Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          xP7+3bd8ahslSSJkXJ1vMjoreihJHLm/jYQmT59DF6M=
Subject key identifier:   4C:E2:8C:DB:A4:17:4F:A2:AD:7D:E0:BE:DC:1D:D2:7E:19:F6:07:99
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       019356892197B5586DE66BABF52B7F8A2A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1159
Signing time:             Sat 23 Nov 2024 01:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:47 +0000
Files and hashes:         1: 4j5U8yNb3ZLFpnChkIO5BL-yKBA.roa (hash: NNA/b+u3iY9iJfaEG1OVzKY1EGm871k0dA2EF0wbojs=)
                          2: 9qvAwNn06l_NztfBJpgWi0VTcd4.roa (hash: PfoSWsNjkEG1dwrdNoB7DktwNUdMKJ+8L/jewl1VXqs=)
                          3: CCEwzOWT626i1iIrQD6Ph3Lc1eo.roa (hash: W2MPNjFVr9DOnNGUjWa8qxP/CVjPybR3HZ3I7oMKZrc=)
                          4: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: ScxJZRCdeQXgF194HEgmx/v55TF6yzsSMofkwe4qT9k=)
                          5: _OCvBw599eB-_lAVwCzr9bidtEk.roa (hash: 6riUC/Yk3CBl6OJ1l/i0OXklv+sRTlhlQAKjWi8oxKw=)
                          6: ls4zurHmyZnA_OtDvzbFBm5SII0.roa (hash: jnUv+XSzOIGewtqpfLkwh3uIRdz3GYsN+l0kn7+th+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:21:97:b5:58:6d:e6:6b:ab:f5:2b:7f:8a:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Nov 23 01:00:47 2024 GMT
            Not After : Nov 24 01:00:47 2024 GMT
        Subject: CN=4ce28cdba4174fa2ad7de0bedc1dd27e19f60799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:af:a2:78:a2:bb:8e:30:cd:75:be:4e:46:
                    8a:6d:98:3c:87:9b:37:c3:16:d3:12:7a:0d:ca:3a:
                    47:83:73:c1:c5:f1:f3:f0:82:7f:5c:44:f8:e5:1a:
                    bb:fa:cc:ee:41:72:2e:b3:17:90:57:1e:dc:2f:1a:
                    17:39:a6:dd:78:15:85:74:1a:8f:21:59:a8:a1:28:
                    b4:a2:f3:c6:fe:9f:6f:1d:3d:01:f5:06:0a:b9:8a:
                    7d:c2:5c:e1:a0:59:de:9d:fd:31:5a:6c:88:cd:83:
                    c8:31:fe:ba:5c:e0:a1:d0:dd:2f:3c:4c:94:90:62:
                    95:d8:99:35:e5:21:76:3c:42:47:17:10:6b:59:d9:
                    61:cc:40:1e:dd:67:7a:b1:db:9e:f0:56:7a:f8:58:
                    69:0f:0d:76:06:f1:1a:e4:cd:1d:3b:03:39:ea:d9:
                    c2:57:a0:3c:cd:50:70:c6:89:11:5b:a9:11:14:72:
                    d6:e8:54:f6:07:52:1b:bd:0d:e9:61:ca:98:ef:10:
                    7d:9e:1b:86:fb:5b:d1:ef:97:85:c0:38:a1:93:2b:
                    af:c9:f3:33:d8:dc:b3:de:93:61:97:39:91:e1:cf:
                    de:52:39:81:73:53:3a:e3:6a:2a:7e:d8:8c:5d:5b:
                    93:a9:fe:67:4a:99:45:2d:e0:b4:75:da:9b:87:d5:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E2:8C:DB:A4:17:4F:A2:AD:7D:E0:BE:DC:1D:D2:7E:19:F6:07:99
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:4d:2a:4a:ce:5e:b4:a7:8e:a2:13:4b:85:b7:1f:31:9a:
         6f:6a:b8:09:e6:1a:c3:38:be:c5:4f:8e:19:49:ee:c4:f9:fc:
         45:fa:ab:a4:ff:9d:9a:da:d6:d8:70:b5:b1:e7:52:3a:a6:d9:
         9e:6f:f4:b0:56:e3:16:f8:ba:f8:23:d1:7a:ef:2c:a8:26:97:
         99:7a:e3:0f:16:df:f7:c3:20:27:8d:18:dc:93:06:45:ac:3f:
         77:ee:a7:11:b6:ce:81:9e:6b:5d:8f:f1:05:25:5d:03:10:b1:
         1f:6b:9b:59:2d:ec:df:3f:a0:83:12:05:cd:03:39:a6:99:08:
         78:8e:7b:c9:46:b4:a3:2e:f9:4e:00:f2:90:58:04:4b:92:37:
         2e:cc:5c:ea:9f:bf:84:f3:49:19:78:ed:3e:c4:87:ef:c1:ae:
         2f:a7:3c:5b:17:4a:e1:83:82:06:ca:93:4d:b4:6d:36:57:ed:
         11:d4:87:e5:0e:b5:28:0f:0e:36:9c:25:7b:f0:fe:81:53:6c:
         85:88:e8:01:7b:17:4e:a0:5c:51:21:79:13:9e:48:8d:34:ae:
         25:34:0f:28:06:d6:54:4a:c0:76:d7:18:72:b2:58:d4:42:49:
         4c:87:6a:9a:e2:6d:5b:74:35:4b:34:13:ba:f3:54:64:26:dc:
         71:42:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:20 2024 by rpki-client on console-fra.rpki-client.org