Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
File:                     _waWcZQB67Hdu6mtT7jGbxTvcKU.mft (raw, json)
Hash identifier:          t4Q5UhHW5OoyUs8r59ZQZji9rVx9BWvBF/SDlQFzb/4=
Subject key identifier:   61:1A:8F:8E:9E:8B:79:B0:16:DE:B3:C2:07:97:D3:A4:3E:79:8E:85
Authority key identifier: FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5
Certificate issuer:       /CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
Certificate serial:       019356898481B807F747CFE0CCEF8016DDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
Manifest number:          0802
Signing time:             Sat 23 Nov 2024 01:01:12 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:12 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:12 +0000
Files and hashes:         1: AOLZSHvfpjhNqjWCSjD0TE9Wufc.roa (hash: /DnyMebhNBpuE58/HwUch9gRC/e2Ly6Ox4udE89hvZ8=)
                          2: _waWcZQB67Hdu6mtT7jGbxTvcKU.crl (hash: GHpsUud8JnN58YzSZhwF7sdttms6c+0DZ6qUvO5aJQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:84:81:b8:07:f7:47:cf:e0:cc:ef:80:16:dd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0696719401ebb1ddbba9ad4fb8c66f14ef70a5
        Validity
            Not Before: Nov 23 01:01:12 2024 GMT
            Not After : Nov 24 01:01:12 2024 GMT
        Subject: CN=611a8f8e9e8b79b016deb3c20797d3a43e798e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:31:33:20:ff:74:dd:e3:e6:23:94:49:92:
                    b7:95:a3:3c:19:0b:cc:50:e6:a5:da:fa:39:33:8a:
                    44:7e:0c:dd:4f:bf:5a:a1:2a:66:f2:47:8f:0a:5b:
                    8c:f4:b2:a0:17:81:00:79:de:92:9b:be:1f:13:cc:
                    a3:d3:00:d5:ef:f1:7c:fd:06:20:dd:09:bd:dd:5d:
                    46:0f:eb:0a:65:9a:2a:3a:46:b1:e6:f9:1a:8c:fe:
                    99:7e:61:8d:29:32:8c:f9:5b:58:77:37:0a:18:94:
                    df:ac:43:54:c9:50:1f:85:c7:d8:56:f8:70:60:f9:
                    ff:55:0c:f5:e2:30:81:05:14:9f:3c:cb:b6:87:05:
                    d2:e0:23:b5:c9:30:fc:db:1c:bd:0f:88:b7:52:e4:
                    34:f6:05:17:e3:58:4f:a2:a8:9f:f4:b7:f6:3d:18:
                    6f:52:1d:82:51:94:93:a2:a3:a8:54:05:c1:c1:d7:
                    8b:9e:8c:b8:e7:be:cf:51:2a:6f:5b:15:24:1c:7a:
                    94:f0:2a:26:66:8a:3b:21:92:be:84:8e:b0:64:9f:
                    b7:bf:e6:78:c9:d0:3e:09:7f:77:e4:61:3d:60:b8:
                    af:88:45:98:e6:cd:98:cb:28:bf:8c:95:86:91:1b:
                    32:10:87:cb:3d:68:65:32:29:9c:29:09:63:91:67:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:8F:8E:9E:8B:79:B0:16:DE:B3:C2:07:97:D3:A4:3E:79:8E:85
            X509v3 Authority Key Identifier:
                keyid:FF:06:96:71:94:01:EB:B1:DD:BB:A9:AD:4F:B8:C6:6F:14:EF:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_waWcZQB67Hdu6mtT7jGbxTvcKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e673cf-27d7-4169-8c6f-9901565dd853/1/_waWcZQB67Hdu6mtT7jGbxTvcKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:60:0e:60:75:9c:4e:7c:6a:16:7b:ad:ca:21:43:8d:62:
         e1:02:12:48:14:a0:21:a5:9b:78:a4:7f:1e:2b:51:5f:98:ee:
         ec:67:51:5c:38:e0:2a:af:3b:38:df:48:dd:68:d3:06:f6:76:
         e6:a3:1e:4d:b9:68:d5:7b:59:bc:35:54:96:06:b8:a8:11:7e:
         30:fc:3c:28:54:ba:66:7a:13:af:17:58:9c:55:e2:b9:a9:4d:
         ce:3e:c4:e3:b3:ed:0f:96:e1:e1:47:e4:89:1a:86:0f:0c:40:
         af:47:49:aa:98:31:06:66:14:a7:ef:f5:f4:0d:fd:80:dc:18:
         e0:13:df:88:83:d9:72:94:dd:ab:c5:d5:4e:05:8c:ff:99:43:
         a5:48:e0:c1:c9:67:38:58:25:0d:8e:d9:03:33:ba:4e:4d:c6:
         0f:a4:eb:86:61:2c:9b:ab:ef:b9:98:5f:94:5c:3d:f3:2e:c3:
         62:55:46:b8:67:9b:9b:3c:5e:75:72:b5:b5:e4:e0:1b:a5:cc:
         dc:ba:5a:7b:7a:0c:45:70:71:d2:cb:a2:6c:e9:34:46:32:48:
         38:a7:e1:a7:da:0b:6c:87:da:bd:75:2a:35:33:bf:46:18:de:
         03:0a:2e:78:4f:99:ce:e1:a3:f9:aa:86:67:f9:0f:38:35:eb:
         87:06:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:10 2024 by rpki-client on console-ams.rpki-client.org