Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
File:                     wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json)
Hash identifier:          aYdOR1ZViVirTEtMjWzI1hNMUVi6sEYcAJEhX9nhwHE=
Subject key identifier:   8A:6C:AC:74:23:84:A1:98:FE:32:79:11:47:57:E2:DE:2E:A5:FE:75
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Certificate issuer:       /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial:       018F885B494199423EBF695FEE779BC3EDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
Manifest number:          0DBC
Signing time:             Fri 17 May 2024 21:00:34 +0000
Manifest this update:     Fri 17 May 2024 21:00:34 +0000
Manifest next update:     Sat 18 May 2024 21:00:34 +0000
Files and hashes:         1: a8nLb-56yG7lMJx2_bNxYmi8bLA.roa (hash: TdOPC9pAWEE8SK7zAzhZdkwSQCquFpVxL6BazQayFEo=)
                          2: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: l7uCkdF3oajnOO1BO2ZHZdj03rTd10Caly4DOxvNX+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:49:41:99:42:3e:bf:69:5f:ee:77:9b:c3:ed:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
        Validity
            Not Before: May 17 21:00:34 2024 GMT
            Not After : May 18 21:00:34 2024 GMT
        Subject: CN=8a6cac742384a198fe3279114757e2de2ea5fe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:a0:5f:85:9e:35:bf:5f:16:5d:45:23:91:
                    3b:df:76:9b:b7:a6:9e:09:12:9a:cd:99:58:ff:03:
                    1c:95:33:a7:32:51:9b:2c:48:bb:53:3c:14:c7:57:
                    13:9b:a5:59:7f:99:7d:90:33:e8:70:4a:af:fe:89:
                    30:d3:d3:64:d6:40:1f:9f:4d:6d:46:7c:a3:d7:1c:
                    78:94:e3:1b:cf:28:09:96:5b:03:80:0e:19:45:b7:
                    a5:c1:e6:f2:de:46:bb:76:cc:96:71:1d:c9:29:3e:
                    12:7e:65:a3:1c:7b:3d:ba:e7:77:6d:cb:aa:c8:74:
                    67:a9:76:f4:67:99:ca:b9:fb:58:6c:70:b6:37:53:
                    a9:a5:05:30:6a:bf:e3:4e:61:d6:eb:e8:4d:87:27:
                    ea:37:ef:e8:dc:35:6e:0f:de:4a:a1:48:bf:47:b7:
                    0f:aa:ca:a5:54:5e:9e:2b:aa:dd:09:11:f4:88:78:
                    53:22:10:81:16:0a:70:94:90:b8:b8:8d:01:98:73:
                    b7:a6:2b:6f:83:cf:55:62:56:8f:ad:4d:6a:21:86:
                    eb:92:d3:0f:6c:ea:5c:1c:ba:d6:93:3d:19:37:32:
                    1a:1d:f6:01:99:f2:84:ea:1c:76:ee:23:53:c0:5c:
                    5b:d9:82:01:e0:a5:93:b9:48:86:42:7d:fd:a2:cd:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:AC:74:23:84:A1:98:FE:32:79:11:47:57:E2:DE:2E:A5:FE:75
            X509v3 Authority Key Identifier:
                keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:7b:45:30:29:7c:ef:00:f9:57:d8:6f:31:00:ba:e7:61:
         74:35:64:47:85:ce:93:61:57:41:61:bd:67:b2:60:92:e2:87:
         71:8a:ef:14:2e:6d:df:1a:5e:c0:94:a4:6c:3c:52:fb:a2:25:
         de:6b:90:c4:6a:ac:76:e0:28:c5:df:55:cc:b1:74:7b:23:2c:
         44:38:74:fe:87:95:b9:b1:e7:06:3f:7f:4b:d7:e0:3d:80:45:
         21:00:a2:8f:6f:4d:01:2b:46:c6:e7:a7:e5:08:13:4a:a3:91:
         9b:8d:ba:1a:ea:05:fb:ed:a5:51:24:f4:ce:91:76:42:5a:8a:
         7e:b1:54:f7:d3:a7:ea:2e:95:fb:b3:9a:b1:5c:7e:e0:6f:73:
         e0:3a:da:9c:19:5b:81:ea:cc:e8:08:9a:99:23:5f:03:15:2d:
         b3:25:93:18:71:ac:df:1e:0e:e2:45:66:10:c7:66:b5:8d:b5:
         f6:b7:1a:20:fe:48:8d:12:d6:d1:56:bf:25:5b:78:9f:9f:51:
         cc:4a:c0:43:c0:e0:34:1d:68:41:25:ad:04:6f:79:72:8e:ad:
         54:fc:21:0d:4a:a7:23:da:41:e6:03:0f:4c:f3:73:4e:95:0d:
         7e:00:08:6f:b8:e6:7b:51:72:51:aa:d7:d3:3a:18:83:24:33:
         c2:dd:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:48 2024 by rpki-client on console-fra.rpki-client.org