                    83:07:c0:74:34:93:69:b3:d5:87:76:05:2c:7d:a7:
                    27:a0:93:5d:c4:c3:4e:76:55:6e:3e:e5:51:00:0c:
                    8f:90:7b:93:aa:a3:4a:8e:fb:8a:ec:cf:7c:ff:d5:
                    a1:0e:e0:fb:55:3c:39:50:d9:92:f4:d2:46:04:27:
                    45:09:cc:cc:b2:c1:9d:ba:2f:1d:f2:1d:22:d7:32:
                    a2:38:9a:14:59:41:45:97:fe:50:3c:e7:3f:4c:00:
                    60:69:65:a0:a4:02:ca:62:32:c2:2c:ad:e1:8e:b7:
                    41:56:b1:a4:a3:a8:fe:99:b7:c4:6d:15:6c:52:68:
                    a0:90:b1:34:4d:45:32:ae:0c:09:71:53:22:b4:e1:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B7:F2:F1:EE:B8:81:7D:15:35:C4:17:9B:D6:F6:06:A0:66:D9:7F
            X509v3 Authority Key Identifier:
                keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:91:e4:4f:f5:74:0b:6c:25:f8:ad:27:1d:41:b5:1e:9b:de:
         da:5b:37:ec:df:6f:7a:0c:3a:0a:8c:68:d5:78:ba:01:f9:83:
         b9:cb:c6:5f:74:d8:8a:62:f1:ed:e8:4b:d7:d3:e6:2a:3a:b9:
         22:50:3a:6e:51:81:ec:ea:7b:e8:d5:ba:1d:4b:32:4d:d1:d6:
         e0:d0:b1:58:1a:dd:0b:1e:c4:5e:8a:e8:04:36:75:ec:a2:db:
         6b:cf:ed:c4:d3:42:bc:b0:ba:8c:8e:bc:4f:82:67:39:4c:4e:
         49:b8:4c:01:b2:07:57:0f:f5:d1:c7:a5:9e:6c:fb:e8:56:51:
         6a:13:5c:cb:23:2f:b9:ef:fa:0a:e3:92:38:c3:11:e4:b9:62:
         54:14:d1:87:65:1d:1b:54:20:55:9e:8e:24:e0:1a:c4:3c:dc:
         33:67:ff:65:22:59:d9:cf:e8:ad:30:3f:0b:5b:95:65:fd:11:
         07:f3:1d:22:f3:6a:31:fd:ef:1e:55:c3:54:19:61:76:e0:f9:
         c4:1b:c2:0d:e2:29:59:99:c3:f3:96:91:2c:29:02:2c:f0:7e:
         f7:e0:d9:5f:57:5b:85:4a:bd:62:ea:35:51:c1:bb:6f:f9:a9:
         ff:4e:75:48:ea:23:41:cf:da:7d:e8:5e:4a:1f:c0:c5:83:4b:
         93:30:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:14 2024 by rpki-client on console-fra.rpki-client.org