Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File:                     wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier:          8hpCEUOzlX5axFaraBXRLMQiZlxmRwo21cFeQ60g+QU=
Subject key identifier:   7D:52:F9:37:39:40:1F:BD:42:40:82:35:7A:1A:E0:12:41:2F:B0:42
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer:       /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial:       019357D2EB5F379108867B438F5A13AFBB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:00 +0000
Files and hashes:         1: 9ugJcOJ7bqnlz7kInhx58l3_5XM.roa (hash: eWiz3+OxZ0SV+myimSW48jnpzjk29fdDZ4Pf8zsS1WM=)
                          2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: vDeDxn9WLR4r5fdbX1w6hn5JAYbdGVciiJZkWqUccvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:eb:5f:37:91:08:86:7b:43:8f:5a:13:af:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
        Validity
            Not Before: Nov 23 07:01:00 2024 GMT
            Not After : Nov 24 07:01:00 2024 GMT
        Subject: CN=7d52f93739401fbd424082357a1ae012412fb042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:35:b5:c5:b0:67:0e:85:50:cb:b8:bf:ea:
                    b2:f9:00:11:ba:43:ad:50:9c:e8:31:f0:5e:43:4e:
                    b5:78:3b:c1:2f:ab:07:7d:68:c8:6f:d6:7e:7d:ae:
                    ee:9f:64:a2:ff:bb:76:66:1c:7f:30:45:8b:08:eb:
                    aa:42:a5:bb:dc:4f:e3:65:49:6e:e9:42:7a:3f:28:
                    d0:cc:b8:92:86:bf:70:d5:b7:cf:d0:7a:e3:55:31:
                    b4:60:ff:82:47:15:2f:21:69:ed:9b:66:90:67:d3:
                    c9:df:90:30:43:99:fc:a3:95:8e:52:6d:ab:62:48:
                    6c:0f:5f:5f:56:48:ad:17:4f:b6:39:cf:3f:79:ff:
                    bb:95:b8:32:ff:99:6e:b3:d9:93:31:c9:7d:01:25:
                    b2:1a:ba:45:0b:da:47:44:7c:8d:f7:90:77:a6:4e:
                    41:f3:16:4b:40:cb:4c:f0:52:18:1e:09:f5:62:20:
                    e2:f2:0e:75:75:e0:4d:5c:aa:29:87:75:a9:5a:62:
                    1d:d4:70:ec:e8:c1:02:1d:07:ff:4b:49:4a:6e:8f:
                    77:37:35:b8:4f:5c:35:6e:4e:fc:62:d8:d4:09:fd:
                    76:27:58:ff:31:79:fa:9a:2d:ce:c9:f8:78:03:95:
                    57:26:7e:c9:3b:72:fb:82:fc:49:a5:5e:ac:fa:a7:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:F9:37:39:40:1F:BD:42:40:82:35:7A:1A:E0:12:41:2F:B0:42
            X509v3 Authority Key Identifier:
                keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b8:70:f4:44:0f:00:18:57:0c:cc:84:d1:36:de:4e:fb:09:
         38:55:6c:5b:88:ea:15:76:a4:19:03:6a:54:a1:40:ca:14:8a:
         82:43:06:ec:47:99:88:a4:87:75:f5:fc:a0:4a:0a:05:a1:7b:
         2b:2c:4f:9a:24:31:e0:4f:16:0f:f2:da:c2:d0:e2:af:e1:a7:
         28:b8:91:91:f8:0f:93:04:ff:74:3e:cf:e8:a4:b3:b9:8f:9f:
         80:37:65:4f:09:c7:5b:d9:35:9d:2f:cd:f2:24:16:20:60:f5:
         9d:87:6a:d0:a9:bb:85:0b:59:aa:c6:78:73:d3:ac:cc:a4:fb:
         39:5c:72:1c:4f:ba:82:f9:0e:25:4e:ef:f2:eb:28:91:88:46:
         e2:ed:41:7c:e1:e9:04:0b:bc:f6:db:19:ab:ac:ed:7c:dc:47:
         0d:92:4b:b7:d3:69:82:c1:bc:e7:5a:a1:b3:74:b6:5e:57:b9:
         9f:9a:08:c9:64:75:5c:f1:25:e3:4c:e8:77:ef:af:e2:58:65:
         21:36:93:25:3f:2c:67:67:8b:a0:30:34:32:da:cf:c2:b9:f4:
         dc:41:09:73:14:89:8e:62:68:28:31:32:fc:94:6f:24:e9:46:
         f8:91:22:50:cd:79:4a:6b:79:69:cb:7a:1c:f9:66:f0:45:a7:
         57:34:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:16 2024 by rpki-client on console-ams.rpki-client.org