Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          CxltFlNHCDCfas5zntVD+tBJ2EBb0B2LOTdf+ZTQ1nA=
Subject key identifier:   1C:B6:C1:6C:CC:4F:00:71:E4:7D:C1:F6:79:B8:77:CA:B4:CA:8F:01
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       0193572DABEEBD6067D1F05160713FF5A48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          01EE
Signing time:             Sat 23 Nov 2024 04:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:31 +0000
Files and hashes:         1: YjFF4KpEohH-xJAXIiReVNm8ayE.roa (hash: EaMIPkf7JZ/5SMcHtz/Bsp4rp3Vtk/kihLRmekryis0=)
                          2: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: BNg31Q1YEsNMQPEK1g9mk9ttHV+bwGwlTwOyCt42phg=)
                          3: jy0Aqlmff-4sKpW6e-M7BEvA6DY.roa (hash: WCT4aP+f89Tdfx5pUQnYpzBn4DWO6Jjmc0bjzRUvvEs=)
                          4: sfVepUvgtZBpwdDRi6KYPtPbyR8.roa (hash: bsKR/x4JO5u+itMMRiY5+V+Zv5oc1z7hQ3nhwTOabe4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ab:ee:bd:60:67:d1:f0:51:60:71:3f:f5:a4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Nov 23 04:00:31 2024 GMT
            Not After : Nov 24 04:00:31 2024 GMT
        Subject: CN=1cb6c16ccc4f0071e47dc1f679b877cab4ca8f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:c6:bb:b2:7a:5c:2f:f4:76:9f:e0:ec:23:
                    4d:a7:1a:0f:cd:01:73:69:cf:5d:44:f0:d8:46:3b:
                    bb:4f:bc:d6:56:9a:93:46:78:c6:c6:cd:aa:6a:dc:
                    44:f3:51:e2:51:e1:35:4e:ed:c1:37:21:68:44:1b:
                    15:57:2e:96:85:96:ed:48:cb:1c:0e:f4:09:31:63:
                    0f:06:c9:4c:8d:57:e2:e6:e0:5b:f0:31:1e:ba:e5:
                    b1:23:f1:1d:13:28:ec:14:7d:fc:8d:8c:8d:af:5b:
                    8d:ae:24:e1:01:7b:65:15:3c:88:20:41:ff:53:8d:
                    ee:2f:24:39:c6:64:71:98:b1:5e:b0:2b:b8:84:53:
                    41:08:0d:b0:d8:c6:19:d3:7b:12:e0:2a:86:a7:a7:
                    3f:ba:ee:14:f6:14:04:f0:9b:a7:24:4b:51:89:ab:
                    49:d7:5a:f9:e6:7b:49:45:fd:07:77:2c:a2:bd:39:
                    f7:0d:59:1a:ed:13:ec:e9:04:e6:50:79:e5:71:08:
                    76:28:87:6e:04:ac:1f:b4:85:47:7d:b2:55:d4:4e:
                    5d:26:25:bb:7a:1b:43:49:a6:1d:92:76:09:c9:b7:
                    77:06:ab:c4:a8:48:1c:cb:9f:c0:5e:9d:4c:a8:ef:
                    57:01:e3:c9:ec:66:c8:08:69:d4:30:55:9b:f9:6e:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:C1:6C:CC:4F:00:71:E4:7D:C1:F6:79:B8:77:CA:B4:CA:8F:01
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:54:6a:47:1e:3c:07:46:d1:47:ff:b2:c2:d6:09:ba:4a:bc:
         b6:42:06:7f:7e:4f:57:8c:f0:17:12:11:e4:1a:fc:57:57:da:
         a6:00:80:58:09:80:44:19:6d:00:83:26:b7:6e:ed:a7:93:f1:
         39:c6:6f:21:5c:0e:24:2b:2d:0b:43:64:f0:e6:49:0e:ab:ff:
         98:a4:21:d5:6c:d3:66:95:5d:75:16:16:53:4e:65:64:b7:b0:
         bf:7d:b4:a7:d6:76:82:87:b8:40:dd:35:b9:2d:23:38:b5:1c:
         ee:44:65:b9:87:05:fc:4e:7b:d9:33:b9:13:b0:cb:db:d1:56:
         7c:c7:f5:e2:76:b1:93:7a:e3:b2:3f:f7:00:c9:e5:86:ac:f3:
         74:27:e2:a8:25:f9:fc:d5:a3:8b:e4:55:80:52:ad:62:97:53:
         9d:31:18:05:8b:e1:f5:aa:ab:58:22:26:05:4b:ee:27:d5:af:
         07:28:ac:db:f4:dd:cc:86:76:00:0a:e0:e2:16:8c:0b:9a:98:
         7a:41:06:25:31:a0:3d:39:9f:de:35:b0:4b:3e:8c:a7:d8:cd:
         c4:6a:73:68:7d:d6:3c:ac:c0:82:c1:df:b8:1d:82:0b:11:94:
         b4:f0:7f:16:f7:f5:40:1c:26:8f:e0:8e:d0:7b:5e:47:14:f1:
         07:80:08:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLavuvWBn0fBRYHE/9aSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw
NWZmNmIwHhcNMjQxMTIzMDQwMDMxWhcNMjQxMTI0MDQwMDMxWjAzMTEwLwYDVQQD
EygxY2I2YzE2Y2NjNGYwMDcxZTQ3ZGMxZjY3OWI4NzdjYWI0Y2E4ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouDGu7J6XC/0dp/g7CNNpxoPzQFz
ac9dRPDYRju7T7zWVpqTRnjGxs2qatxE81HiUeE1Tu3BNyFoRBsVVy6WhZbtSMsc
DvQJMWMPBslMjVfi5uBb8DEeuuWxI/EdEyjsFH38jYyNr1uNriThAXtlFTyIIEH/
U43uLyQ5xmRxmLFesCu4hFNBCA2w2MYZ03sS4CqGp6c/uu4U9hQE8JunJEtRiatJ
11r55ntJRf0HdyyivTn3DVka7RPs6QTmUHnlcQh2KIduBKwftIVHfbJV1E5dJiW7
ehtDSaYdknYJybd3BqvEqEgcy5/AXp1MqO9XAePJ7GbICGnUMFWb+W4q0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy2wWzMTwBx5H3B9nm4d8q0yo8BMB8GA1UdIwQY
MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt
MDRkMTI0N2U1ZDBhLzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh
LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlRqRx48
B0bRR/+ywtYJukq8tkIGf35PV4zwFxIR5Br8V1fapgCAWAmARBltAIMmt27tp5Px
OcZvIVwOJCstC0Nk8OZJDqv/mKQh1WzTZpVddRYWU05lZLewv320p9Z2goe4QN01
uS0jOLUc7kRluYcF/E572TO5E7DL29FWfMf14naxk3rjsj/3AMnlhqzzdCfiqCX5
/NWji+RVgFKtYpdTnTEYBYvh9aqrWCImBUvuJ9WvByis2/TdzIZ2AArg4haMC5qY
ekEGJTGgPTmf3jWwSz6Mp9jNxGpzaH3WPKzAgsHfuB2CCxGUtPB/Fvf1QBwmj+CO
0HteRxTxB4AIPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:05 2024 by rpki-client on console-ams.rpki-client.org