Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          lDvP2AE4QT43mWqAnrIOJhe1egTelrfuxSC+nYmDyFk=
Subject key identifier:   A7:59:B5:52:6B:8F:3F:53:51:2C:F9:2B:CC:2A:D0:B6:A3:F5:F2:F8
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       018F8FDD8883713CDF8377450724720AF01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          0BF7
Signing time:             Sun 19 May 2024 08:00:11 +0000
Manifest this update:     Sun 19 May 2024 08:00:11 +0000
Manifest next update:     Mon 20 May 2024 08:00:11 +0000
Files and hashes:         1: Bv0vZdAupj1HGgLi2psWKoqz2tM.roa (hash: c734MOTAD1JZod7/AQwj/uDqQLF4jQnAxs+/5qzBi9Y=)
                          2: MdKwAvU3TWXJ7z3RBqwTCPadIyk.roa (hash: vEWmPy1hXQdS+UjS+59I5YYb276X7UhHes9A5kdsafg=)
                          3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: txdtWbNbLs/0XZ55nmkSYtxh0thaMskmqiJ9Kc5iHac=)
                          4: Wo1SbWj4uIj2VYAk9L8zjvnKfYg.roa (hash: Isba/EFENs9w9xAI9cJ6bNzZvJSwvJZ/kezAG6TZI54=)
                          5: ru4RKqxJKavzEDtf0Zso79y9uVQ.roa (hash: 3oBkCRM2AvjUsBRGO7S4e26qmz7viUz5qLFAH5VsCik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:dd:88:83:71:3c:df:83:77:45:07:24:72:0a:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: May 19 08:00:11 2024 GMT
            Not After : May 20 08:00:11 2024 GMT
        Subject: CN=a759b5526b8f3f53512cf92bcc2ad0b6a3f5f2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:f6:0c:bc:59:9b:26:d5:96:1f:c3:c1:32:
                    28:d8:53:62:6c:ce:79:b7:e6:bf:71:a4:15:2f:3a:
                    0a:ae:f5:0d:28:a6:39:57:a6:41:f8:03:4d:7c:ae:
                    ef:94:cd:c8:5a:09:62:4e:65:59:af:49:e1:7b:bf:
                    ba:cf:84:7a:aa:c4:ff:cd:2c:c4:af:d3:7c:64:1d:
                    d6:51:dd:42:e8:26:f4:ae:16:ce:00:50:0d:35:91:
                    85:36:21:87:ad:40:e7:73:17:47:b9:71:59:b6:4a:
                    86:62:d3:8c:da:eb:f6:b5:e3:f4:db:f5:01:32:ef:
                    9b:c0:2a:e0:9e:ab:1d:49:51:19:9f:d0:16:df:07:
                    92:5a:aa:c1:db:47:fa:68:6d:ba:59:25:ee:a3:8a:
                    dd:72:13:fb:f2:cf:ea:5f:39:57:dd:5d:b0:b3:c0:
                    89:9a:a8:48:b8:b3:b0:46:3f:44:36:13:3b:19:89:
                    ce:bf:6c:54:a9:db:4f:79:5a:54:ed:0e:45:9e:d8:
                    f0:37:e6:31:b3:e8:b7:8e:08:71:c7:9a:85:69:44:
                    c4:d1:69:f8:09:bd:74:71:9e:42:97:11:f6:57:62:
                    31:09:c9:8d:2b:dd:9a:8e:ab:41:30:56:b7:53:d1:
                    37:8d:5a:62:63:2c:fb:a4:ec:83:a4:11:4e:a9:af:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:B5:52:6B:8F:3F:53:51:2C:F9:2B:CC:2A:D0:B6:A3:F5:F2:F8
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:c5:24:80:90:68:fd:c6:89:a8:b6:c4:d8:4f:ae:7a:61:
         57:fe:59:c5:e9:7e:4d:c8:2a:bc:55:87:93:4b:36:b1:fd:76:
         0e:cd:e6:5e:b8:0b:96:d9:76:6a:b9:83:4c:20:76:f5:62:32:
         e0:40:85:17:b3:a5:b9:1a:10:f0:c7:af:16:05:e8:49:23:df:
         c0:0e:16:2f:e5:53:2b:b7:f5:6f:93:19:89:ef:b9:79:1c:2c:
         80:4d:82:d1:51:25:a2:90:6d:28:03:a0:34:53:2f:be:79:a2:
         34:55:6e:7b:66:4d:9f:4c:75:27:c7:fd:55:d6:7d:05:88:46:
         02:27:ba:cc:98:8d:23:95:35:49:f7:32:8a:e4:c3:91:d5:4b:
         6f:4c:17:2e:bd:1b:29:18:63:4a:9d:0e:5f:3b:5c:96:ed:21:
         57:58:ec:2e:bf:9a:32:e1:31:e9:b0:0b:16:a2:88:72:c0:75:
         24:e1:bf:32:32:15:5b:ba:7c:f2:c0:ee:bb:0e:bd:f7:bb:b2:
         6f:1c:f3:31:0d:3d:82:c8:c6:54:f3:fa:3b:cb:42:c8:16:2e:
         47:65:08:40:cb:b5:88:98:2d:17:5c:c1:01:72:b7:84:43:ab:
         bf:74:83:18:a9:32:78:b5:f6:19:45:e0:be:b3:a2:a7:fc:99:
         db:a6:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:34:05 2024 by rpki-client on console-ams.rpki-client.org