Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File:                     PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier:          5t6flVJtFN8VYX5sHF1V8cYbwoOZd/uAy++k+ZCgW/E=
Subject key identifier:   F1:0E:76:78:0C:B0:92:F2:1F:FB:5A:63:C0:51:04:F2:9A:D1:90:8C
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer:       /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial:       019369DA2042EB68E03830CA5B304A104120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number:          0ECC
Signing time:             Tue 26 Nov 2024 19:02:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:02 +0000
Files and hashes:         1: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: dRrtqh8qZ7UP0SA6EIK98hyfJPE8UVJgAKYHrq5nnGg=)
                          2: tDZsyW3iTPAuDOXO7VMGk6VLL14.roa (hash: 3h+ZJt5W4MNfkrd5M4UIhgyRDobWLwbNau5FNRwwp7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:20:42:eb:68:e0:38:30:ca:5b:30:4a:10:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
        Validity
            Not Before: Nov 26 19:02:02 2024 GMT
            Not After : Nov 27 19:02:02 2024 GMT
        Subject: CN=f10e76780cb092f21ffb5a63c05104f29ad1908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:08:ad:f3:72:02:94:b8:57:07:b3:95:e8:
                    1b:53:eb:94:f9:26:46:50:ba:2c:02:aa:8f:6f:ce:
                    17:b6:e2:97:79:52:e9:64:47:20:c9:02:54:b6:f1:
                    99:c0:82:71:47:7a:66:d3:ed:0d:29:b8:ea:28:f0:
                    4d:32:e3:20:9e:fe:84:0b:9d:ce:a9:08:13:2c:35:
                    14:94:80:d9:a7:03:63:bd:64:78:77:95:13:51:97:
                    7d:de:c1:20:25:eb:e9:5f:40:f5:1a:a2:a7:4f:cf:
                    96:d9:27:52:61:48:39:4f:1a:bd:73:22:bc:cf:ae:
                    c0:e8:0a:99:ee:f1:da:34:15:86:3b:d7:17:a9:b2:
                    08:be:83:6c:88:7f:4b:04:c5:0e:d8:f3:7c:3b:40:
                    45:28:57:c2:a6:09:ab:2f:d5:2b:b6:6e:3d:47:56:
                    2d:b6:a3:cb:4d:42:d0:a3:dd:94:c4:9a:98:5a:26:
                    4a:d5:a2:75:83:03:88:9e:7e:4b:6e:bb:a1:97:0b:
                    97:cd:94:9a:f0:1d:fb:f7:2e:91:3b:9b:d9:b6:4a:
                    27:23:85:6d:cd:db:4d:ef:b1:73:95:06:ba:0d:90:
                    f3:15:c4:3c:fe:8f:cd:a0:bb:21:fc:c3:70:25:44:
                    ef:96:20:72:17:3d:e3:79:96:36:cb:cc:1b:d4:cf:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0E:76:78:0C:B0:92:F2:1F:FB:5A:63:C0:51:04:F2:9A:D1:90:8C
            X509v3 Authority Key Identifier:
                keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:17:3c:15:f4:0a:1e:dc:a7:4b:17:7f:30:e8:8d:f6:30:a8:
         0e:02:2f:7c:79:c0:43:66:de:f2:45:d0:d8:83:8c:26:f4:c1:
         44:de:b1:61:c4:bd:1f:86:87:b2:78:8b:53:12:9c:7d:cb:5c:
         71:77:96:9f:61:9e:88:39:b0:a9:f9:a9:fc:d8:fa:96:ca:03:
         cc:2e:2d:87:a3:07:ca:8c:f4:12:c8:14:12:9e:86:b4:e4:6d:
         6d:f9:02:36:0f:78:b6:58:73:fc:f2:47:e6:ea:17:63:9b:ec:
         82:97:bd:5b:35:c5:98:84:88:fb:fc:a8:53:00:ec:35:88:95:
         b9:8d:a4:bf:3d:ac:fd:d9:4b:a0:89:77:2a:bc:2b:42:a3:ef:
         13:04:8a:0f:ce:de:e4:5e:0d:45:0a:2e:0d:de:9f:e4:47:0f:
         09:1f:1c:5c:f3:6e:08:38:71:f5:3e:18:bc:ef:ec:48:82:28:
         42:b1:83:31:22:c9:bb:3b:ac:96:1b:f1:5b:de:bc:02:db:c2:
         01:e7:21:b5:3e:8e:ff:13:de:cc:28:87:56:ca:1e:42:09:7c:
         de:e6:fa:5f:8c:65:94:d8:bc:e9:00:5f:d0:db:2f:bf:0c:ad:
         ed:ae:a4:79:7d:b8:e6:eb:5d:26:ea:9c:77:01:96:5e:b7:54:
         70:26:f9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2iBC62jgODDKWzBKEEEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNGM3ODcwMTkzZGRmY2RiODkwYjY2NDdjYzhiNTZjMTE5
NmZmMDgwHhcNMjQxMTI2MTkwMjAyWhcNMjQxMTI3MTkwMjAyWjAzMTEwLwYDVQQD
EyhmMTBlNzY3ODBjYjA5MmYyMWZmYjVhNjNjMDUxMDRmMjlhZDE5MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkIrfNyApS4VwezlegbU+uU+SZG
ULosAqqPb84XtuKXeVLpZEcgyQJUtvGZwIJxR3pm0+0NKbjqKPBNMuMgnv6EC53O
qQgTLDUUlIDZpwNjvWR4d5UTUZd93sEgJevpX0D1GqKnT8+W2SdSYUg5Txq9cyK8
z67A6AqZ7vHaNBWGO9cXqbIIvoNsiH9LBMUO2PN8O0BFKFfCpgmrL9Urtm49R1Yt
tqPLTULQo92UxJqYWiZK1aJ1gwOInn5LbruhlwuXzZSa8B379y6RO5vZtkonI4Vt
zdtN77FzlQa6DZDzFcQ8/o/NoLsh/MNwJUTvliByFz3jeZY2y8wb1M/q4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEOdngMsJLyH/taY8BRBPKa0ZCMMB8GA1UdIwQY
MBaAFD1MeHAZPd/NuJC2ZHzItWwRlv8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEt
MWViYTZmZjc3ZWFjLzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEtMWViYTZmZjc3ZWFj
LzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxc8FfQK
HtynSxd/MOiN9jCoDgIvfHnAQ2be8kXQ2IOMJvTBRN6xYcS9H4aHsniLUxKcfctc
cXeWn2GeiDmwqfmp/Nj6lsoDzC4th6MHyoz0EsgUEp6GtORtbfkCNg94tlhz/PJH
5uoXY5vsgpe9WzXFmISI+/yoUwDsNYiVuY2kvz2s/dlLoIl3KrwrQqPvEwSKD87e
5F4NRQouDd6f5EcPCR8cXPNuCDhx9T4YvO/sSIIoQrGDMSLJuzuslhvxW968AtvC
AechtT6O/xPezCiHVsoeQgl83ub6X4xllNi86QBf0Nsvvwyt7a6keX245utdJuqc
dwGWXrdUcCb5Ng==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:10 2024 by rpki-client on console-fra.rpki-client.org