Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File:                     Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier:          rKsztukfWX0NK5RWv3wMCF9xiFrLjXuZufzP7QlM7pI=
Subject key identifier:   4C:04:3F:7F:03:83:BC:7F:22:14:AD:D1:E2:19:B7:C6:B2:47:2A:8A
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer:       /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial:       01904152E1C6FCDEABAD3C7D6F38D5C6233A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number:          11D6
Signing time:             Sat 22 Jun 2024 19:01:08 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:08 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:08 +0000
Files and hashes:         1: WYm6HiWXe7CcAoIXjgLxv1XOXYw.roa (hash: K03E70cVsXxErmg8AIFq/uPTCdk29kiWYnncdRWLxpQ=)
                          2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: 3VjxNCXzHku+N3D1bK1RMeC3DGWJ9kL4dhMhrn+I+qI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:e1:c6:fc:de:ab:ad:3c:7d:6f:38:d5:c6:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
        Validity
            Not Before: Jun 22 19:01:08 2024 GMT
            Not After : Jun 23 19:01:08 2024 GMT
        Subject: CN=4c043f7f0383bc7f2214add1e219b7c6b2472a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:7e:0b:06:bf:ba:a0:db:8a:c1:36:b4:5b:
                    fb:67:b2:da:5d:64:26:7d:4b:3e:b3:3a:de:d6:83:
                    e2:f7:97:d4:af:a8:2e:c8:40:f4:40:d6:0b:b6:bc:
                    c2:f5:83:99:0c:a9:9f:c2:42:41:98:35:67:77:0f:
                    8f:01:75:1f:96:59:90:ff:79:2a:a6:43:79:ce:3e:
                    22:a0:06:43:77:5f:f1:d9:ad:7a:73:14:18:a7:8d:
                    c2:2a:92:46:3c:7c:a9:52:58:f6:c9:86:80:2b:81:
                    ee:78:80:da:6d:75:8f:20:d5:01:08:25:85:bd:23:
                    cd:97:b8:7e:6f:25:56:e1:90:1f:81:f4:ad:6f:00:
                    bd:49:89:e2:92:5d:82:07:41:6f:39:10:8f:ad:3c:
                    00:d2:f1:cc:af:e2:80:94:92:f8:16:c0:98:c8:a0:
                    6f:3f:72:46:8d:0b:5d:d4:34:48:97:1e:5f:26:79:
                    e6:72:92:b6:4f:33:2c:a6:c7:cb:e5:6a:de:a5:84:
                    b8:fb:6c:6e:2f:cf:79:c6:de:53:9d:27:7c:3e:c6:
                    5b:e0:c0:05:93:77:c7:b2:f1:e0:92:b1:44:5d:1b:
                    32:bc:0d:63:e9:f6:dd:9a:a4:30:87:40:dd:4e:02:
                    90:14:88:95:af:e0:3e:b1:b6:4f:82:ce:81:3b:32:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:04:3F:7F:03:83:BC:7F:22:14:AD:D1:E2:19:B7:C6:B2:47:2A:8A
            X509v3 Authority Key Identifier:
                keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:4f:38:a3:37:80:c1:1b:f5:bf:57:4c:2c:19:df:f9:3d:
         b4:ed:2e:d6:a0:a9:e1:78:90:51:33:45:bf:31:04:be:15:29:
         a4:fa:84:4b:08:4f:9c:4b:75:9d:8d:69:4f:a8:32:24:4c:1c:
         ab:bc:51:fd:82:4e:81:c1:e3:70:cd:67:fa:cc:7f:d5:4b:42:
         c8:3d:b4:f7:52:69:36:ba:86:d5:e6:25:fe:e4:44:24:bc:d5:
         a7:ee:1a:76:d5:6f:f7:c2:55:3c:2c:7f:3e:c6:a2:d2:ca:ed:
         b5:5d:43:df:5b:dd:03:19:7d:e9:0a:da:24:0d:33:e9:34:d5:
         65:c7:5d:b1:75:aa:a7:d2:b2:a8:1c:07:83:1b:b9:62:cf:9f:
         a7:46:e7:48:0b:be:ea:91:b5:aa:ff:a0:6e:6b:dc:53:db:f3:
         24:25:71:ca:a8:3c:6f:93:4a:31:fa:b9:69:3d:8e:61:5b:b6:
         e3:07:68:1e:0d:fe:20:39:cc:cf:af:02:2d:37:7f:6d:33:e8:
         18:b5:df:48:41:43:51:d4:a0:99:39:80:2d:be:d6:de:db:2f:
         e8:a0:23:68:61:5c:a9:4a:43:0a:8f:37:8a:07:b6:00:bf:20:
         7d:43:a4:e2:d3:a6:25:bd:e9:fa:bf:b1:94:17:f6:92:23:1e:
         b0:b5:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:14 2024 by rpki-client on console-fra.rpki-client.org