Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          YFg7h9gkAju8THtPgxnFFFg8FzrMorGlt4Xo0TpHI8g=
Subject key identifier:   51:F1:F4:CC:59:9B:73:A1:68:CB:6E:16:09:D5:63:7F:DE:43:DA:CE
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       018EF4BA3DCF9EBD735BB70EF46E6DBFF2CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0A99
Signing time:             Fri 19 Apr 2024 05:00:29 +0000
Manifest this update:     Fri 19 Apr 2024 05:00:29 +0000
Manifest next update:     Sat 20 Apr 2024 05:00:29 +0000
Files and hashes:         1: 0FdlcGaUuRcf2thRcezoBxnSRd0.roa (hash: VKuLct5pGWdsop70amtrbvmvPJUQ8yIua68ahie6XrQ=)
                          2: 44YSwqdsyKtc7GGvYcJFjcCvPpc.roa (hash: g3g30tilO4oE3hC+X7dWr6L8Ary9Ap2/UojHBsxaPKE=)
                          3: Ck-gRdeqQg_mD5akQhcNSUGePI8.roa (hash: KSvIuGzpLJAivBUb4Q2CMIshLo9k5XslKK6KYYpLr3E=)
                          4: G1KtCem18xNVnjqg_i4gYFFnH08.roa (hash: or489x/aFiy9otvfjwnsIAdgsCfe9WYAKyIX4ntgn0o=)
                          5: IFEpMz2wo8FeMCVoBBODfosRFi4.roa (hash: p4vH79l/bBNU46l20JOOwJp8TbJhzDYQOfY0mfmiXgQ=)
                          6: JeN89iha8HnUuEoh21VtDyxOxhI.roa (hash: VKvJdXLNYbUTU4g8yZpcGLOmJ68OgB3qtjRlrikTFW0=)
                          7: NuGhRYAi8rDkFPRRxAFFor1Dxsk.roa (hash: smpepN8sAdz0WvaBQGqb/sfPxCOqcAlIAmm8DVkgz5A=)
                          8: VCmlh7pajkVWkmG_KKbb4mthI5o.roa (hash: 2tp565Iy5ZrHFLLImMFYFu/4A+RetFW6JZJqU4czAhE=)
                          9: XhJnyUwt5f1WjNJBWSLofkpq5J8.roa (hash: o25KFU+oM+St2fQ6mrAGhl/aPRRikrCrzPE9WUJSwrI=)
                          10: XwB_Ca9nI1saYwg65fPD69WCzno.roa (hash: ymp8JzYgoyrmrFp+3lX4SuhWOApOPWhMtBuvq8EoHgc=)
                          11: Zqp5x2-_Sqz4GRqykaz5aiXpkaM.roa (hash: BmUZsVo6sVMqmntpxTmAVMPHIatz2tK57/mG2Oxn5uE=)
                          12: _z1NWtZIMCVFeHm4Mw9QXo0MDuM.roa (hash: m7ypxbyhmwDoexCQsfdbi9jobo86WItA2+Dwhf9R68s=)
                          13: aryV4T6Jo-ABn3ueXOoki0uxGsk.roa (hash: oqXmcAqy7nfbn66n3AnIwIzEyKolV9tHJHBeEo99pRE=)
                          14: dIb4UKpTWpto9-sXYDN-JTVQRXg.roa (hash: +FL+EGgrDGrTQHmwYOlNU7oD8GKfHqxw1UYkYVHXefE=)
                          15: kj__tH8eLjBOJ2qcKU-dZUe5BNA.roa (hash: gr8cFL69H2a8kMsZ7EFk5o/kAp0rurfZKuszej+VSrM=)
                          16: lGTKpj7YoUCGXF2Us2GxX8Ayr1s.roa (hash: XBukNQ76wTgpdaPf5u9zq34gNnhL9GKOolHXf5GIv0w=)
                          17: m6twPfVwWlVTaKMoyvsJk7Mi2t0.roa (hash: lmaStjkS7uKC8MGMePSNXbNGumjkrJOQvos9wHQk1GI=)
                          18: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: rQHuyWat6sZWsH82u9qWaCqFbE6nkk/BdE9xp5hiU8M=)
                          19: ynWzSQjCcrHJR086z85tz57VMtc.roa (hash: bFiiVvqCpVrTVNAZJuV4x217m7y0NqVdcP5LenUwvrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f4:ba:3d:cf:9e:bd:73:5b:b7:0e:f4:6e:6d:bf:f2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Apr 19 05:00:29 2024 GMT
            Not After : Apr 20 05:00:29 2024 GMT
        Subject: CN=51f1f4cc599b73a168cb6e1609d5637fde43dace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:3f:b4:68:3f:f4:45:78:ca:dc:84:61:26:
                    2b:b0:f0:b8:f9:78:48:3b:90:c8:77:52:7e:f9:fb:
                    cd:ec:60:d3:0a:a9:43:0e:3f:0a:88:a4:94:fa:8e:
                    da:73:a0:fb:62:5d:ea:4d:52:f9:43:ff:84:a5:9d:
                    13:d2:86:68:11:29:cd:18:3f:f3:43:f7:50:97:d7:
                    2b:c0:ab:15:7e:4a:b9:54:af:1b:bb:c7:c6:6d:86:
                    8a:96:2a:9e:ea:26:14:12:df:07:90:9d:1c:67:42:
                    dd:b3:15:d5:d5:fe:54:3f:42:5b:e4:97:21:df:cb:
                    a8:ae:7b:1b:c4:98:db:a5:cc:4c:c8:77:af:9f:c7:
                    5d:c2:0a:6e:b2:5a:19:a0:7d:ab:12:de:0b:7b:39:
                    22:cd:e9:5f:c5:d4:8d:66:c0:f1:ef:8f:a8:23:a6:
                    82:ec:c4:a9:d6:66:a0:17:cb:e9:3e:67:6e:bc:80:
                    2e:67:5d:ad:c7:de:df:3b:81:d7:4f:a8:ff:b1:13:
                    0f:cc:69:08:a9:ae:49:19:b8:04:12:57:57:96:ab:
                    a6:b0:e5:c1:c7:a7:d9:23:9b:ab:cd:21:f2:d2:dd:
                    a8:64:c4:c0:98:bc:75:74:9a:97:4c:f0:89:a3:ad:
                    eb:7b:1d:a9:1c:8b:37:b6:5a:06:68:fa:81:f0:53:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:F4:CC:59:9B:73:A1:68:CB:6E:16:09:D5:63:7F:DE:43:DA:CE
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ca:9d:1d:6c:fc:3f:d5:28:cc:2f:fe:e8:7d:ec:5c:6b:32:
         58:1f:78:b4:b2:af:96:f2:b3:d3:a5:ac:d2:a3:10:4b:2a:be:
         bf:21:e3:ed:d1:8e:c2:31:5a:0d:03:8c:e7:30:88:ac:e2:4c:
         39:5c:8e:5b:85:8e:d1:e4:7d:93:0c:06:de:96:f2:f0:f8:26:
         2d:3f:67:f7:dc:fb:bd:8f:3e:da:02:71:52:ee:f5:b2:97:f8:
         d7:56:50:97:23:81:dd:fb:6e:10:fd:a3:89:5a:48:36:2c:56:
         f6:cd:4e:f4:e8:c0:f6:f0:7d:60:5a:c0:b2:0d:66:08:03:b6:
         38:03:2f:15:33:d8:c8:fc:bf:0f:19:1a:09:b0:4f:8b:94:39:
         7f:0c:43:28:e7:75:c3:06:b9:c7:84:2d:95:a7:45:e8:2a:e6:
         c8:cd:80:ca:72:9b:b2:ee:27:d8:7f:12:9d:05:f2:94:8c:ed:
         c4:d8:f8:f2:fe:ff:42:67:f5:36:68:b7:3e:b5:8e:53:0d:60:
         be:c2:56:39:d1:e2:c7:a2:f8:ea:6e:92:ad:d3:0c:99:84:05:
         3d:35:4b:85:1f:b7:8f:11:98:38:b1:ee:dc:7a:cb:7b:02:25:
         f1:84:5b:78:a6:21:77:97:b4:03:de:50:8c:42:1c:01:f1:71:
         0e:4f:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:12:57 2024 by rpki-client on console-ams.rpki-client.org