Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File:                     W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier:          N5d5rLvuaqNbvovMH9sxwl4smdzCwgFoE5yBmDOVHNk=
Subject key identifier:   D7:69:02:BA:67:55:D9:A0:65:6E:AC:D8:F8:37:C6:F2:73:99:FB:C9
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer:       /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial:       0193568AF45A5C854D68B2D14AD6CF455370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number:          0A14
Signing time:             Sat 23 Nov 2024 01:02:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:47 +0000
Files and hashes:         1: 8bI32EMgjSltmG1XchHf9qIMS5o.roa (hash: 5ckW1D4cU8o/9LOcqV0ZhpxDFFj83+SLF5cuQ3mmfqA=)
                          2: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: WuyjTAvb3OB4yXjQyv8Ci2DGGNFzjAvQmaLE+1r1j7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:f4:5a:5c:85:4d:68:b2:d1:4a:d6:cf:45:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
        Validity
            Not Before: Nov 23 01:02:47 2024 GMT
            Not After : Nov 24 01:02:47 2024 GMT
        Subject: CN=d76902ba6755d9a0656eacd8f837c6f27399fbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:df:7d:22:4c:1b:8d:ba:be:c3:0a:0a:6c:
                    3d:9a:db:b1:31:d3:01:2a:e6:ec:a7:5a:04:5e:d7:
                    c4:48:94:52:f5:61:30:41:77:61:ec:b2:ac:ef:c0:
                    94:ca:fe:98:cd:73:bf:de:9d:7c:70:e5:d0:74:0c:
                    52:90:ca:9a:06:29:60:ea:4e:9b:10:5c:a4:5f:90:
                    17:46:ec:06:d2:66:9a:1d:9d:1d:fc:1d:a4:cd:ac:
                    97:63:4c:51:8b:a5:7a:93:30:2e:62:0b:1b:bf:39:
                    8d:ab:04:43:0b:1a:e2:73:9e:c9:e7:51:5b:1d:51:
                    77:2e:13:61:ed:ff:3f:f9:84:f1:d0:7c:6f:91:00:
                    dd:05:f5:cb:a7:99:e3:74:0f:f7:c2:60:c6:4b:39:
                    e9:81:4d:b4:e9:a7:80:b4:06:c2:64:b3:f9:08:2f:
                    87:75:1d:3f:f5:c1:63:99:0a:d8:93:cd:01:9f:d8:
                    3d:8f:05:5d:76:c7:22:0a:25:97:ba:60:28:a4:d0:
                    7d:0c:fa:0d:e2:60:ca:92:12:fc:7e:0f:bb:78:1c:
                    1d:cf:24:b6:38:8b:f3:19:5b:be:e4:e4:d0:c3:f4:
                    af:7e:72:b3:9b:8e:52:ac:f6:8d:1e:54:58:b0:ef:
                    39:af:af:b0:17:fc:d0:17:07:2b:b1:09:5c:3d:c0:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:69:02:BA:67:55:D9:A0:65:6E:AC:D8:F8:37:C6:F2:73:99:FB:C9
            X509v3 Authority Key Identifier:
                keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:a4:3a:5b:14:ba:ac:9b:e3:6f:5e:96:60:46:2e:fd:22:
         57:70:15:c7:4a:f5:73:44:90:97:29:b1:79:43:33:5c:cc:14:
         3b:d6:67:e2:0f:40:f5:4e:1e:2e:f2:02:7c:7e:f9:84:9e:13:
         4f:da:16:aa:d9:21:ab:d1:50:8b:d2:90:43:1e:c9:df:ab:8d:
         1f:4a:72:a3:7d:d5:3e:0d:d1:6d:2e:b2:6b:f8:2a:e5:39:7a:
         f6:8e:2e:e2:f0:81:ef:ca:8b:fc:71:09:4d:3e:06:a3:93:46:
         cd:33:af:d2:a1:32:ee:1e:7a:00:1d:da:f8:05:c3:0b:f7:01:
         c4:f5:95:b9:6a:49:8a:b1:aa:1e:dd:a4:3a:6c:1a:28:00:9e:
         02:8e:49:60:87:7e:58:5d:6e:00:ad:f6:d3:14:7a:03:d1:45:
         55:02:91:6a:49:81:5f:35:bf:ac:47:0c:f3:7e:8f:01:be:de:
         b2:07:21:b7:97:11:b5:7a:14:21:c8:43:63:a9:ac:49:ce:06:
         42:96:50:77:e7:d1:a2:56:a4:50:82:c4:de:d1:c4:d4:d8:d2:
         8d:ff:f7:68:40:45:d6:ae:60:7d:56:ed:bd:13:3f:2c:d1:08:
         2e:c1:03:bc:56:9d:b4:a4:9a:5e:51:16:cb:df:de:77:ab:45:
         b8:77:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:59 2024 by rpki-client on console-fra.rpki-client.org