Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File:                     WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier:          DSShV7fqSeW/+i9uJuk/e4bPT540iuZoA1A2FZBkHR4=
Subject key identifier:   D0:C7:19:AF:A4:25:8C:2B:F8:B2:F6:76:74:0E:90:38:FD:BD:75:23
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer:       /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial:       019358AE002DE650CFA2D11EE371EB73E276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number:          0143
Signing time:             Sat 23 Nov 2024 11:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:18 +0000
Files and hashes:         1: B9LFh0WkD_05GdJWu0jUbDuGB_I.roa (hash: fLqnS9R2WDyYO1iCrEkAkF1cfjweRo/6Rypz16f4VE0=)
                          2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: Tud4xF7QyAmU+btGb9a8zfT6MsoK+KeVyyT4vIP3qAc=)
                          3: fqVcFdvNoZWfigva1IZ961k0P94.roa (hash: G1kAXZTWJav50a3nfpFfBE3oAVkDxxD5xSWWc4RB9JA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ae:00:2d:e6:50:cf:a2:d1:1e:e3:71:eb:73:e2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
        Validity
            Not Before: Nov 23 11:00:18 2024 GMT
            Not After : Nov 24 11:00:18 2024 GMT
        Subject: CN=d0c719afa4258c2bf8b2f676740e9038fdbd7523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:d7:7e:fb:66:b5:79:90:93:4b:8a:42:46:
                    e6:a3:cc:c6:fc:84:69:9b:6d:a6:ea:2a:61:72:18:
                    36:f8:16:fd:30:78:87:f9:03:a6:18:fe:de:74:c4:
                    31:cb:65:78:95:e1:fd:ea:b2:b0:c6:3b:23:1b:7a:
                    e7:9f:a7:46:2f:22:d0:b8:b9:84:1c:d1:3b:db:d5:
                    90:b8:90:79:65:61:05:d8:ca:0b:fa:37:6f:04:2b:
                    b1:4e:83:21:34:21:82:5d:fa:29:be:bd:b0:15:b1:
                    aa:e3:63:4f:d3:84:7d:4e:29:48:b4:b2:2d:24:07:
                    21:ca:53:27:0f:29:98:e9:30:24:cf:77:fc:74:45:
                    af:7a:5e:b9:e4:c1:b2:c2:e0:cd:70:49:fb:23:0f:
                    e6:f9:a3:03:f8:a2:3d:4a:47:9f:f1:87:1d:d3:3b:
                    1a:4c:3f:56:ac:5b:21:f9:a1:e2:dc:46:53:e0:64:
                    68:56:9f:48:e1:f0:a5:d7:a8:37:b5:35:42:ec:66:
                    b8:bd:39:cf:13:84:53:25:a8:2a:e7:22:15:bc:ac:
                    4b:ff:64:3d:ec:be:80:50:51:b2:c0:8d:49:d3:72:
                    1b:59:4d:1b:c3:ab:5b:fa:8c:4d:83:b2:9d:97:1a:
                    6b:1d:16:49:bf:a2:c9:33:cc:65:ef:70:d7:47:f1:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:19:AF:A4:25:8C:2B:F8:B2:F6:76:74:0E:90:38:FD:BD:75:23
            X509v3 Authority Key Identifier:
                keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:82:74:16:07:66:48:a9:5a:7a:1c:46:12:68:df:be:51:48:
         41:29:0f:74:a2:e4:b1:c5:c4:04:44:d6:32:29:dc:70:6c:71:
         96:55:b0:f5:d2:14:d8:9d:26:76:40:9d:f8:29:ce:c5:45:d1:
         4c:6f:46:ad:72:86:26:ed:1e:9e:34:3a:8a:b2:04:a8:45:11:
         71:00:93:25:12:b8:f8:d9:38:76:06:13:75:21:cf:4a:7b:fe:
         e0:c5:3f:32:9d:c9:84:9c:84:51:de:eb:f2:4f:4f:a0:70:d2:
         12:37:76:a2:fc:9a:fe:1c:ed:a1:4b:38:30:b4:79:db:5e:b3:
         28:8f:ed:05:38:64:92:c0:07:52:cc:4e:4b:2d:a5:73:ec:fe:
         5a:ed:2d:27:33:45:a2:3a:2b:58:9f:4e:40:2c:9d:74:85:e9:
         18:bd:27:ad:83:c1:7f:18:89:81:29:12:0a:73:61:54:79:15:
         c7:f4:9a:60:64:1d:e2:a5:75:14:1e:57:95:53:90:85:da:b0:
         97:35:51:9e:6d:14:7c:a8:4d:1b:ad:cf:5c:68:20:6a:ae:b0:
         e5:f6:17:4e:68:e0:f7:19:e4:d2:f6:eb:7c:b6:98:41:f9:31:
         61:eb:4b:2c:0b:2d:9f:50:45:66:24:84:8f:c0:e7:3e:54:1e:
         b9:41:85:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYrgAt5lDPotEe43Hrc+J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh
N2IyODgwHhcNMjQxMTIzMTEwMDE4WhcNMjQxMTI0MTEwMDE4WjAzMTEwLwYDVQQD
EyhkMGM3MTlhZmE0MjU4YzJiZjhiMmY2NzY3NDBlOTAzOGZkYmQ3NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszrXfvtmtXmQk0uKQkbmo8zG/IRp
m22m6iphchg2+Bb9MHiH+QOmGP7edMQxy2V4leH96rKwxjsjG3rnn6dGLyLQuLmE
HNE729WQuJB5ZWEF2MoL+jdvBCuxToMhNCGCXfopvr2wFbGq42NP04R9TilItLIt
JAchylMnDymY6TAkz3f8dEWvel655MGywuDNcEn7Iw/m+aMD+KI9Skef8Ycd0zsa
TD9WrFsh+aHi3EZT4GRoVp9I4fCl16g3tTVC7Ga4vTnPE4RTJagq5yIVvKxL/2Q9
7L6AUFGywI1J03IbWU0bw6tb+oxNg7KdlxprHRZJv6LJM8xl73DXR/GpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDHGa+kJYwr+LL2dnQOkDj9vXUjMB8GA1UdIwQY
MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It
MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy
LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIJ0Fgdm
SKlaehxGEmjfvlFIQSkPdKLkscXEBETWMinccGxxllWw9dIU2J0mdkCd+CnOxUXR
TG9GrXKGJu0enjQ6irIEqEURcQCTJRK4+Nk4dgYTdSHPSnv+4MU/Mp3JhJyEUd7r
8k9PoHDSEjd2ovya/hztoUs4MLR5216zKI/tBThkksAHUsxOSy2lc+z+Wu0tJzNF
ojorWJ9OQCyddIXpGL0nrYPBfxiJgSkSCnNhVHkVx/SaYGQd4qV1FB5XlVOQhdqw
lzVRnm0UfKhNG63PXGggaq6w5fYXTmjg9xnk0vbrfLaYQfkxYetLLAstn1BFZiSE
j8DnPlQeuUGFFw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:39 2024 by rpki-client on console-ams.rpki-client.org