Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          KyN/vGDcQ//ZfSvavb9MypI5dPwa8Ss97upQ1hxA/N0=
Subject key identifier:   E8:5D:3F:35:5D:51:BD:A2:AF:6F:21:93:79:09:0E:D8:DC:FF:F0:4B
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       01936AEB8BC7C08570690A43C52F9B7D8ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          08C3
Signing time:             Wed 27 Nov 2024 00:00:41 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:41 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:41 +0000
Files and hashes:         1: 3lKWR4LG5D31XW1NNfOK8w2hurM.roa (hash: oA5ggqWQ457/0TIcY0Zar5tQ+8bHjOJHZ4w8wGACfb4=)
                          2: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: mB5CXuD1mk1AW4wFJ0qRE66uN4bHYFM8nQ3Ck/GeIm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:8b:c7:c0:85:70:69:0a:43:c5:2f:9b:7d:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Nov 27 00:00:41 2024 GMT
            Not After : Nov 28 00:00:41 2024 GMT
        Subject: CN=e85d3f355d51bda2af6f219379090ed8dcfff04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:ac:42:15:71:43:d7:6c:2e:26:83:99:41:
                    b1:1e:c2:41:9c:41:ce:a1:d7:18:e0:05:bf:d1:6e:
                    e7:52:9d:cd:88:38:13:14:07:39:77:04:72:3a:aa:
                    64:24:4a:f8:c5:2e:b8:58:da:3d:cd:de:d9:94:cd:
                    a6:35:c6:87:76:21:c8:8a:57:9f:a0:89:b2:ed:eb:
                    58:86:0e:a4:a9:9d:b9:46:9a:41:b9:36:8f:a9:5a:
                    7e:a9:2b:d6:12:6a:77:a2:ba:a5:14:85:59:d3:c6:
                    31:6b:ef:f0:90:9b:28:cd:d5:46:64:0e:57:33:42:
                    e3:77:0d:57:61:3a:da:0f:fe:94:5b:fa:32:84:d6:
                    4c:be:23:07:af:f1:9d:0f:c1:e6:08:37:44:00:6d:
                    fe:a0:37:b3:60:18:2e:a4:54:4d:4b:b1:8f:82:04:
                    ff:5e:c2:c4:39:67:80:a8:b2:a7:86:30:1e:9b:da:
                    50:d6:04:90:af:a7:19:d9:5e:8f:f9:38:23:60:19:
                    fb:2a:7c:f6:33:3d:09:6b:0e:30:06:8c:1e:02:a3:
                    71:3d:a1:24:5b:77:f6:14:8d:10:c3:11:38:0e:fb:
                    fd:ef:8c:d5:74:3b:17:59:dc:e8:a5:04:d4:66:25:
                    3c:cd:ff:43:db:70:e0:b6:65:5f:75:88:ea:25:1e:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:3F:35:5D:51:BD:A2:AF:6F:21:93:79:09:0E:D8:DC:FF:F0:4B
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a8:e6:a5:65:dc:ce:5f:ee:10:44:c7:d7:f9:18:ce:11:c9:
         ca:19:cd:dc:c2:0e:48:1c:5a:55:90:c8:e1:29:e4:fe:cf:8e:
         53:8b:2b:6e:3d:ed:72:0a:5c:84:7d:d2:23:3d:31:e3:07:51:
         f6:db:1a:f8:42:19:ac:5f:87:ed:c9:77:b5:61:03:89:41:6e:
         10:8c:3c:f8:dd:9e:ca:0a:77:17:66:69:b3:2c:5b:99:f8:31:
         a0:51:a8:b9:d7:26:1a:cd:29:d4:c7:62:40:0a:3a:9f:d6:35:
         15:53:fc:4f:8a:2f:b9:87:e1:90:9b:ba:e0:1d:b1:af:b3:f2:
         d5:5d:94:69:30:47:cb:01:97:50:6c:fd:78:6f:79:e1:89:1e:
         ce:4c:b3:34:3d:63:c1:4d:28:f3:d2:6b:b5:8d:e9:3a:b0:f5:
         4b:05:fd:40:f4:da:c1:d0:dc:5c:dc:0e:55:bf:6d:78:db:c2:
         18:f9:91:47:2c:79:44:80:84:ee:c8:ee:0a:6e:45:8f:04:c8:
         1d:5f:35:2d:20:71:8a:7f:92:74:b4:83:f8:23:27:0f:c0:ec:
         26:ef:9a:c2:37:61:d0:3c:a8:26:94:62:c1:d1:38:66:40:c8:
         8b:f6:7c:b6:31:8d:01:b2:87:a3:72:c4:55:b2:6a:ae:f8:c2:
         b5:ed:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:00 2024 by rpki-client on console-ams.rpki-client.org