Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File:                     Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier:          11WYzMMqYRlqa4we/fUDvSUNB7Bzt+ma7WmQbVXP+IQ=
Subject key identifier:   1F:0B:05:78:EA:7A:80:3C:F8:41:63:7A:77:63:0D:93:B9:C0:9F:06
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer:       /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial:       019369DA3F08F90BD8E6901159FCBC0E6AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number:          1358
Signing time:             Tue 26 Nov 2024 19:02:10 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:10 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:10 +0000
Files and hashes:         1: ARLasIxVIhIljMhjctHQtARNs1g.roa (hash: rm7ZBECrET+r8wdWNgH74Qy9rzRwZ6qyqg7lr5XFDss=)
                          2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: oKj6qlvAy7VnYGbdwohsZxsa+KI1mR3UYS79SjB4NPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:3f:08:f9:0b:d8:e6:90:11:59:fc:bc:0e:6a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
        Validity
            Not Before: Nov 26 19:02:10 2024 GMT
            Not After : Nov 27 19:02:10 2024 GMT
        Subject: CN=1f0b0578ea7a803cf841637a77630d93b9c09f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:6e:76:9b:4d:44:52:43:a7:44:72:2d:f7:
                    38:3e:38:89:f3:bc:f6:82:45:05:86:c1:02:f1:09:
                    80:1a:2d:25:bb:bf:81:cb:94:b6:34:58:18:e4:52:
                    60:de:a5:ee:49:1d:0c:8c:94:63:b0:67:dd:50:e5:
                    0f:7e:39:d7:cf:e5:f8:62:df:37:eb:2b:75:76:b5:
                    e9:66:2e:98:c1:8f:9f:f1:1f:d7:8a:15:bd:82:0d:
                    e6:95:c9:3d:ed:26:ba:69:e3:a8:78:76:e3:fd:78:
                    7c:eb:2b:c5:e6:ec:e7:cd:3b:59:5f:c8:b4:f4:04:
                    0c:b9:bc:20:29:01:1c:39:e4:11:56:e3:44:41:f1:
                    50:87:96:9c:a4:fe:9b:3f:d6:4b:49:92:2b:36:8f:
                    a1:44:70:51:c1:16:d8:c0:bc:23:57:dd:fe:3a:2f:
                    b1:c0:2e:e1:e9:4d:4a:a1:9b:e1:5a:28:db:0d:2d:
                    1e:d4:b0:7f:31:69:8a:bd:5d:d1:57:39:69:fa:af:
                    5f:98:2f:99:09:f4:69:8f:6f:36:96:86:f6:10:29:
                    62:21:0c:b0:9d:ac:90:24:fa:9b:e7:e8:64:63:61:
                    4b:15:a0:79:f2:de:5a:db:83:70:c4:e9:35:89:6a:
                    a1:1b:4b:c5:87:59:83:75:ab:14:e2:5a:fe:7b:3d:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:05:78:EA:7A:80:3C:F8:41:63:7A:77:63:0D:93:B9:C0:9F:06
            X509v3 Authority Key Identifier:
                keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d7:f3:3e:cf:e3:67:c3:38:46:a1:d0:9d:ca:a1:66:a6:7d:
         dd:7f:de:6b:38:65:6f:81:d2:67:1b:0e:dd:16:ac:9d:d8:54:
         b1:27:6b:44:d1:ff:34:68:06:3b:db:c3:18:66:42:41:89:15:
         7e:d1:4c:d1:69:7a:f2:0f:62:2a:88:8b:f3:67:c0:4d:4d:87:
         47:1a:98:5f:b7:c8:0a:39:aa:1d:6c:b0:f4:49:b2:ca:3f:96:
         a3:5e:ea:8e:60:f3:0c:7c:40:46:5d:c5:44:0f:af:d2:f8:0b:
         b9:ce:b4:f8:b2:ae:61:6b:da:43:ad:7a:90:02:6f:72:fe:f3:
         85:db:f2:2b:88:fa:85:c6:34:e2:0a:0a:db:30:8c:bd:10:cb:
         e1:e8:79:7c:05:18:14:27:73:78:2e:51:e9:3e:59:13:56:a7:
         55:d8:fc:f5:cc:f2:3c:54:4d:f3:89:b4:de:14:da:6d:20:a6:
         d6:bd:01:ca:69:eb:b0:35:ee:67:fe:d4:1a:1b:1d:5a:82:34:
         ed:da:a8:42:67:38:0f:f6:31:ae:c1:31:d0:29:75:5b:da:3b:
         87:4a:e3:23:dd:33:8a:bd:a2:aa:14:ca:52:ae:51:f7:3b:10:
         b4:44:c3:97:fa:0e:41:1f:ec:a4:8b:ea:b4:07:a2:48:21:9b:
         a1:4d:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:28 2024 by rpki-client on console-fra.rpki-client.org