Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
File:                     wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft (raw, json)
Hash identifier:          SHQTl22+dXPvZYrZsGOU6LfSr7XtJhtc5NB2x2OLsF0=
Subject key identifier:   A4:08:4A:FE:84:23:1B:F0:67:84:46:34:24:F3:86:0A:B8:E8:26:E8
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Certificate issuer:       /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial:       01923B1523B92F25212A65B69D35866A292F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
Manifest number:          0210
Signing time:             Sun 29 Sep 2024 00:01:33 +0000
Manifest this update:     Sun 29 Sep 2024 00:01:33 +0000
Manifest next update:     Mon 30 Sep 2024 00:01:33 +0000
Files and hashes:         1: YMqG18E0rkuHr594SXXYods01Es.roa (hash: RSqk7ZvL/9qvnoWbkimYD7FOk/jKa8iMGUsgB8KuXTs=)
                          2: ZBplgDHPYXrzncGkdkEk1mwSOwk.roa (hash: 7pk8Tqn1bImuDmBm9uBMwEQMkyCt32VktSQDpZSwmW4=)
                          3: wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl (hash: csIHplShJNJUKe8p09ZhNNquqj/DmUuQitRbs3jTw2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3b:15:23:b9:2f:25:21:2a:65:b6:9d:35:86:6a:29:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
        Validity
            Not Before: Sep 29 00:01:33 2024 GMT
            Not After : Sep 30 00:01:33 2024 GMT
        Subject: CN=a4084afe84231bf06784463424f3860ab8e826e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:a3:fe:ba:86:e9:c9:75:77:9b:e0:1d:cf:
                    d9:c3:8c:63:64:92:e9:ae:b6:cc:20:2f:8f:88:bb:
                    14:7a:d4:5f:d4:41:86:ce:7b:5a:dd:20:9c:ca:57:
                    14:60:79:6b:14:97:27:aa:b3:ff:7e:0b:41:95:c3:
                    ef:81:85:fe:fb:98:5c:57:aa:99:3f:aa:93:cf:3b:
                    c7:dc:be:59:b1:79:0d:66:fb:a1:32:8b:f6:d6:d8:
                    88:79:b0:ec:7a:1b:7d:4d:af:16:7b:e4:77:9e:b5:
                    09:c8:80:f5:6c:07:87:be:0e:29:bf:14:47:fb:a9:
                    76:34:3d:37:3d:12:e9:f3:25:ae:a8:72:60:c4:92:
                    bb:c5:da:67:42:4a:3c:35:4c:81:6b:85:18:bb:6a:
                    45:f0:c5:d4:41:73:4c:a7:4d:da:ff:54:a5:2e:f0:
                    5f:1a:fe:cf:2b:4c:80:b8:04:0a:25:10:4d:c5:09:
                    f0:bb:ec:d3:b3:da:57:16:e4:7f:0d:a2:9e:e9:af:
                    c6:03:cc:92:0d:93:35:5f:27:d1:7a:6c:3a:45:10:
                    ea:d1:56:d1:f1:2a:29:aa:4d:1a:b2:c7:93:06:0f:
                    6d:df:04:53:d2:ae:4f:dd:0c:28:71:56:8d:04:4d:
                    b7:33:de:f0:df:43:07:be:84:11:31:41:53:ce:77:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:4A:FE:84:23:1B:F0:67:84:46:34:24:F3:86:0A:B8:E8:26:E8
            X509v3 Authority Key Identifier:
                keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:82:fd:56:ef:dd:5d:ad:cf:f9:4b:6f:66:c2:f5:9f:43:
         b0:92:7c:b5:70:f5:9d:d8:1f:6e:2f:78:e1:94:af:f1:33:fc:
         f2:bf:5d:45:d6:9d:37:4f:0a:4e:79:59:0e:48:18:36:95:05:
         5b:34:78:e0:f4:41:d3:40:af:0f:35:64:28:61:e0:9c:9b:32:
         b0:ea:e3:34:86:eb:bf:db:29:cd:d2:5d:2d:4f:72:aa:49:04:
         64:8d:46:72:ac:59:e9:38:55:3b:80:6b:79:50:15:01:93:66:
         3d:0c:a1:b3:ed:ec:0b:78:29:5b:a5:d9:ef:08:41:bd:f7:65:
         0a:ed:dc:c5:f0:d3:92:11:28:09:2f:fa:f7:29:a6:92:90:08:
         a1:4b:3d:b8:88:e1:73:df:82:0f:81:45:5b:ce:88:f9:a2:1c:
         5b:a7:2d:11:76:07:49:9f:5f:bc:34:77:e5:70:66:72:f2:77:
         1b:c6:f6:de:86:9a:73:86:08:4e:a6:2e:7d:ea:3a:9e:7a:96:
         27:ed:14:48:fb:b3:2d:89:97:fe:4b:be:d0:08:82:dc:2b:88:
         cc:31:21:af:78:cf:e4:8e:7b:13:54:7b:ae:c8:f3:a0:7c:55:
         9f:99:a2:b0:6c:9e:7c:19:14:83:92:ce:28:fb:de:ae:0e:4e:
         51:5d:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:43:58 2024 by rpki-client on console-ams.rpki-client.org