Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File:                     WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier:          3wrtD0oB+D83XTTxDUxsaoVpGYdUx88EMV/xuAOGYW0=
Subject key identifier:   5D:08:4D:EC:42:3D:6C:A5:0D:F0:8E:D4:A4:7F:86:D6:BE:8B:68:0B
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer:       /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial:       0191F9D976F47E2208843E5D1BC3341D1984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number:          9F
Signing time:             Mon 16 Sep 2024 08:01:04 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:04 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:04 +0000
Files and hashes:         1: Io2xZuglxcp9WF9u9gMmK6ov_6s.roa (hash: Gm+8lHnN3DZlLdEt1lx6SX7Uf8nQmWK4ldqebzAYqmU=)
                          2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: EvuYIz705G2sYgvJgS8sICdGxw50652joyeq6xgjVQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:76:f4:7e:22:08:84:3e:5d:1b:c3:34:1d:19:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
        Validity
            Not Before: Sep 16 08:01:04 2024 GMT
            Not After : Sep 17 08:01:04 2024 GMT
        Subject: CN=5d084dec423d6ca50df08ed4a47f86d6be8b680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:29:11:28:de:9f:e1:8f:dc:4a:0d:2e:2d:
                    3c:ca:0d:d5:26:26:75:dc:ed:8c:4e:a2:34:16:35:
                    22:62:66:99:f0:6f:e3:7a:d2:22:ba:18:19:38:e2:
                    ba:00:7b:f6:09:b1:e4:da:20:1d:a2:e1:fc:3d:bd:
                    b5:ed:30:62:56:13:e3:93:79:be:67:36:dc:a0:5b:
                    c2:e8:0b:48:18:b1:27:2c:2e:67:3f:14:98:21:e0:
                    4a:28:08:d5:fe:b1:a8:48:6c:52:bc:33:a2:dd:90:
                    20:18:b9:7b:21:b3:19:7a:c6:e1:3d:dc:fc:c1:80:
                    0b:58:83:96:11:69:ec:b4:00:b0:1d:6c:4c:2a:4a:
                    db:58:cb:78:c4:b6:c4:7c:be:6d:a7:8c:7c:fe:06:
                    27:3a:80:cc:85:93:3e:74:e7:0e:3f:f9:84:b4:9a:
                    34:13:98:09:04:ed:e8:2d:53:7a:dd:88:f4:ec:ff:
                    df:dd:a3:58:5d:69:fa:74:38:33:ec:ce:e5:bc:62:
                    72:b1:cb:6f:c7:ef:d1:54:93:e2:77:2f:e4:04:72:
                    02:c7:25:c3:40:0f:13:47:9a:48:36:38:90:aa:52:
                    80:d1:eb:80:db:28:7d:73:d1:3c:10:6f:90:d0:9b:
                    5f:6e:c5:07:ba:e6:f9:f3:df:c4:72:64:16:7a:d5:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:4D:EC:42:3D:6C:A5:0D:F0:8E:D4:A4:7F:86:D6:BE:8B:68:0B
            X509v3 Authority Key Identifier:
                keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:80:15:cb:6f:8d:ef:09:32:22:17:ad:28:2c:3a:89:08:
         4d:43:44:a0:75:fe:53:50:3b:f0:82:e5:ff:81:a5:ca:84:fd:
         eb:3b:bc:a7:8e:73:85:52:1b:7a:f0:95:f6:a2:3b:54:cb:33:
         a1:84:14:19:b3:a1:ca:e4:4d:85:a2:81:01:76:36:a1:cd:5a:
         67:72:b6:b1:23:43:24:e3:f2:60:2d:ee:18:dc:4b:2a:2b:6a:
         04:ed:fb:8c:22:1b:7a:8d:96:cd:38:d3:9f:3d:bf:e6:79:6d:
         06:68:c5:95:de:5d:b8:09:8a:9d:50:8d:cb:1e:b5:f9:26:27:
         86:e6:fe:4b:82:5e:86:5e:2d:ea:35:8d:1c:25:6d:0d:33:41:
         95:7e:10:bf:b8:4e:db:66:ec:86:f3:3f:f2:16:c4:c0:6b:88:
         df:77:80:1f:d9:61:fd:2a:a3:6f:9a:83:0c:87:4e:24:c1:2a:
         80:22:b6:f8:88:58:08:88:08:8f:5a:04:0a:ac:84:10:8d:82:
         95:5d:a0:c4:5e:44:2f:ea:fe:39:7f:15:dc:d6:95:b1:b9:72:
         f8:a3:cb:69:ca:57:0f:1f:2a:0d:ac:e1:59:96:8a:bb:be:9b:
         7a:cf:f9:c2:96:9b:4c:03:00:74:c5:b9:3e:51:72:ea:8e:c8:
         35:47:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:13:10 2024 by rpki-client on console-ams.rpki-client.org