Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          8YVLgu1l4O8a1dO1KAKTCTmkful5kFfnT4KUY2vioNs=
Subject key identifier:   42:E3:8B:7F:18:54:48:D9:F6:88:B7:41:BC:B3:8A:3D:DA:DE:8F:FE
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       019357D273450DD9F0C5A48BFEFBF738B423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          050A
Signing time:             Sat 23 Nov 2024 07:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:30 +0000
Files and hashes:         1: sMC75iWp8Ljd9LRCblJJgt_on8g.roa (hash: /aHl623Cxhb+GEeyfjZ2zytXXTEHuub/KXUWoU3nmCQ=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: QaIPPZzsyGvLmtSbGlHOng9N2THY7hcrpzK8ssm/DvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:73:45:0d:d9:f0:c5:a4:8b:fe:fb:f7:38:b4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Nov 23 07:00:30 2024 GMT
            Not After : Nov 24 07:00:30 2024 GMT
        Subject: CN=42e38b7f185448d9f688b741bcb38a3ddade8ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:8e:eb:3a:4e:b1:dc:f0:23:5a:6b:36:df:
                    a3:d0:bf:80:29:78:49:43:24:4f:da:20:68:ab:81:
                    21:5d:c3:6e:27:a5:c4:13:e4:b0:10:fa:25:01:87:
                    64:02:62:b4:4a:48:ff:99:f2:ec:be:54:36:34:f3:
                    f0:e4:3a:5d:d4:e4:9f:6b:f6:dd:63:f6:98:42:cc:
                    99:13:3d:2c:71:98:ba:6f:4a:20:6a:42:46:b4:0e:
                    75:ef:e5:f2:76:79:b3:7d:ae:0a:1b:2f:95:12:03:
                    93:15:f3:c4:e1:9e:93:44:0e:f1:12:40:04:26:3b:
                    f4:10:99:4c:b5:8d:4d:be:97:ca:8f:88:ac:e2:d4:
                    b7:f2:c0:27:5d:f0:ac:91:6a:9e:b4:3d:87:3e:34:
                    f6:fb:53:70:41:9f:d3:79:46:84:c7:ae:5b:e4:a3:
                    fb:0a:af:76:14:b1:7d:3a:63:fe:06:d4:54:aa:94:
                    4f:77:7c:c1:fa:b2:80:c5:c3:54:76:8b:a0:08:2c:
                    21:54:58:86:cf:73:e5:fa:96:0a:98:a0:26:09:5c:
                    1b:30:38:2d:a7:3e:fa:92:22:52:84:e2:61:c0:d0:
                    79:f4:e3:ab:e9:b0:91:42:48:39:77:4b:74:58:c6:
                    d4:cc:5c:63:08:63:c1:36:87:60:bf:67:b9:14:c8:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:8B:7F:18:54:48:D9:F6:88:B7:41:BC:B3:8A:3D:DA:DE:8F:FE
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:d2:b4:d3:2b:b5:00:4e:80:87:2c:6d:f0:d9:90:5c:2f:
         a9:f7:d2:8f:e3:3c:fe:83:1a:d8:20:48:f3:94:d8:ff:25:e0:
         63:de:c5:e9:b7:0c:e2:62:8c:4b:72:d9:27:22:f7:7a:23:23:
         9c:7c:db:01:92:21:95:c7:f6:74:b7:bf:be:bc:41:3d:bc:dc:
         3e:05:d2:10:0c:83:cb:a6:84:85:5a:21:bf:88:6d:5d:bb:50:
         79:b3:33:de:57:c5:5e:e2:93:9c:fc:a9:69:a9:1a:f7:89:98:
         23:39:6d:d3:32:0f:ca:fc:32:93:27:7f:0b:99:22:fe:90:01:
         1a:e5:63:2e:53:f4:63:ef:eb:a4:f6:5a:5e:0e:ad:96:59:9a:
         12:da:79:dc:6a:fe:11:2d:de:6f:35:b1:fb:a6:ec:14:ec:54:
         16:84:43:70:4b:67:7e:7f:14:9a:1f:85:b5:1d:7d:67:f4:06:
         f0:e5:2d:e5:c1:39:9d:ec:88:8f:ad:e1:ef:d6:bb:4c:20:bd:
         9f:6f:03:a4:5c:00:9e:af:8f:a7:32:d7:3f:17:4a:2a:f8:3a:
         3f:f6:9f:b2:2b:6c:cf:56:97:94:6e:c1:b9:3b:19:e5:af:b4:
         69:c1:48:fd:1e:ab:b3:5f:62:72:e2:bc:71:8b:02:1c:07:19:
         85:58:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:47 2024 by rpki-client on console-ams.rpki-client.org