Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File:                     WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier:          8H++1iGQp8TG5Fne0lFfAwne0tTvAS6fPF1VJXRjPU0=
Subject key identifier:   29:42:27:92:53:B8:4A:ED:71:BC:0F:07:95:E6:1C:4E:FE:A3:E0:E3
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer:       /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial:       018F882470B934B8350BFB09F64123E2CAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number:          025D
Signing time:             Fri 17 May 2024 20:00:40 +0000
Manifest this update:     Fri 17 May 2024 20:00:40 +0000
Manifest next update:     Sat 18 May 2024 20:00:40 +0000
Files and hashes:         1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: qcKiHxcENx0/fEwotbiyJCsuEydQ+IgKLFu8cfanilc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:70:b9:34:b8:35:0b:fb:09:f6:41:23:e2:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
        Validity
            Not Before: May 17 20:00:40 2024 GMT
            Not After : May 18 20:00:40 2024 GMT
        Subject: CN=2942279253b84aed71bc0f0795e61c4efea3e0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:02:bb:f0:55:a1:61:11:a8:c4:1e:8d:f0:
                    ea:5c:d3:ac:66:ab:84:4d:76:e1:81:7d:b6:d4:33:
                    ab:f2:44:37:74:85:1e:1f:84:39:56:97:39:a8:d0:
                    0f:3b:83:c2:c3:89:b4:06:82:c9:68:1d:2e:dd:62:
                    a5:d5:30:11:b1:88:d1:39:0d:7a:da:68:d4:ad:13:
                    4e:0d:5a:b8:27:ee:e2:1e:48:f8:89:c1:bb:12:a8:
                    26:21:c5:66:48:94:1a:99:97:a4:fd:be:0c:95:1b:
                    97:90:cc:5e:29:f2:9a:cf:5f:a7:c6:64:ab:33:31:
                    63:7c:97:63:fd:d7:23:9a:3d:cf:21:1b:83:4b:6c:
                    a7:15:95:9b:ee:55:b4:17:83:76:03:dc:1f:b2:58:
                    e1:63:f3:f0:75:2c:09:b4:31:59:dd:08:ae:c9:36:
                    bf:e5:13:4c:9a:93:ce:b4:9a:dc:3b:14:7c:1d:a7:
                    8d:26:45:4d:64:ee:99:36:32:51:93:01:a7:4b:c7:
                    80:fa:bc:4e:8d:1e:3f:d9:99:ad:b8:2d:5d:cf:17:
                    aa:5b:1e:d2:5b:f0:0d:e8:f7:f7:d2:66:20:4d:64:
                    be:74:fe:73:9a:c8:d3:2d:d1:94:80:db:8b:6a:6b:
                    53:d5:d0:6b:4f:23:02:c6:7f:e5:0b:6d:3c:90:0e:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:27:92:53:B8:4A:ED:71:BC:0F:07:95:E6:1C:4E:FE:A3:E0:E3
            X509v3 Authority Key Identifier:
                keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:fa:64:fc:b9:7c:3e:53:8c:2d:29:5a:cf:61:f4:f0:c4:
         d6:d2:48:de:18:b7:83:e2:83:9a:a1:71:92:4e:6d:32:5b:32:
         84:93:4c:f4:10:dd:b2:5d:0c:fe:46:5e:cc:91:81:63:fd:0e:
         1a:8e:b6:ad:47:64:e3:65:40:5e:02:76:17:c7:ef:70:37:75:
         68:e2:b9:13:91:7e:35:9b:a0:93:b4:ac:86:48:1a:ef:70:f5:
         f0:11:0d:64:53:3d:66:8b:15:e5:44:fa:20:71:2e:af:87:60:
         88:b2:63:9e:96:a2:8f:4b:51:53:24:05:ea:39:0a:9a:b2:d7:
         cd:43:51:5e:ec:c4:9a:fd:52:d5:42:3f:60:0b:e7:72:e5:b3:
         04:ff:b3:b6:31:55:60:54:ba:bd:66:39:93:df:0b:6b:f9:4f:
         f9:92:2a:1f:a0:1c:57:85:6b:42:52:88:0d:a6:03:31:81:7e:
         a2:17:ca:1e:7a:27:05:8e:c0:43:30:38:a2:ef:f2:73:49:5e:
         3a:a7:74:27:fe:28:2d:06:32:44:f9:2f:de:60:cc:0b:3d:d4:
         09:5f:a6:08:7d:c0:d7:f4:3a:09:c6:42:59:61:07:d9:c7:13:
         94:58:1d:9a:8a:83:6d:b4:e8:e2:bc:88:95:ba:46:87:9d:f1:
         50:e9:ce:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJHC5NLg1C/sJ9kEj4srAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNiNDQ5Y2YxMzJmZTkxYTkzMDBhNWEwZTUzNWY3OGYw
YzU2OGMwHhcNMjQwNTE3MjAwMDQwWhcNMjQwNTE4MjAwMDQwWjAzMTEwLwYDVQQD
EygyOTQyMjc5MjUzYjg0YWVkNzFiYzBmMDc5NWU2MWM0ZWZlYTNlMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcICu/BVoWERqMQejfDqXNOsZquE
TXbhgX221DOr8kQ3dIUeH4Q5Vpc5qNAPO4PCw4m0BoLJaB0u3WKl1TARsYjROQ16
2mjUrRNODVq4J+7iHkj4icG7EqgmIcVmSJQamZek/b4MlRuXkMxeKfKaz1+nxmSr
MzFjfJdj/dcjmj3PIRuDS2ynFZWb7lW0F4N2A9wfsljhY/PwdSwJtDFZ3QiuyTa/
5RNMmpPOtJrcOxR8HaeNJkVNZO6ZNjJRkwGnS8eA+rxOjR4/2ZmtuC1dzxeqWx7S
W/AN6Pf30mYgTWS+dP5zmsjTLdGUgNuLamtT1dBrTyMCxn/lC208kA4/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClCJ5JTuErtcbwPB5XmHE7+o+DjMB8GA1UdIwQY
MBaAFFnDtEnPEy/pGpMApaDlNfePDFaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQt
MmYyZDIzOTAzNjg4LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82YTE2ODEtM2VhOC00NjNjLTkzZWQtMmYyZDIzOTAzNjg4
LzEvV2NPMFNjOFRMLWtha3dDbG9PVTE5NDhNVm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJv6ZPy5
fD5TjC0pWs9h9PDE1tJI3hi3g+KDmqFxkk5tMlsyhJNM9BDdsl0M/kZezJGBY/0O
Go62rUdk42VAXgJ2F8fvcDd1aOK5E5F+NZugk7Sshkga73D18BENZFM9ZosV5UT6
IHEur4dgiLJjnpaij0tRUyQF6jkKmrLXzUNRXuzEmv1S1UI/YAvncuWzBP+ztjFV
YFS6vWY5k98La/lP+ZIqH6AcV4VrQlKIDaYDMYF+ohfKHnonBY7AQzA4ou/yc0le
Oqd0J/4oLQYyRPkv3mDMCz3UCV+mCH3A1/Q6CcZCWWEH2ccTlFgdmoqDbbTo4ryI
lbpGh53xUOnOLA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:57:39 2024 by rpki-client on console-ams.rpki-client.org