Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File:                     w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier:          aVgl8MKwb6RudUg7pYe4rT25b7H+Hc2F3SmR6DLjtpA=
Subject key identifier:   8D:75:62:8E:71:98:2A:35:CA:B8:A2:10:24:0A:70:45:97:8F:E8:AB
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer:       /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial:       018F877F3B95DA7BC30E4965A9B93B947873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number:          022E
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: ZnqT5k43OEA-QV9-Slz8EeyeO6k.roa (hash: sbr3/6qZwnqpv+9/PNLMYFP5pJWlpNGGcoEfIiDlOH4=)
                          2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: HfWnfAw1zJKbpnznlq2d8u3jHmhQKxENitesRr1nbWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3b:95:da:7b:c3:0e:49:65:a9:b9:3b:94:78:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=8d75628e71982a35cab8a210240a7045978fe8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:d4:a7:d8:2f:f3:5e:f5:09:ae:d1:e7:c7:
                    3b:11:b0:28:3b:57:71:4e:11:cf:4f:e8:0c:c6:2c:
                    28:52:32:12:f3:37:cc:dc:9b:74:f2:1c:04:e6:6e:
                    1f:98:1c:24:d8:ea:66:d8:2c:38:65:b5:35:8b:16:
                    af:5e:f3:65:a4:c4:91:bf:fc:90:ad:ea:7e:36:dd:
                    ee:98:d2:75:83:ad:7f:7a:04:de:f1:2b:02:02:c4:
                    60:de:d0:e1:40:84:7b:c8:98:29:9b:cb:02:ed:50:
                    45:ef:3d:79:f6:32:c4:05:9b:c3:80:78:81:9a:08:
                    13:4b:14:7b:7f:99:ae:84:55:16:9d:d3:b4:63:59:
                    27:68:dc:42:c4:7c:02:88:8d:eb:c3:2c:d1:c9:ff:
                    8e:03:6d:18:28:67:76:47:f9:db:dd:31:a4:1f:fe:
                    66:93:b0:38:c9:f0:f0:1a:87:c4:ba:52:12:57:cb:
                    0d:85:59:58:00:48:b7:c7:11:4c:5d:cc:64:84:e5:
                    3d:d9:87:7a:30:b9:13:58:fe:bb:e8:02:c3:8d:ad:
                    32:eb:47:26:f8:c8:5c:e9:02:f0:93:0a:c0:11:3b:
                    30:b2:23:b8:b0:b6:d0:2f:0c:d8:5c:44:a2:56:7f:
                    57:03:54:c9:3d:6d:95:78:02:45:5d:ea:cd:44:a1:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:62:8E:71:98:2A:35:CA:B8:A2:10:24:0A:70:45:97:8F:E8:AB
            X509v3 Authority Key Identifier:
                keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:3c:14:8f:f4:4d:30:44:96:25:e9:0d:49:29:dc:c6:34:
         85:62:42:d3:09:1f:b7:b5:7b:05:7f:bc:a3:e3:12:97:52:d8:
         79:57:5a:3a:b0:06:db:99:f3:bc:b9:49:79:af:db:83:65:c1:
         44:98:4f:90:3f:a4:e9:03:da:1b:a7:ca:42:89:31:33:e4:58:
         f7:c4:fb:6d:74:89:80:b2:da:54:c2:2b:cc:a8:a0:36:2a:30:
         6e:4a:68:b3:b1:28:fa:e3:98:43:d8:b9:d3:ba:7c:71:ac:a0:
         77:51:54:9a:ee:d3:49:1b:ba:b1:c7:28:93:67:62:00:80:0c:
         8e:ba:81:f8:5c:13:bf:7e:77:2a:e3:5b:b8:f5:89:37:86:f8:
         2d:ed:f6:39:94:75:cf:55:89:c7:cc:6e:f9:db:47:41:2c:9b:
         23:5c:03:71:2e:9e:8e:66:a2:52:d5:72:3e:b9:96:19:c7:f8:
         87:b2:28:19:3e:86:71:67:c3:42:fb:f1:f8:08:9e:54:d1:e5:
         85:18:c9:78:02:fd:21:e9:ce:d6:21:fd:1c:fc:75:3f:4e:25:
         8b:09:cc:a7:9b:79:8b:8f:f1:0a:ea:2c:7f:cf:93:d9:25:e3:
         e4:ae:6f:a2:bc:f7:09:e5:b9:0c:aa:ae:b3:70:ac:11:ca:de:
         40:9c:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:38 2024 by rpki-client on console-fra.rpki-client.org