Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File:                     mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier:          wGr4kIacZlGQAx6EpQpASmKvu2JbpIkX1hj7UDStTyk=
Subject key identifier:   19:D3:87:B5:9C:A9:F7:75:FA:96:BE:D3:76:D0:0C:AF:0C:69:BA:CC
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer:       /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial:       018F88240B15B226B9986F8E06E3D0F12194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number:          10A5
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: JBo2dJKaVgh9nWphGr2xvXpOftUAF3cNKD33jhCkn2c=)
                          2: wABM6IttrHJouZEg9lRlXIl9bDE.roa (hash: zxgOB3i4t8Me+izvy0ay4L2P3g0TfyPfC/JtK52i44w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0b:15:b2:26:b9:98:6f:8e:06:e3:d0:f1:21:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=19d387b59ca9f775fa96bed376d00caf0c69bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:eb:d6:c1:e8:ab:1d:c1:6b:30:57:1e:ea:
                    9b:5c:77:88:40:d5:f4:50:18:ca:b3:96:f7:07:89:
                    f8:ba:e1:22:7a:d9:d2:d6:83:37:57:b2:34:e4:24:
                    bc:ec:3c:09:d8:79:e6:1e:8c:a4:2b:72:ee:d9:52:
                    c8:b0:a4:1e:0b:24:14:e7:f3:81:62:21:2f:b7:15:
                    ed:30:be:bb:a4:f8:6b:7d:da:c7:23:02:3c:b3:bd:
                    bb:59:77:91:58:ca:e4:38:41:39:f8:cb:35:54:42:
                    95:20:bb:7d:9b:50:d7:2a:66:a8:e9:f1:f8:f5:90:
                    9f:b9:7f:58:04:70:f8:50:ff:9f:80:12:99:95:a7:
                    b5:80:0a:15:c8:e5:49:c3:d3:d8:66:7f:41:46:db:
                    fd:11:a0:ef:cb:c3:8d:65:7e:72:74:7c:2f:8f:ac:
                    a1:75:95:cf:cf:49:0d:05:d3:57:7d:99:2a:38:22:
                    ef:ad:51:40:b9:8a:3d:77:1e:ac:b3:46:77:74:42:
                    26:2c:08:b8:85:77:9f:19:73:6e:a9:30:f4:02:f2:
                    48:6b:43:90:c9:50:95:60:c2:f8:2a:71:59:ad:e0:
                    ee:da:49:05:a9:44:85:49:57:da:0f:3f:bf:51:67:
                    f5:34:b8:23:d4:2e:1b:3a:c3:49:78:78:f7:db:cc:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:87:B5:9C:A9:F7:75:FA:96:BE:D3:76:D0:0C:AF:0C:69:BA:CC
            X509v3 Authority Key Identifier:
                keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:67:d6:15:64:1c:ef:86:73:47:ca:2b:e9:97:5f:3b:4b:d5:
         36:ae:f4:10:93:9b:dd:3f:58:38:e7:e4:9b:c5:30:6a:8f:8b:
         4d:f6:33:4e:ea:f1:5a:20:04:f9:ca:36:63:c1:51:fc:2e:93:
         02:8f:33:9e:34:fd:b2:ca:41:76:c6:84:d8:21:26:21:aa:ae:
         d6:ad:0f:ab:a4:05:50:07:0f:55:8f:04:40:85:00:78:de:ac:
         68:63:2e:fc:dc:d3:a3:ad:f9:24:1b:7f:2e:dc:0a:91:d1:a9:
         74:50:f0:f8:a2:12:8a:04:42:1c:7f:a2:98:a6:5c:f5:59:04:
         9d:79:85:38:97:db:e2:1f:6a:16:ba:52:5d:d5:7b:db:2d:8c:
         0f:48:5a:55:e9:e2:bd:c4:04:6f:a3:b5:29:d1:e2:34:f6:06:
         67:70:26:53:41:f8:9b:cb:d3:c8:be:24:7f:ad:15:3e:c4:4d:
         2b:17:23:3a:40:af:52:c8:97:e1:1c:a6:90:a4:47:2a:95:e8:
         29:7b:bc:74:da:90:1f:54:4d:d3:82:aa:a6:5b:e7:3c:b3:d4:
         c8:bc:8c:39:e9:e2:2e:88:39:e3:3d:95:2e:66:dd:eb:bf:d2:
         71:33:6e:0e:0a:aa:2b:f6:6a:6f:d9:f0:b6:a7:ed:fc:d5:8c:
         8c:bc:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:15:32 2024 by rpki-client on console-fra.rpki-client.org