Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          Y10n/OqXqxoaNsBn44iI/ao+5rJZNw9rH4xzVciueeY=
Subject key identifier:   93:C9:43:F8:64:17:54:D2:F4:2D:01:A6:CF:ED:04:67:D4:FB:19:6A
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       0190EF57E2E649E6794F913DBA6F4F8BFAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          0CAD
Signing time:             Fri 26 Jul 2024 14:00:32 +0000
Manifest this update:     Fri 26 Jul 2024 14:00:32 +0000
Manifest next update:     Sat 27 Jul 2024 14:00:32 +0000
Files and hashes:         1: Bv0vZdAupj1HGgLi2psWKoqz2tM.roa (hash: c734MOTAD1JZod7/AQwj/uDqQLF4jQnAxs+/5qzBi9Y=)
                          2: MdKwAvU3TWXJ7z3RBqwTCPadIyk.roa (hash: vEWmPy1hXQdS+UjS+59I5YYb276X7UhHes9A5kdsafg=)
                          3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: JCAY5TyP9z0Al0t6a8clA1/y/2CKw0MaLGWlD8UUgjA=)
                          4: Wo1SbWj4uIj2VYAk9L8zjvnKfYg.roa (hash: Isba/EFENs9w9xAI9cJ6bNzZvJSwvJZ/kezAG6TZI54=)
                          5: ru4RKqxJKavzEDtf0Zso79y9uVQ.roa (hash: 3oBkCRM2AvjUsBRGO7S4e26qmz7viUz5qLFAH5VsCik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Jul 2024 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ef:57:e2:e6:49:e6:79:4f:91:3d:ba:6f:4f:8b:fa:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Jul 26 14:00:32 2024 GMT
            Not After : Jul 27 14:00:32 2024 GMT
        Subject: CN=93c943f8641754d2f42d01a6cfed0467d4fb196a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:41:ab:12:af:b3:94:78:e1:82:a3:eb:ca:
                    7b:cb:97:3d:c7:90:63:9d:8d:af:a3:41:a4:d7:0f:
                    c9:52:18:9a:a8:cb:af:b4:15:fe:27:22:57:fe:ba:
                    a4:ee:ee:46:fb:ba:e8:fb:22:54:d8:79:f4:ab:43:
                    bf:23:ac:68:47:66:69:66:f7:34:71:8c:35:c4:e9:
                    c2:b3:2b:49:86:f3:59:37:42:60:32:de:79:51:6b:
                    28:3b:6d:e6:16:ff:6e:2b:28:7a:f8:fd:f9:3b:76:
                    80:6e:64:b8:0d:55:f7:ab:da:6b:51:9c:e4:3a:8b:
                    72:f6:8a:2e:20:b9:c4:56:00:66:26:76:89:6f:d7:
                    08:0c:a5:10:f0:6f:e5:27:5d:42:5d:f9:f0:55:7e:
                    5c:c5:32:8c:de:48:04:af:01:3d:4d:e4:1e:b3:d6:
                    34:56:02:1c:9b:10:d5:1e:d6:00:85:1d:26:f0:14:
                    b6:17:61:56:07:99:1e:e6:ef:a0:59:ce:c7:a3:e0:
                    58:a5:0d:d0:ec:f7:cf:df:da:11:1b:6a:34:fd:9d:
                    b1:7c:a0:e0:d1:db:ef:c4:ef:36:f0:b1:27:58:18:
                    40:f8:60:68:c6:a4:48:ec:7a:9a:da:9e:c6:c9:9b:
                    66:51:98:ce:0c:8e:83:2e:db:e2:65:1f:a6:04:d8:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:43:F8:64:17:54:D2:F4:2D:01:A6:CF:ED:04:67:D4:FB:19:6A
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:da:89:65:69:73:18:62:cf:90:81:c0:c6:f9:3d:ce:31:7f:
         56:83:af:b5:e8:10:e7:88:fb:24:b7:09:cf:61:20:46:54:24:
         35:ca:4d:e3:86:6c:a6:2e:66:73:33:9d:11:8e:23:d6:10:15:
         66:6e:bb:75:4c:2c:08:55:43:e5:0d:0a:de:23:bb:5e:da:92:
         d5:1c:a3:32:bd:13:95:4b:f4:d9:2b:18:a5:93:f0:7a:14:9f:
         40:31:24:79:8b:3a:ed:f4:fb:64:29:08:85:2b:65:5c:80:7c:
         78:ad:a2:23:44:22:ab:dd:b9:57:f1:f9:4a:e4:f9:df:af:a1:
         35:89:e0:3d:3a:ec:f7:a4:74:5e:ed:07:30:67:6e:2e:b1:51:
         1e:c5:ff:73:aa:3c:dc:f4:27:b1:27:9a:02:05:8b:4b:39:a9:
         e1:3c:0f:99:9a:1e:b0:23:d8:da:a1:59:a9:a6:5c:b6:87:46:
         67:3d:8b:5e:5a:2d:50:74:99:35:5f:e3:8d:dc:2d:b2:a3:7c:
         30:48:4a:5e:e7:ce:cb:02:e6:b4:13:b4:18:fd:24:b1:6d:45:
         16:a6:b6:d3:51:da:28:76:c6:a9:ef:09:38:61:a1:75:f1:8c:
         67:dd:63:a6:35:29:60:e9:69:f3:10:30:52:02:0d:a5:05:a4:
         ad:3b:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:07:07 2024 by rpki-client on console-ams.rpki-client.org