Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          NeT2yIPnIbx3SVok6z0JpoLHkXJSzVL7VC2/o7bsmo8=
Subject key identifier:   32:8D:67:78:91:2D:30:41:7C:02:13:08:93:68:5B:40:C1:A6:C7:C4
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       0194BABB14F36056A6B24E63280391D816CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          040A
Signing time:             Fri 31 Jan 2025 05:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:10 +0000
Files and hashes:         1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: 4TR3ss9P4UERVYfqjgToWnzUfWnlJEy65WrVsDyyrgo=)
                          3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
                          4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:14:f3:60:56:a6:b2:4e:63:28:03:91:d8:16:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Jan 31 05:00:10 2025 GMT
            Not After : Feb  1 05:00:10 2025 GMT
        Subject: CN=328d6778912d30417c02130893685b40c1a6c7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:b0:26:68:b3:63:64:8c:c4:de:1f:a8:79:
                    fc:1a:9b:76:b4:94:54:f8:3e:ac:49:d3:b3:de:a9:
                    04:c8:80:cc:e4:e1:d1:cf:f9:a2:53:ba:a9:ec:a6:
                    1a:f3:c6:fb:bb:fc:31:1a:90:49:81:b3:86:d0:77:
                    07:fe:c5:90:42:43:a1:4d:b1:80:23:f7:01:df:4e:
                    8a:fb:47:58:44:4d:8e:60:b2:41:db:da:44:c7:74:
                    66:86:c0:7e:bb:e9:f4:dc:87:f4:d7:46:88:1b:ba:
                    93:38:24:34:8f:60:31:87:44:80:1d:40:e0:62:13:
                    c2:99:1a:fb:9f:01:32:fe:93:af:22:55:d8:45:fd:
                    b1:a9:df:12:66:96:f5:42:f5:ee:98:0b:70:99:a1:
                    33:67:f9:e2:db:a0:9c:7a:b0:40:f5:fe:ed:d5:e9:
                    e3:45:db:60:2d:01:09:1a:f1:86:83:0f:af:62:a3:
                    29:c5:e7:06:70:ad:b0:c7:37:be:88:72:77:b5:b0:
                    8c:2b:9a:f0:a6:cc:a4:2a:df:8f:d3:82:20:79:20:
                    27:06:65:37:32:1c:3b:12:62:9c:1d:3b:e5:46:ac:
                    42:e9:44:4e:f0:e1:ad:d2:65:57:39:96:36:c4:78:
                    45:50:4e:00:09:cc:6c:00:e2:be:f7:45:43:a6:4c:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:67:78:91:2D:30:41:7C:02:13:08:93:68:5B:40:C1:A6:C7:C4
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:d0:7f:1d:08:c5:3d:b3:86:65:ff:a3:f3:69:e2:81:52:
         24:55:2e:ad:11:8d:ad:c4:7b:84:e9:23:4a:80:df:38:62:85:
         c2:4e:bb:68:63:20:98:17:bd:48:fa:2d:89:5d:09:7f:06:9a:
         53:fb:85:d2:b5:26:3e:80:05:db:59:5c:32:d4:b7:b7:be:38:
         d8:ff:7e:91:41:3d:0b:8a:48:63:28:bc:08:4a:9d:04:88:75:
         29:c1:9f:68:1c:e5:7f:ad:46:c9:69:31:dc:fa:97:6a:60:a4:
         bf:e9:47:95:cf:2c:c5:45:c2:ad:00:27:c9:85:a5:2c:42:d8:
         e8:3b:5a:c9:c9:98:6a:bd:2e:96:be:3a:37:44:3e:b5:c0:b6:
         37:d8:19:16:8c:e7:fa:ce:a8:3f:e9:2d:b5:31:d1:c8:e2:31:
         dc:9b:ce:51:2d:b7:10:43:35:9f:06:d2:a5:fd:3f:be:ff:e6:
         60:4d:86:3c:62:71:0b:bf:b4:28:79:07:d9:04:c8:0c:79:7c:
         b2:b9:d6:81:de:aa:3b:3a:01:5a:e5:a3:c3:6b:aa:fc:e1:bf:
         56:dc:df:fd:2e:a4:28:5b:da:06:56:07:79:b3:dd:9a:21:02:
         2f:10:e2:7c:6e:d1:a3:e2:66:b0:4b:5d:91:5c:6f:c9:6d:f7:
         25:03:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:43 2025 by rpki-client on console-fra.rpki-client.org