Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File:                     WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier:          BPvT5Bn4LaM/B/HXH7He4kaCBCB6/jCrJc5PfF8J7aU=
Subject key identifier:   C2:98:5F:42:EA:5E:BE:99:2B:22:D5:15:C0:22:39:64:F6:A5:5A:93
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer:       /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial:       019234DBD099C36C412C80C6B94713B1EA45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number:          059E
Signing time:             Fri 27 Sep 2024 19:01:13 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:13 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:13 +0000
Files and hashes:         1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: cg69kObsnB+9wjwpSjTcFmOup75Nwfp7xLsoER6XnhM=)
                          2: ys87lPqba3e30LkRL5EL8XTzaEI.roa (hash: 1o6OzNR1lgcKCBRizIWfdd4kPZXG+MF/RNtjcGBO9TA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:d0:99:c3:6c:41:2c:80:c6:b9:47:13:b1:ea:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
        Validity
            Not Before: Sep 27 19:01:13 2024 GMT
            Not After : Sep 28 19:01:13 2024 GMT
        Subject: CN=c2985f42ea5ebe992b22d515c0223964f6a55a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:0e:e8:97:7f:92:ea:4b:0e:c0:42:c9:52:
                    78:0d:e5:b0:98:fa:20:2f:f3:b6:86:11:1e:29:20:
                    16:95:37:85:60:71:9d:61:a2:d7:41:34:6b:3c:6d:
                    c2:9a:ca:19:25:46:7a:79:0a:3c:eb:76:99:1d:22:
                    e6:c7:28:7e:ec:a2:67:42:83:47:48:fc:cf:48:e8:
                    62:b8:5d:c0:36:cf:8c:e6:17:98:26:2f:56:83:94:
                    76:64:dc:6f:40:42:ca:09:b6:ad:18:22:df:0b:23:
                    25:33:9e:64:8a:28:e9:46:e6:7a:f8:a4:5c:10:7b:
                    08:2e:20:93:3d:1e:e9:b7:58:03:53:4e:90:3f:79:
                    48:eb:8d:e2:85:15:a9:41:60:ef:06:9e:c2:78:e4:
                    25:e2:6f:8d:dc:92:8c:74:9c:60:23:f9:8f:24:07:
                    5b:5d:61:d5:95:b0:f7:94:f2:62:86:e1:01:3f:09:
                    e4:11:1c:b6:d7:ff:24:7b:ec:7b:3b:ea:89:df:20:
                    1e:1c:6d:8f:34:46:98:bf:f4:85:c7:6f:14:b8:ef:
                    3a:68:df:44:99:f5:bb:e5:b2:93:d9:73:db:af:d1:
                    9c:ce:56:54:18:00:49:72:1d:f9:62:bd:0d:09:5b:
                    03:08:dd:91:b2:de:e1:90:7f:10:4c:91:85:04:90:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:5F:42:EA:5E:BE:99:2B:22:D5:15:C0:22:39:64:F6:A5:5A:93
            X509v3 Authority Key Identifier:
                keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:60:e4:c8:13:bc:78:58:a5:47:cc:77:be:cc:19:85:c5:
         f7:54:38:ef:13:0e:8f:1b:fe:6a:97:15:83:4e:48:78:4a:fd:
         c4:6c:81:c1:bb:ea:52:24:c1:bc:ea:16:94:a6:0a:a2:a9:81:
         dd:83:37:b4:ac:13:b8:52:1c:33:0e:c5:0a:94:6d:43:46:b7:
         1e:ce:ba:77:51:ab:29:e6:ce:62:91:8a:1b:dc:d7:f7:8b:0c:
         ca:08:3b:4f:52:d1:b0:07:78:17:3f:80:db:e5:89:6a:e3:aa:
         99:a9:36:e4:7f:00:9d:5e:a2:b0:1b:dd:14:bb:73:12:81:cc:
         eb:d4:94:22:37:ec:c6:3c:9d:98:4d:27:1a:38:df:20:a6:b6:
         9a:ec:03:f6:9f:b1:4e:77:4d:ba:a2:3e:9d:a1:63:e2:74:86:
         f8:42:b3:bc:58:5f:f5:c9:a7:4f:96:28:5b:af:3b:31:f4:00:
         11:5d:9b:10:f6:1e:cf:b1:58:17:a0:d6:7d:7a:9c:7b:2c:0b:
         47:b9:9e:8e:58:93:84:ca:a9:f5:69:c3:29:62:b0:86:b1:14:
         63:0f:04:af:df:00:f7:c4:f8:1b:43:22:78:cd:1d:be:cf:57:
         28:c4:0c:48:d8:6b:a2:d9:e5:3c:e1:99:6e:a3:ed:65:28:dd:
         a0:0d:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:03:47 2024 by rpki-client on console-ams.rpki-client.org