Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          7k/vAfCbeHcYqcP4pLD+LswKDqv/51P3nCfdKsRim7w=
Subject key identifier:   95:F4:CA:A5:73:45:BB:28:9D:FA:DE:3B:13:E2:FA:5A:F3:54:9F:08
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       019352ADBC78C26B3EED27E89D2335DD7949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          09B4
Signing time:             Fri 22 Nov 2024 07:02:17 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:17 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:17 +0000
Files and hashes:         1: M0Ca0E9YV2tG55MiPml9k2nYMHM.roa (hash: A3S2hZ1lc0rxaolddu+lgtFXMqx15HkWrXClbANq0Fw=)
                          2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: zrWRudrYGGPZdNNn8L2eVbIR3VNq0tU3T5gkL1HI/Q0=)
                          3: jy9aR7JivACbyOKyL1-NRV3aZSI.roa (hash: VP7tgihrBA7oU8MZ5JIgB/FrqOSlCWWPgUELJyALKvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:bc:78:c2:6b:3e:ed:27:e8:9d:23:35:dd:79:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: Nov 22 07:02:17 2024 GMT
            Not After : Nov 23 07:02:17 2024 GMT
        Subject: CN=95f4caa57345bb289dfade3b13e2fa5af3549f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:41:74:f6:b8:66:88:b2:93:7c:43:e9:eb:
                    d7:e0:3f:0a:5e:f3:74:6c:a4:60:dd:82:be:c3:81:
                    44:f2:bb:ec:b2:84:bb:6c:53:40:e2:e9:a0:82:bd:
                    78:04:5c:a6:87:91:01:a8:0b:c0:67:dd:ea:cb:3b:
                    c1:bf:d5:b8:a5:1f:8c:58:ef:37:3f:20:16:72:cf:
                    df:38:7d:73:95:20:67:3f:d7:fa:29:bd:63:35:91:
                    a6:71:be:e8:e0:f3:41:92:61:d2:b4:f9:31:1a:c9:
                    47:d7:d8:f8:02:82:2f:15:e8:54:89:84:7a:a0:8c:
                    33:3c:13:ae:04:02:73:e5:c6:37:2a:05:21:77:7f:
                    50:d8:49:71:9e:98:fe:b4:a3:a3:19:d4:0e:88:28:
                    b0:15:7c:3e:d7:11:f1:63:52:11:a4:9d:be:d1:c6:
                    b0:34:86:7a:40:37:92:0b:e9:0e:a0:1b:ac:c3:3a:
                    b5:65:87:29:54:1b:e2:ce:15:68:74:87:20:d3:da:
                    e9:32:f3:7f:4f:9e:75:d3:cd:ea:55:29:32:f5:9a:
                    28:97:a6:b7:d3:42:2a:a0:33:ab:0f:66:e5:f4:f7:
                    5b:62:95:b0:92:0d:e5:67:40:8e:94:d4:6f:30:a9:
                    5d:72:33:03:7c:b7:d9:9e:e0:6f:92:8e:fe:db:e0:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:CA:A5:73:45:BB:28:9D:FA:DE:3B:13:E2:FA:5A:F3:54:9F:08
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:8a:d3:9b:c8:bc:a4:60:f8:32:02:12:2e:31:3e:6f:3f:
         39:0c:d3:cf:44:cf:bc:1b:2e:ca:bc:da:22:56:22:42:2c:9a:
         ca:88:02:5f:55:16:1c:41:ba:c5:e8:ed:d4:5b:43:be:a4:0b:
         1e:c4:c7:e1:e3:e9:44:01:18:d5:b3:13:5b:00:e2:03:28:d9:
         c3:19:74:3c:a4:5c:d1:32:f9:41:93:99:4f:0d:48:39:3f:cc:
         7f:3d:01:53:cb:40:fd:ad:3e:0f:2a:c3:f1:45:45:a0:79:e2:
         1d:26:95:72:45:f8:33:2b:52:f5:b2:36:34:32:04:c4:52:02:
         04:20:f3:40:67:a3:46:10:c5:b3:62:1b:11:58:b2:a1:ef:76:
         9b:a3:60:1b:5a:87:9f:26:db:ac:47:4c:0d:7f:a3:22:62:1b:
         d4:d7:e3:bc:31:62:50:66:44:cc:48:1d:6c:13:f0:42:2b:b4:
         61:29:6c:34:60:73:cb:0b:e5:48:c0:a7:04:43:ba:21:13:8a:
         27:f1:fe:b0:af:c2:5e:24:b1:a6:82:ed:7a:2c:99:fc:c5:1f:
         cc:30:0c:57:85:d0:45:6f:cb:cb:38:da:f8:28:7e:5b:35:f0:
         c9:42:e8:c8:bf:d6:a4:cc:34:c2:8b:c7:67:25:71:e0:9b:0b:
         a1:82:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:20:16 2024 by rpki-client on console-fra.rpki-client.org