Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File:                     1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier:          FLEEqlbdMm6P7vMpFpNaHt9POmOsK4r4aEowE71phyo=
Subject key identifier:   7F:4E:B4:FF:9E:7A:2A:BA:9B:12:D5:E2:79:65:A6:2A:F4:38:97:4F
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer:       /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial:       01935989D83E804378E88A50368EDCE98D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number:          0AD4
Signing time:             Sat 23 Nov 2024 15:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:26 +0000
Files and hashes:         1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: mpVL44cQCKprLg33VmwwalgrUpvYLZE9YWRwj2xpC/E=)
                          2: NnfbtIuAQMuu1aQpsy7SHXU4Ngg.roa (hash: 353KXK6ggDIea2c11hjnt/d7khEuUI6GupVkQjHV0yw=)
                          3: xaBpymlkRYOAbp3xbuTjP-xBIkg.roa (hash: qWGguHRZEX3sBBtn8xmnopwe5cf6EFFbnLPZ2U51J4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:d8:3e:80:43:78:e8:8a:50:36:8e:dc:e9:8d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
        Validity
            Not Before: Nov 23 15:00:26 2024 GMT
            Not After : Nov 24 15:00:26 2024 GMT
        Subject: CN=7f4eb4ff9e7a2aba9b12d5e27965a62af438974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:cb:83:89:5b:13:56:65:b3:b0:c5:77:4e:
                    0c:52:91:76:d2:5f:f6:b9:b7:e5:4a:9f:3c:73:35:
                    a2:76:94:c8:d4:dd:b7:e5:06:1c:9c:d9:1d:00:cc:
                    68:03:55:f9:5e:1b:e2:e6:e5:ab:2e:2b:48:f2:41:
                    2b:40:5e:34:b4:00:5c:d0:a1:79:45:eb:c3:28:2d:
                    24:27:2e:c6:70:38:2f:a8:d7:23:6d:6d:85:80:66:
                    b3:d7:92:46:d7:a9:e6:55:76:ef:14:48:00:4e:ec:
                    b3:a0:c7:12:f2:38:4f:a4:98:88:30:cb:2f:cc:18:
                    f6:9a:19:44:f1:6f:45:21:31:d3:68:52:da:08:35:
                    bb:72:c8:19:36:46:4b:67:4d:30:d0:d8:3a:7b:ae:
                    f5:e0:6d:9f:df:c0:de:5d:0a:60:a5:1b:99:3d:98:
                    87:cf:43:ba:b7:c2:78:ff:5e:1d:ff:02:c8:7a:fb:
                    b9:90:4e:82:4e:f2:b4:4a:ba:45:5d:66:3c:8f:8b:
                    64:20:65:c8:20:4d:8b:67:20:38:54:51:3a:01:35:
                    16:94:fc:7f:df:07:e6:eb:c6:8f:85:da:e9:58:7d:
                    08:de:1e:c2:0d:c7:e3:2b:94:a1:54:03:b0:b7:71:
                    b3:64:b3:34:64:83:ec:16:f4:25:9a:dd:e3:86:0a:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:B4:FF:9E:7A:2A:BA:9B:12:D5:E2:79:65:A6:2A:F4:38:97:4F
            X509v3 Authority Key Identifier:
                keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:ad:e1:e5:a3:de:a6:de:9b:ff:68:88:48:1d:04:d7:23:
         fa:c0:d7:cb:fc:5e:b9:b7:80:c0:b2:51:d8:16:08:7a:44:dc:
         80:d1:25:c0:b0:72:71:21:2e:5b:5d:1d:9a:82:61:7a:72:ca:
         3a:d6:cd:48:3a:59:fe:67:93:ba:32:6f:13:7b:3f:b2:fe:a5:
         b2:86:0f:33:c7:d4:61:03:f4:93:91:5d:fc:e4:ff:68:e2:f9:
         03:04:fc:9c:1d:0b:77:c1:1d:b1:55:ef:83:cb:57:01:8e:c0:
         14:ea:27:c5:55:41:01:47:52:8d:b0:92:8e:5d:ad:7d:a5:00:
         cf:0b:7e:1c:ed:3f:46:cf:a8:f9:a5:b2:a7:bf:61:bf:28:f6:
         0e:7e:6a:81:a7:67:a0:cd:f8:f2:2b:7d:f9:ec:e3:43:a8:25:
         48:13:0d:7a:ff:c0:87:4f:19:b8:f3:80:f2:d2:f0:77:b5:9c:
         f0:81:9a:5a:fa:87:b0:2a:4c:7d:a0:8b:9c:93:d8:fc:95:e4:
         8a:83:41:c3:e4:53:ff:96:ac:74:6d:06:41:ed:f1:86:0b:95:
         6f:38:71:88:59:90:4f:4b:2e:9e:15:3d:f5:72:ee:ff:71:29:
         00:34:4e:6f:f2:3d:2c:75:e4:7a:2f:ca:8b:47:b0:3e:26:77:
         ba:65:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:35 2024 by rpki-client on console-ams.rpki-client.org