Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File:                     wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier:          QONnaKPXnX0JPIAajuMF444SpArV7aDfl/J5XUH2Okw=
Subject key identifier:   54:75:60:73:6C:2B:5C:11:11:2F:B0:BF:17:12:1B:8A:FC:40:CF:C0
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer:       /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial:       019355E45A3FB2972CB7BB815900E7A31C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number:          0DF8
Signing time:             Fri 22 Nov 2024 22:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:48 +0000
Files and hashes:         1: 4PFWXyGekCASGygCUNjm-DuErsE.roa (hash: /LabMzCo7/wW5IWe3DG8cgsNr0Fnya8crl5xVDTQMms=)
                          2: Ie4KlPBWxYcWzDVpNdF3YIsitGQ.roa (hash: itqmoJoc7l9j8v6UyOMjK8Yfx/I5KqtlDE9UC79dbr0=)
                          3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: f++4T2jS3C2E6U29leNdVKnvG8swbZlXSRCSNxp9+9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:5a:3f:b2:97:2c:b7:bb:81:59:00:e7:a3:1c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
        Validity
            Not Before: Nov 22 22:00:48 2024 GMT
            Not After : Nov 23 22:00:48 2024 GMT
        Subject: CN=547560736c2b5c11112fb0bf17121b8afc40cfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:5e:6a:5d:66:84:d1:d5:f8:f8:52:19:9e:
                    79:f1:66:c9:37:93:e4:77:f3:43:40:65:b8:7d:f0:
                    00:da:eb:5c:0f:5d:6e:8e:07:c1:08:bf:35:5d:b7:
                    79:0f:ff:a1:ba:3e:6b:cb:a6:ab:7f:df:a1:2d:5f:
                    c0:d2:76:c3:9d:4a:30:2c:b6:74:52:cc:12:6f:b0:
                    de:0f:f7:cb:ef:3a:6b:3a:1c:71:44:8c:8c:11:31:
                    a8:8a:f5:7f:ce:b6:f9:fe:4b:c0:4b:02:70:73:52:
                    48:b7:b5:9f:82:cf:2d:62:2a:e0:38:e5:05:e4:ed:
                    bc:ff:6f:1f:95:18:10:81:87:47:1d:5a:3c:48:ec:
                    9f:8d:ff:30:66:06:79:24:1d:5f:5e:2f:e9:1f:e5:
                    db:c8:a9:db:39:66:70:2f:2a:f2:59:e2:67:26:81:
                    da:5b:41:75:cd:ad:be:f3:ba:3a:1d:53:ae:61:d3:
                    0e:1f:09:47:91:7d:1c:54:29:67:19:1e:77:b6:ff:
                    70:c9:28:91:46:0c:83:88:4b:a2:ca:3a:a7:df:9b:
                    76:dd:90:a5:55:cb:a8:b4:75:ac:2a:13:4d:44:1e:
                    1c:ea:1f:83:40:79:b2:2d:80:d9:1c:78:3f:31:43:
                    d0:cf:0f:e6:3b:a9:2d:ef:b4:83:57:c3:66:9e:da:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:75:60:73:6C:2B:5C:11:11:2F:B0:BF:17:12:1B:8A:FC:40:CF:C0
            X509v3 Authority Key Identifier:
                keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:e0:47:62:05:5d:8a:b5:59:5c:05:1b:ce:15:d3:a2:21:
         9b:c1:e0:f3:03:a3:c7:d7:1e:32:e9:b8:d8:dd:3a:b7:8a:9d:
         63:83:23:9f:52:bb:b6:fa:7e:61:bb:3b:7a:1d:20:ee:c3:9a:
         17:0a:58:eb:aa:25:da:5d:57:b6:90:71:23:72:26:85:d3:65:
         93:3e:9b:04:61:5b:99:0b:5b:ba:5c:15:36:a8:43:b6:23:3e:
         d9:f9:73:75:1a:c2:93:a8:aa:c1:a5:08:b6:10:d2:ae:fe:34:
         10:67:9f:96:30:81:76:1a:50:76:1b:9e:a6:77:80:1e:f2:72:
         f0:81:2b:4c:d4:a8:68:98:30:07:79:d4:5e:13:e8:cb:e1:15:
         24:6b:ed:4b:f7:67:27:76:3f:77:2f:15:14:63:9e:a0:2e:c9:
         6e:a7:48:63:13:bd:d6:f0:6f:3a:3c:ae:c7:f0:9b:3e:b1:4a:
         ba:67:b5:f3:14:f6:71:75:16:6f:b6:cf:47:5e:bd:99:31:e0:
         25:23:c0:ff:16:89:87:20:83:99:29:d0:42:bf:aa:01:d4:b0:
         5b:66:5f:cc:75:f9:75:23:e7:c2:c7:86:81:32:99:ac:45:29:
         e6:f6:1c:d0:eb:9b:5a:b8:00:c2:5c:8c:3b:66:2b:d8:d4:27:
         b9:d3:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:15 2024 by rpki-client on console-fra.rpki-client.org