Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          4UGfsDWyF+V0GOxazTpZENiRxiDGVXsY4FNs3Cas34Q=
Subject key identifier:   FD:DB:52:BE:22:D6:09:AC:B9:45:CB:B5:E1:91:E2:54:DC:17:04:F7
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       019357D23A365CA33A39412B5512A8A45362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 07:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:15 +0000
Files and hashes:         1: O3AuqwTTUX3LhgT-9CcZl2GnHyY.roa (hash: GPQ6QU0LakOqkClUzg37u5T2BeP5D84KLgpy21pwhyY=)
                          2: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: 8nXGGYMicpbNuxD30Vy6FoHTvoA2T/uFUKQlpHM0RFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:3a:36:5c:a3:3a:39:41:2b:55:12:a8:a4:53:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Nov 23 07:00:15 2024 GMT
            Not After : Nov 24 07:00:15 2024 GMT
        Subject: CN=fddb52be22d609acb945cbb5e191e254dc1704f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:1d:62:66:0b:3d:4a:39:d7:27:58:6e:b9:
                    f6:52:ff:d1:8b:2d:a3:d6:35:a1:b3:89:9e:a2:9a:
                    b2:8f:97:ea:22:1b:7a:ed:01:4e:39:2a:2f:ce:a7:
                    80:3f:b7:6c:dd:0c:64:5a:8a:c7:d5:66:62:fd:e8:
                    a2:db:85:ff:bc:a5:e4:79:3c:82:16:d6:b4:ed:06:
                    6d:ea:3c:b5:e4:79:93:f0:5f:51:ce:fc:d4:4b:b4:
                    a7:9d:b5:7e:d2:cb:60:c6:66:95:bd:db:e9:2d:c7:
                    af:8b:0d:9a:79:76:14:c1:39:12:e7:75:65:f2:71:
                    4a:4f:a1:2b:d6:82:67:f2:ea:ea:bc:4f:f5:69:bd:
                    2b:63:f7:f0:c0:95:2f:70:69:60:f5:08:cd:e0:6c:
                    e0:e5:c7:66:a6:e0:b4:66:7d:3b:44:1c:5f:e9:f3:
                    5f:1c:a0:21:41:63:a7:0c:4c:41:a5:05:02:30:6d:
                    eb:69:a8:88:0c:a2:c4:e5:3e:d7:9c:c5:8b:af:bb:
                    8d:f1:92:a0:b5:fc:0d:26:0a:48:c4:0f:8f:65:58:
                    c6:f7:16:f5:36:40:40:e3:1e:00:e4:a2:55:44:6d:
                    68:25:bb:c7:9e:ad:12:48:cc:9b:f6:70:0e:b8:61:
                    c0:a3:e5:cc:a8:9e:f5:35:95:30:19:0c:5e:90:21:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:52:BE:22:D6:09:AC:B9:45:CB:B5:E1:91:E2:54:DC:17:04:F7
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:64:ee:2e:87:e0:2e:2e:83:60:ec:04:15:90:7c:24:62:
         31:77:ff:bd:ab:d9:2f:0c:fe:3a:b3:20:92:5b:7e:3f:27:05:
         86:5a:7f:9c:de:3d:05:50:88:11:ea:94:87:4f:18:d4:31:07:
         4a:8d:86:20:bf:5e:2b:b6:6d:c4:4c:f6:b8:14:23:09:c1:63:
         46:07:96:a6:7e:f4:45:89:c1:5f:28:3b:59:e9:dd:97:6c:6e:
         7e:19:a5:e9:81:44:6e:0b:c4:7c:a8:1b:05:8d:77:96:60:1b:
         c2:77:b5:a9:90:db:f7:08:18:3a:e6:19:15:16:0b:2b:f2:7f:
         9e:cf:1d:29:f0:9f:aa:4a:2a:d6:9f:25:e2:ac:00:a9:f6:48:
         9c:4a:c0:cb:86:ae:53:36:d2:d2:6d:a0:46:65:c3:75:b9:3f:
         df:a9:d5:04:6d:1a:7f:c3:1a:3e:fd:db:39:5a:b2:31:3f:b5:
         10:4e:db:8c:3d:e5:ca:34:33:d0:7a:57:5e:4c:87:27:fc:9b:
         b0:65:a5:38:df:74:84:e3:13:64:0e:71:a4:d2:16:77:93:8b:
         4d:7c:7a:6b:dd:95:61:bf:01:16:09:ea:cb:62:54:bd:31:1d:
         74:d5:4a:83:f5:8c:fc:fc:49:cc:b4:d9:a6:c3:9f:47:36:ab:
         0a:8f:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:39 2024 by rpki-client on console-fra.rpki-client.org