Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File:                     WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier:          R34aDHJnffeh3RouQ41ON321foETxQLQzzFLwNKgv+4=
Subject key identifier:   BD:56:2C:D2:2C:AA:05:BF:24:CD:3A:62:DA:91:CE:C9:FF:AC:C4:1A
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer:       /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial:       019358E58457D89920A28F4BE61D9A0F3170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number:          1320
Signing time:             Sat 23 Nov 2024 12:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:56 +0000
Files and hashes:         1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: o/YOCwvWf6/f2FRinqhHEoZSQZaIyzvzYSqLVaErzQ8=)
                          2: ldeOsLdYM03ynw_eV3MwBSjMfd0.roa (hash: vFBaQEVynj70DmkSeyY+88/cGPBk8g45Fqg+j+D3/+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:84:57:d8:99:20:a2:8f:4b:e6:1d:9a:0f:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
        Validity
            Not Before: Nov 23 12:00:56 2024 GMT
            Not After : Nov 24 12:00:56 2024 GMT
        Subject: CN=bd562cd22caa05bf24cd3a62da91cec9ffacc41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3f:1b:b5:fc:2a:c8:83:aa:8b:e3:3d:c1:1c:
                    d7:8f:54:0b:6f:aa:a5:fa:35:76:89:94:c2:9e:e8:
                    23:77:ae:13:17:73:d0:27:08:e8:ad:3c:79:38:b2:
                    6c:2f:f6:80:03:b7:f3:28:d5:00:7b:79:02:34:0c:
                    2b:2e:1c:ad:ad:28:e5:a9:62:a8:85:a3:98:c6:a3:
                    c3:3c:5d:34:99:57:fc:e4:cb:b3:ea:62:01:27:3f:
                    7b:5b:f9:55:f5:f8:87:76:cc:28:ef:24:a0:10:35:
                    ea:3c:29:32:1b:9b:80:a4:15:be:61:d0:f2:9e:28:
                    0a:f2:d6:9b:b6:4f:f8:4e:93:c5:b6:c7:e8:23:60:
                    36:a8:43:f8:f0:6f:27:e8:ac:2f:fc:f1:95:b7:63:
                    3f:58:5c:ef:04:fa:76:5d:d9:b7:3e:bd:ff:89:8a:
                    d8:e4:59:25:c6:66:fc:9d:88:10:76:98:43:53:96:
                    53:76:8d:e2:93:0b:e5:f6:ee:07:40:03:7a:38:73:
                    bc:49:90:ba:2e:00:8e:32:3d:5a:72:0b:7e:eb:da:
                    2d:b1:cc:8b:2b:a2:16:7a:93:7e:c5:e8:ba:1f:b8:
                    bf:71:3d:62:0f:e7:04:08:d7:8b:fe:05:3e:46:42:
                    41:8e:1a:60:2e:b5:0c:f5:da:fe:bd:e9:77:be:8c:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:2C:D2:2C:AA:05:BF:24:CD:3A:62:DA:91:CE:C9:FF:AC:C4:1A
            X509v3 Authority Key Identifier:
                keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:76:03:9e:73:06:8c:d9:cd:50:4d:5c:6b:a6:06:28:da:69:
         1b:35:aa:07:18:1f:8d:24:67:6a:7c:d9:6c:7a:77:58:81:9e:
         21:9b:85:ee:55:b3:0c:dd:d7:88:fc:42:23:e2:fb:80:18:4b:
         54:7f:d9:dc:a9:11:65:e5:79:a4:99:c3:30:60:de:31:82:21:
         e8:28:40:b4:fd:66:8c:d2:63:af:ef:68:8b:eb:ae:55:fb:52:
         dd:fa:50:64:64:07:11:14:a3:74:53:e9:5f:02:43:b1:ca:87:
         f9:63:72:53:6f:9b:e0:91:ed:9d:70:db:42:0e:df:07:f1:6b:
         0a:ee:86:23:8e:26:81:5c:a0:30:18:fb:a2:97:df:4a:fb:b0:
         d2:76:40:57:79:53:96:16:01:fe:38:75:3b:06:fb:b7:d3:18:
         37:28:b9:3a:5c:72:e5:42:01:b8:f0:77:ba:6a:c8:10:05:48:
         04:20:29:17:93:4f:3e:f9:30:2d:ce:67:f2:fd:18:60:9f:53:
         d4:ca:12:7c:b8:f2:83:03:33:99:eb:82:9c:f6:7f:dd:f9:63:
         e2:b8:90:e4:f4:cd:3c:99:bc:11:29:84:61:60:bc:a6:53:07:
         3f:76:ca:e2:cd:43:73:12:ff:de:fb:6b:03:0b:a2:fc:0e:74:
         31:22:27:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:55 2024 by rpki-client on console-fra.rpki-client.org