Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File:                     WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier:          CG3uSYVH+whJcZo9P+GPkEAfJRdnPwX7VEemjKh7utg=
Subject key identifier:   7C:FA:61:9E:77:E1:E6:C8:B4:DF:1B:2C:71:4E:F4:50:96:4C:52:59
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer:       /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial:       01901DED6C321363B2DFA6D518B021E0053E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number:          084D
Signing time:             Sat 15 Jun 2024 22:03:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:37 +0000
Files and hashes:         1: TPZfJtwOUWtdt9KH-QRxf81_IGU.roa (hash: JKHenM/BB3kw5Z4XMXbr1rTem7Ji/hzCvLOclsUq2ls=)
                          2: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: XO+iGMqHzzcndzLstThGELhdRTS66RLZS7LckjZwRo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6c:32:13:63:b2:df:a6:d5:18:b0:21:e0:05:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
        Validity
            Not Before: Jun 15 22:03:37 2024 GMT
            Not After : Jun 16 22:03:37 2024 GMT
        Subject: CN=7cfa619e77e1e6c8b4df1b2c714ef450964c5259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:ff:7c:4c:bf:41:1c:dd:77:c5:e7:42:e4:
                    5e:ae:e6:95:ba:55:54:ff:f5:59:d4:71:14:d7:c6:
                    88:38:96:c2:78:44:13:99:01:23:e0:bd:e4:cf:d6:
                    67:ce:7e:ad:84:41:fd:d7:a5:82:c3:f7:85:29:df:
                    1c:f0:63:d9:7b:e9:43:6c:24:8a:3a:0f:f9:2a:05:
                    bc:e8:11:6e:90:39:f7:08:35:24:b6:a9:84:a1:5c:
                    58:08:65:bd:91:e4:5f:cc:a4:ad:2a:11:83:f9:77:
                    8a:58:ed:6a:0d:4d:ad:af:ef:a7:d6:5e:1b:96:3d:
                    47:65:79:f1:7e:54:51:4d:c6:a5:3a:df:c8:2b:40:
                    fd:45:dc:91:f3:7b:1a:b0:35:40:ac:e0:55:90:d0:
                    e6:37:31:ca:92:e9:7f:94:40:bd:44:4d:6a:9f:7e:
                    78:87:95:a0:ab:03:aa:39:6e:f8:83:51:5b:2f:c5:
                    9e:b5:25:f2:d1:a4:ca:63:6d:bf:22:96:05:4d:14:
                    f7:bb:91:32:49:df:5a:8a:9e:01:2d:e7:24:3f:c4:
                    19:c6:4d:72:78:63:62:21:e8:79:b1:80:d4:8a:2e:
                    c0:0f:bc:fa:08:55:c2:06:e5:e6:3e:c3:77:1c:83:
                    05:5e:66:05:2a:ca:3d:8a:28:53:96:aa:41:47:71:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:61:9E:77:E1:E6:C8:B4:DF:1B:2C:71:4E:F4:50:96:4C:52:59
            X509v3 Authority Key Identifier:
                keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:55:bb:11:8a:a4:06:29:e6:84:5c:78:9e:12:83:f3:ae:38:
         21:6c:14:56:e7:06:0f:42:0f:de:20:39:8a:70:ce:ba:aa:74:
         75:a8:3c:14:08:d4:25:1c:b2:5c:97:1b:47:80:2a:62:a3:2e:
         69:05:6f:39:96:15:7b:75:99:8c:36:96:5a:90:44:05:24:38:
         ac:4e:6e:0a:a7:ea:a5:16:06:5f:50:24:fc:37:d3:90:9b:2a:
         a1:69:83:a5:df:7e:b1:46:85:bc:f8:8c:3b:ab:87:01:82:80:
         e5:83:99:94:d0:d1:5a:de:bc:37:e6:72:3c:90:bc:68:4f:81:
         98:9d:8c:77:54:af:d3:d6:23:1d:c8:a6:a4:b5:f8:ce:6f:bb:
         e9:1b:23:dd:8d:22:4a:60:6f:fc:b7:06:7e:da:89:a2:a1:2e:
         f3:c1:5e:9b:48:30:67:7f:5f:39:aa:27:90:d2:13:6f:2c:73:
         b2:68:91:e4:3a:3b:be:e7:f8:ee:03:ba:59:3d:9f:57:fe:40:
         0b:c7:ce:84:77:25:ad:d3:bf:00:14:40:cb:d2:a7:67:7d:31:
         83:28:ba:3e:db:34:7a:1e:f3:cb:de:19:fc:66:7a:ad:e1:74:
         30:6b:65:bf:ea:80:eb:02:c1:49:c1:fc:d5:df:4a:a9:cd:eb:
         75:7c:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:10 2024 by rpki-client on console-fra.rpki-client.org