Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          az0aNjiaiRu0Nk77QbeqpiruugTYDPEhz3QAnw9z3HY=
Subject key identifier:   CD:CE:CD:2D:EB:61:4F:BC:F6:9F:A2:7C:4D:35:52:D8:D3:E3:BE:ED
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       0194BABB9EA7AC92B978A7A4DF3ABF62DD44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 05:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:45 +0000
Files and hashes:         1: A2lRtYsynJJAILeNP4ol_NB53as.roa (hash: zgRdZJry0e4HRbPx+TfhqLtDE1uOOj3QlmHxDJhN/Mg=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: 4um2C4SvrLcAxjVxZquhxTC/HK+N3tEKnoMgzIz15Yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:9e:a7:ac:92:b9:78:a7:a4:df:3a:bf:62:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Jan 31 05:00:45 2025 GMT
            Not After : Feb  1 05:00:45 2025 GMT
        Subject: CN=cdcecd2deb614fbcf69fa27c4d3552d8d3e3beed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:ca:6b:c0:c4:ad:bd:11:7b:29:5c:9f:8f:
                    3d:13:1b:88:5f:1e:18:7d:38:b1:19:f2:e6:c7:81:
                    66:ef:6a:5a:06:18:ec:b5:66:51:2c:5e:25:28:4c:
                    0b:45:a7:2f:52:2c:f7:87:ed:ad:01:fe:00:c2:07:
                    d7:4e:5e:34:ac:b3:d4:bf:8c:8d:a5:54:5b:32:00:
                    d9:82:0f:50:55:8e:d5:c3:a7:36:3d:95:77:14:d7:
                    41:e9:5e:30:f5:3f:02:2b:c2:ae:ef:85:88:c0:1c:
                    ac:77:ab:14:8c:98:84:b5:eb:57:81:d5:33:d8:28:
                    bb:3a:4e:27:11:4c:f8:7d:21:3f:21:82:1a:ae:f2:
                    eb:8f:eb:b6:c3:9b:8e:db:62:d4:0f:c8:3f:b0:56:
                    da:75:07:ae:51:bb:a0:8f:eb:1d:62:c6:21:59:45:
                    1e:fa:d1:56:ca:f6:6c:a7:34:72:9d:f7:a0:8e:e9:
                    e4:b3:ab:48:e3:92:7a:ac:6f:23:43:d2:8b:ae:ad:
                    90:8a:49:24:e7:37:d6:0a:20:7d:42:5f:46:b9:68:
                    6a:32:d5:f6:5a:9d:4b:db:9e:4e:e0:7d:dd:89:28:
                    19:56:3e:d2:5c:02:aa:72:91:e1:13:41:00:5a:1b:
                    ce:7e:64:d6:2a:f9:80:aa:54:6d:0d:a4:ba:a7:79:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:CD:2D:EB:61:4F:BC:F6:9F:A2:7C:4D:35:52:D8:D3:E3:BE:ED
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:da:71:10:7e:43:18:13:db:e4:11:32:0f:25:26:89:d0:28:
         b3:d0:83:27:7e:e5:82:55:f2:a2:3e:da:1d:fb:de:8f:39:1c:
         cf:9e:1a:b2:63:c2:c4:e8:6c:8c:f4:fb:43:61:1d:45:70:33:
         b6:ab:9a:1f:83:37:11:85:d5:20:71:38:13:9d:4f:60:cd:ae:
         77:f0:0a:bc:63:d9:c1:d9:28:e9:8d:f8:68:cc:82:d4:bf:38:
         59:25:10:1f:df:2d:d2:83:02:ff:cc:5b:94:a6:58:0f:2d:77:
         ea:96:2d:8c:a7:60:d0:09:b0:15:81:96:ae:f0:bd:32:4a:29:
         a8:12:55:d8:9f:b1:13:54:3d:3e:67:52:be:e9:55:85:f4:f7:
         be:47:fd:c7:96:b7:a9:78:2e:ab:8f:64:60:b4:5a:b7:23:e9:
         7f:30:b6:f8:d8:a1:42:5d:df:4b:5c:b7:0a:93:72:60:35:da:
         3c:6f:0f:3d:71:30:45:df:f6:08:f5:0e:22:d8:1a:eb:07:51:
         ac:0f:6a:92:cf:46:9f:3e:8e:33:1a:00:a9:11:83:aa:b1:66:
         9e:56:27:21:0a:42:8d:a7:e8:83:92:1c:5c:b9:a4:19:14:96:
         a9:b7:70:7f:52:66:1e:c4:a8:d2:51:2e:59:80:a9:54:eb:70:
         4f:43:a2:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u56nrJK5eKek3zq/Yt1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZjdkMjdlYmMyNjliZjE0YjhkNjg5NTc5MWFmZmQ0Mjlm
NzAyMjIwHhcNMjUwMTMxMDUwMDQ1WhcNMjUwMjAxMDUwMDQ1WjAzMTEwLwYDVQQD
EyhjZGNlY2QyZGViNjE0ZmJjZjY5ZmEyN2M0ZDM1NTJkOGQzZTNiZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySfKa8DErb0Reylcn489ExuIXx4Y
fTixGfLmx4Fm72paBhjstWZRLF4lKEwLRacvUiz3h+2tAf4AwgfXTl40rLPUv4yN
pVRbMgDZgg9QVY7Vw6c2PZV3FNdB6V4w9T8CK8Ku74WIwBysd6sUjJiEtetXgdUz
2Ci7Ok4nEUz4fSE/IYIarvLrj+u2w5uO22LUD8g/sFbadQeuUbugj+sdYsYhWUUe
+tFWyvZspzRynfegjunks6tI45J6rG8jQ9KLrq2Qikkk5zfWCiB9Ql9GuWhqMtX2
Wp1L255O4H3diSgZVj7SXAKqcpHhE0EAWhvOfmTWKvmAqlRtDaS6p3mKQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3OzS3rYU+89p+ifE01UtjT477tMB8GA1UdIwQY
MBaAFFj30n68JpvxS41olXka/9Qp9wIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjkt
NGM5MmNlYzA4YmE4LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjktNGM5MmNlYzA4YmE4
LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNpxEH5D
GBPb5BEyDyUmidAos9CDJ37lglXyoj7aHfvejzkcz54asmPCxOhsjPT7Q2EdRXAz
tquaH4M3EYXVIHE4E51PYM2ud/AKvGPZwdko6Y34aMyC1L84WSUQH98t0oMC/8xb
lKZYDy136pYtjKdg0AmwFYGWrvC9MkopqBJV2J+xE1Q9PmdSvulVhfT3vkf9x5a3
qXguq49kYLRatyPpfzC2+NihQl3fS1y3CpNyYDXaPG8PPXEwRd/2CPUOItga6wdR
rA9qks9Gnz6OMxoAqRGDqrFmnlYnIQpCjafog5IcXLmkGRSWqbdwf1JmHsSo0lEu
WYCpVOtwT0OiDA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:15 2025 by rpki-client on console-fra.rpki-client.org