Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
File:                     wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json)
Hash identifier:          ngUG0INoCISAx88u8coYFePLsgqItB78SZ0XZQjm9AE=
Subject key identifier:   3D:06:E2:E5:56:79:8F:2B:52:85:91:46:51:97:01:A7:44:33:9E:D7
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Certificate issuer:       /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial:       0193553F77A883A60ADBFAEE576F41EA17A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
Manifest number:          091E
Signing time:             Fri 22 Nov 2024 19:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:42 +0000
Files and hashes:         1: IG6XDX585tZTx-wq_HBGHEpD2VY.roa (hash: +ral+btXLGYBub8oYyZPJNfbWgTS4n0DJv1iBpn94rE=)
                          2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: RjPMtz5PLbkcwl3XqxpUesfRJ/4r/8uwfb/Lhb5wKRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:77:a8:83:a6:0a:db:fa:ee:57:6f:41:ea:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
        Validity
            Not Before: Nov 22 19:00:42 2024 GMT
            Not After : Nov 23 19:00:42 2024 GMT
        Subject: CN=3d06e2e556798f2b52859146519701a744339ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:65:98:dc:ae:72:3c:81:bd:9d:9a:ef:7d:
                    4c:ae:58:bf:ba:8a:64:06:94:4a:15:7a:c2:68:e6:
                    91:aa:52:f2:66:14:94:db:94:c4:a9:6e:dd:30:df:
                    02:6a:f1:6c:07:21:cf:b9:54:a1:eb:3a:da:af:58:
                    d1:37:e7:64:a4:5a:31:97:8e:eb:f4:7a:c3:ab:5e:
                    25:db:92:91:cc:4b:09:3f:3c:6e:2b:46:57:43:05:
                    e1:52:c7:03:6f:bd:30:9a:e0:fb:d2:9e:d6:0b:e5:
                    0a:12:57:d7:5d:d1:c9:10:88:f3:ef:d6:e1:cb:52:
                    ee:2d:69:3c:70:54:86:ed:aa:30:f5:da:fd:c8:13:
                    d6:c2:9d:78:51:a2:2e:f7:f6:1e:e0:f7:3e:95:e1:
                    ff:f6:83:e9:75:46:7b:41:8f:72:1f:20:91:64:b0:
                    e0:5e:dc:61:28:80:c9:5d:e8:27:fa:c3:7f:93:71:
                    82:94:1d:56:e2:20:3b:69:6b:1f:20:40:7c:87:a3:
                    1e:ae:e6:8f:cb:c9:8b:4a:2f:a8:8e:f6:31:ea:6f:
                    04:27:ca:3d:fd:e5:de:86:21:65:08:bb:93:61:72:
                    f8:95:e5:b1:a3:15:11:b8:92:75:50:54:bc:65:a7:
                    41:5e:3a:0d:4f:c1:1f:dd:0a:5f:58:eb:46:2c:fc:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:E2:E5:56:79:8F:2B:52:85:91:46:51:97:01:A7:44:33:9E:D7
            X509v3 Authority Key Identifier:
                keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:83:7d:0b:4f:3c:98:34:d4:f0:ce:8c:a4:44:dd:db:dc:
         f8:2e:6a:d1:14:1e:2e:53:70:0e:5e:19:6f:f7:0f:6c:33:e0:
         63:a8:ef:20:3a:41:1a:52:fe:11:06:f7:ae:bc:6a:01:74:11:
         24:a0:c0:fc:3a:78:32:c9:f5:c5:73:e1:0a:99:66:15:a5:4f:
         cc:14:79:e7:8e:ab:f9:bf:56:76:57:d2:17:29:b1:58:a0:16:
         cf:38:4e:e6:26:49:fa:2d:59:1d:69:e8:cb:16:15:9d:7a:aa:
         1e:69:8d:32:78:ab:3d:0a:71:47:23:2b:a0:3f:fe:f6:d9:7b:
         52:48:e1:1a:3a:a8:e8:35:5f:58:c6:84:09:d0:ba:06:39:ea:
         29:c1:b6:e1:b6:c5:a6:f2:1a:c4:c9:97:07:56:e4:5d:04:7e:
         9c:88:36:73:a1:9c:e4:2d:7e:e7:a4:aa:36:7c:b1:22:07:4a:
         ca:51:89:d6:25:7a:82:53:87:0a:ca:6e:77:27:55:da:1e:57:
         52:e0:3d:ba:86:db:4c:b7:c1:eb:be:89:ad:15:22:e2:53:f7:
         ee:b2:3a:49:7b:8d:ba:25:23:85:a4:94:41:13:d5:2b:54:13:
         ab:1d:fa:c8:8d:16:66:68:f5:d8:2a:46:16:0d:27:49:9b:7d:
         77:87:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:25 2024 by rpki-client on console-ams.rpki-client.org