Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File:                     WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier:          cl3jp1/8ppVfMugf2IPZ6la1Ujcx4FDdSFLZiLCQd9o=
Subject key identifier:   DA:2C:C6:7B:ED:A1:5D:61:0D:F4:F2:CC:90:2F:BD:B3:8D:C1:DE:70
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer:       /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial:       0194BAF2039ACA39937A0CE0D9AF4F3F4872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number:          0B49
Signing time:             Fri 31 Jan 2025 06:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:10 +0000
Files and hashes:         1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: faHHNTgPbI08znKrEYP3XXGM4WE6g7yoYg2Q5owf1VA=)
                          2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:03:9a:ca:39:93:7a:0c:e0:d9:af:4f:3f:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
        Validity
            Not Before: Jan 31 06:00:10 2025 GMT
            Not After : Feb  1 06:00:10 2025 GMT
        Subject: CN=da2cc67beda15d610df4f2cc902fbdb38dc1de70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:61:94:df:ac:95:c1:85:91:0d:6e:96:d7:
                    32:48:af:c2:ec:83:cb:a2:2d:16:1a:3f:55:43:25:
                    cd:49:4f:5c:95:f2:18:0f:35:4d:2d:43:b3:52:50:
                    57:7d:1c:55:05:d8:25:c4:b3:2a:a4:a8:7f:93:00:
                    12:10:29:2a:3c:df:35:a0:60:a9:f8:0c:bf:d2:f7:
                    92:e1:7b:9c:09:f2:52:a6:1f:ae:d1:2f:22:a5:c2:
                    09:af:97:74:85:24:e5:09:8c:32:69:6e:2a:46:ec:
                    0b:a1:61:fe:fd:0e:4e:db:39:4c:73:ff:e0:cd:96:
                    48:07:0b:40:88:e9:00:cf:bd:ea:2d:cb:b5:df:84:
                    d8:82:9c:51:a3:17:c1:d4:f9:6b:3e:6f:8e:42:3e:
                    3b:24:ec:ae:0d:6e:06:29:8f:b5:9c:84:1d:61:5f:
                    2d:ef:f9:5e:77:3e:88:af:de:51:51:e0:91:df:22:
                    69:b8:b8:44:ee:76:e9:84:7d:10:a1:2b:5a:d5:8f:
                    dc:1f:e9:dc:d2:8f:88:c1:cb:e4:41:0c:1c:12:e7:
                    ce:dd:9e:8c:fd:51:12:39:4c:8a:0f:4e:1a:9d:40:
                    37:80:d6:f0:bf:1e:ac:9a:62:06:a3:4c:4d:d4:5d:
                    aa:4d:9a:d7:d2:91:aa:e2:37:ac:ca:ad:e6:1b:3a:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:C6:7B:ED:A1:5D:61:0D:F4:F2:CC:90:2F:BD:B3:8D:C1:DE:70
            X509v3 Authority Key Identifier:
                keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:44:f8:ee:9e:c4:a0:e4:80:6b:a6:bd:1e:32:f8:e3:a9:
         0a:9f:c2:a0:74:7c:48:2c:40:a2:59:93:71:c1:f7:da:06:35:
         2e:01:15:4a:9b:3a:15:bd:fb:44:9f:f0:06:34:45:5a:27:74:
         8e:2a:6b:56:3d:02:14:f4:8a:6e:9f:30:1e:2c:23:ce:41:85:
         b8:16:08:70:8b:10:fa:65:01:2c:3b:83:2e:6f:fa:0a:01:23:
         38:99:02:51:71:5c:8d:b4:04:fd:87:d0:f7:2b:74:c1:f0:b7:
         21:93:50:62:f5:c7:34:b5:33:7f:82:b6:f3:e9:a1:cf:9c:ea:
         f0:9c:4b:b9:22:ad:fb:db:0c:f4:44:38:5b:9e:92:d9:75:3d:
         a9:fb:92:6f:44:dd:2c:ac:88:6b:ef:9d:a4:5e:2a:2c:42:98:
         17:2b:0e:7f:ba:3b:5b:3b:38:ca:af:4f:34:a0:57:fa:2c:bf:
         0a:61:61:84:53:66:4e:ca:c6:bb:ed:f4:a6:be:16:11:99:25:
         41:34:bf:2f:bb:b1:d0:f8:98:fd:a9:11:22:1d:a7:52:46:75:
         db:92:26:37:28:96:a6:b9:dc:9f:a4:78:f5:3a:79:d4:e5:b8:
         5f:1f:7b:10:b7:ef:6a:71:66:f7:11:0f:26:c3:3f:32:a6:48:
         e6:53:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:40 2025 by rpki-client on console-fra.rpki-client.org