Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File:                     WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier:          mpzIO3url1glEsBHavwXNknKQhBLS+uF2Il7mHXdIu0=
Subject key identifier:   C4:72:02:F2:D8:DF:4A:91:D4:40:B9:0E:6A:5B:1C:94:36:C1:8B:80
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer:       /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial:       018F87B6A39089A6C7531608D1CE8235D79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number:          1126
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: WPZk0zTRNGfoFSzq1aqudEnsOK9+KbhtUXwFOzgn+Ts=)
                          2: ldeOsLdYM03ynw_eV3MwBSjMfd0.roa (hash: vFBaQEVynj70DmkSeyY+88/cGPBk8g45Fqg+j+D3/+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a3:90:89:a6:c7:53:16:08:d1:ce:82:35:d7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=c47202f2d8df4a91d440b90e6a5b1c9436c18b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:eb:62:6a:60:b0:77:bc:c9:f0:91:be:eb:2e:
                    21:b8:d4:fc:3b:a2:a1:b7:be:31:6a:9a:fb:2b:be:
                    3c:54:30:90:54:13:9a:c6:07:40:ad:03:ca:5f:db:
                    47:b6:b7:2d:3c:df:78:2c:ce:4e:1e:6f:17:91:63:
                    d4:d4:78:56:a5:67:e8:00:30:a3:d2:25:85:35:96:
                    67:90:fd:c6:11:fe:d9:ca:f8:ec:8d:83:de:99:49:
                    65:af:38:40:6d:b4:2f:c4:33:01:2d:7d:da:a6:ba:
                    18:2c:6f:57:69:02:3e:84:75:a2:42:36:20:5e:fc:
                    1f:c7:a2:d0:80:94:b3:ce:5d:42:9e:0f:a0:dc:01:
                    33:02:6d:25:b1:e5:ed:14:6e:2f:f5:22:ee:c0:4a:
                    13:ba:97:0c:d3:cf:2f:be:e0:b0:86:e9:3c:19:77:
                    a9:7a:17:8f:99:ac:ed:f5:70:cb:49:b5:53:ae:7e:
                    5c:6c:1b:7b:e8:8e:0f:f1:3f:25:43:d9:05:db:bf:
                    4d:b0:8e:77:f7:ff:ad:61:62:ec:1c:57:00:30:f0:
                    73:0e:12:42:70:b6:e6:82:56:94:b2:2e:da:3d:7d:
                    c5:58:2e:75:7f:4f:a9:5a:4f:2c:4c:39:c2:06:8d:
                    0e:dd:48:89:53:53:e8:13:cc:a2:5c:9b:d6:cf:c1:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:72:02:F2:D8:DF:4A:91:D4:40:B9:0E:6A:5B:1C:94:36:C1:8B:80
            X509v3 Authority Key Identifier:
                keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:be:f0:19:0a:bc:a3:85:cb:e0:eb:16:c5:74:17:89:e5:
         aa:3f:9a:36:b8:d0:44:4d:66:54:a2:13:4d:3f:56:5d:c1:24:
         86:87:f3:c1:45:9d:98:48:8a:0d:67:4c:5c:ee:05:8c:26:a3:
         03:58:79:fc:d6:fc:e7:34:6c:4b:c6:70:b7:20:c0:96:bd:bf:
         82:85:d7:20:e0:8c:3f:2e:99:40:f7:0a:08:1e:3e:c7:21:6d:
         e9:c0:e7:ce:c0:d5:fb:07:50:ff:bd:6c:81:68:fa:76:a4:be:
         e6:79:00:ee:46:fd:4a:d2:a4:f4:c7:29:8f:f0:de:03:94:5c:
         f3:ff:62:9a:62:71:7a:1c:b7:66:6c:8c:30:7c:81:9f:b1:ab:
         c2:7f:f7:86:67:61:00:ff:96:a9:d6:6a:09:12:00:e2:6f:ca:
         65:67:3b:36:a4:00:42:0e:64:67:98:43:de:ee:ff:01:a9:96:
         de:bd:c9:d6:ff:27:bb:26:b3:4b:bc:e7:e1:94:22:91:a2:4f:
         77:9c:b4:6b:f5:bc:2f:7b:2e:99:c2:6a:eb:e3:02:b9:e1:a1:
         e2:19:22:bd:91:d8:15:a7:80:e6:c8:51:d5:43:3f:84:5c:59:
         97:98:c4:ab:3e:90:5e:2e:bb:95:86:21:e0:c0:40:40:df:25:
         ca:2e:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:45 2024 by rpki-client on console-ams.rpki-client.org