Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
File:                     WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft (raw, json)
Hash identifier:          gYogCSM3XjFA2qPcQftatj0X41AkQPdHDOv3VbiTjhE=
Subject key identifier:   2B:13:30:21:04:50:20:36:12:F4:34:B9:E0:73:21:51:10:B5:2F:08
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Certificate issuer:       /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial:       019352751F0C249435D5E5C56973C72183E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
Manifest number:          0F57
Signing time:             Fri 22 Nov 2024 06:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:27 +0000
Files and hashes:         1: DGQcrIg35PaIbm7Ps9DzZpUgm8M.roa (hash: wwTVAqqBL7qMt5stXSaGu73sTYLbKBYtgMBn7g2/VEA=)
                          2: WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl (hash: 0N/R1Lkca1MdoWLv4OEHW0Y2rOzzreBcBHpd9zVK5YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:1f:0c:24:94:35:d5:e5:c5:69:73:c7:21:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
        Validity
            Not Before: Nov 22 06:00:27 2024 GMT
            Not After : Nov 23 06:00:27 2024 GMT
        Subject: CN=2b1330210450203612f434b9e073215110b52f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:a7:28:2e:d0:1e:59:8e:73:15:b4:e2:23:
                    c9:1a:8e:f3:cc:4a:93:c4:2b:f1:9b:83:70:d4:78:
                    3c:b5:33:e9:e1:c6:14:ef:4c:dd:7d:f4:fb:94:e5:
                    d6:19:90:3e:61:08:b3:e7:dd:cd:98:89:86:78:f2:
                    d7:3b:0f:ba:8d:41:38:74:c1:10:c3:3d:36:8f:d5:
                    a0:c4:ce:3b:9a:b3:4d:4a:44:fe:7e:d2:65:63:12:
                    23:a3:87:c2:c5:0b:3d:e9:8f:5c:e7:9d:89:c3:01:
                    d4:82:e6:f5:81:71:f8:b1:06:36:2a:82:ff:16:5a:
                    2d:95:9f:c9:d6:a1:5d:31:3a:11:26:77:31:72:20:
                    d3:bf:f4:ba:cc:d6:b6:76:7e:4d:79:bb:f3:b6:c9:
                    56:4a:91:a3:d9:56:91:a0:41:d3:d7:9e:40:41:cc:
                    67:40:dc:e5:90:c9:b5:18:73:c5:ea:29:dd:94:36:
                    7c:0b:bd:9a:62:a8:19:95:c2:d1:0d:d0:64:a6:2e:
                    12:b0:38:d1:3b:5f:5c:02:6f:ec:26:c8:c0:89:7e:
                    2e:a4:56:69:51:fa:2b:4a:6a:b7:3e:86:98:cd:3d:
                    20:9b:f2:1f:29:d2:e4:19:df:88:00:31:ad:63:41:
                    44:fd:9d:e4:33:24:7a:77:b5:0a:07:0a:44:a6:aa:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:13:30:21:04:50:20:36:12:F4:34:B9:E0:73:21:51:10:B5:2F:08
            X509v3 Authority Key Identifier:
                keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:be:46:6b:2f:d5:40:c7:15:de:55:c1:4f:df:46:bb:90:27:
         57:e8:ab:1c:8e:c5:4b:a5:4b:c3:ac:e7:56:98:d7:fa:36:f6:
         7e:0c:18:3c:63:8e:e0:f3:e9:c8:e3:48:70:7b:06:14:28:16:
         3e:84:97:b8:a9:87:f9:e7:ec:b0:bf:12:8a:99:a0:04:ad:e8:
         f2:18:18:b2:49:b7:e5:0b:b2:07:f7:62:07:51:c9:32:fc:7f:
         ee:0e:87:aa:b5:89:f7:aa:9e:23:1d:ae:b6:73:2e:f7:a7:4d:
         65:09:c9:7b:8e:d3:37:66:16:fa:f4:2a:dc:87:29:49:0e:5c:
         4a:c6:fb:4c:25:84:b7:c5:60:bf:35:35:f0:c5:ff:62:b8:47:
         bb:ac:f5:51:a5:51:bb:41:05:05:f9:cf:d1:53:46:a7:2e:6d:
         b0:39:f0:05:63:45:d0:8b:17:82:7e:c2:6f:5b:d4:7e:60:7e:
         84:7d:4a:e9:0e:e4:33:08:46:04:a2:ae:a5:37:24:6d:c6:0e:
         92:04:2b:4d:72:94:e0:5c:99:17:4f:fd:3e:96:4a:3f:37:e0:
         4c:c9:2a:11:22:2f:7f:0c:27:f8:df:dd:31:f2:ff:11:cd:12:
         7a:88:29:44:58:72:6e:ab:bd:15:2f:fb:c1:6a:3d:30:c4:b4:
         b7:55:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:02 2024 by rpki-client on console-ams.rpki-client.org