Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File:                     wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier:          xAiUm7soIEOWgFlOpC4++UiikRwGi/dcqctJ3SAxfTA=
Subject key identifier:   DF:E3:3E:23:16:06:12:CD:9B:A7:35:2A:4A:89:A8:7B:BB:DF:D4:3F
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer:       /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial:       019358783B4444C1F17B0F430D62E5104FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:01:34 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:34 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:34 +0000
Files and hashes:         1: bD3_2vQDJrbW_Z7s-Tdw3Oh5tjw.roa (hash: aeFDLPQJIJ+e4Xr3AIKQz0jkfNgq2vkw7SRQdzpquD0=)
                          2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: lPjzxg/g2S0DkU2DCbTztFtNMZEZYHI3wfb4Qv8dsxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:3b:44:44:c1:f1:7b:0f:43:0d:62:e5:10:4f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
        Validity
            Not Before: Nov 23 10:01:34 2024 GMT
            Not After : Nov 24 10:01:34 2024 GMT
        Subject: CN=dfe33e23160612cd9ba7352a4a89a87bbbdfd43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:f7:a6:bc:e9:6a:95:36:d0:61:35:f2:72:
                    cb:00:b8:6f:d4:24:a7:84:72:54:95:28:4e:20:13:
                    03:d2:54:b8:54:52:d2:dd:c7:ca:22:c9:19:ff:86:
                    86:6a:35:e0:3b:8e:b6:8e:e9:2b:5e:8a:1b:b9:48:
                    e7:e8:2e:8f:1a:e8:e5:08:0c:3b:5c:e8:2d:ee:b5:
                    7b:a7:88:06:cb:37:16:5e:45:d2:bd:08:eb:7c:db:
                    f7:2c:eb:82:6e:f7:2e:fa:80:41:90:94:99:05:2c:
                    bc:dd:1c:c0:3d:07:f5:df:c6:0a:37:d9:ab:25:80:
                    16:02:af:0e:28:db:94:b3:45:f8:49:ec:0c:fa:2b:
                    8b:54:45:da:19:71:d1:84:3a:19:10:68:8e:24:b4:
                    c9:2d:e5:83:0b:42:d1:b9:57:01:7a:5d:d9:ec:fc:
                    08:04:df:1c:5f:27:98:a3:7f:e4:c0:8d:a3:31:91:
                    d3:a6:30:99:72:42:c0:77:d6:c3:ed:5c:f7:d9:68:
                    80:7d:0a:bc:86:13:20:4b:d6:fc:b2:cd:2d:25:8f:
                    7b:99:d7:64:59:58:66:d3:29:d0:3f:21:2f:94:e0:
                    3e:ba:18:88:d4:d0:18:35:61:d5:5f:3f:67:7e:d0:
                    5b:8b:52:27:74:4a:ec:79:f9:29:10:8e:03:3c:b4:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E3:3E:23:16:06:12:CD:9B:A7:35:2A:4A:89:A8:7B:BB:DF:D4:3F
            X509v3 Authority Key Identifier:
                keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b0:0d:15:51:7b:9a:cd:8d:cb:08:48:40:7c:06:c6:3d:6a:
         2c:93:6e:62:6b:fc:c9:df:e7:50:2b:f9:d6:0b:56:9e:07:0c:
         bc:82:a7:50:43:c7:0d:5c:b3:8b:d1:c4:b1:cd:ff:8a:10:b6:
         53:61:03:87:5c:4b:ee:88:27:c6:6e:72:77:51:0f:0f:a4:4d:
         ac:e0:ca:a0:8b:60:22:14:ae:78:50:88:9d:cf:7e:3b:27:38:
         bf:51:ec:5d:35:00:d1:b8:40:41:b0:3c:a3:5f:a9:2d:86:58:
         6d:a0:bb:ba:b9:e5:8c:d0:bb:2b:a8:95:e6:cf:fb:66:9f:2d:
         79:a0:de:c5:06:84:92:81:dc:9f:bc:e5:85:84:6a:1a:38:db:
         f9:bf:fb:ea:90:5e:0f:b8:ec:51:ac:a0:1e:e3:4e:36:1e:c8:
         23:44:d1:4d:79:ce:9b:67:b6:47:75:a9:9b:b8:cf:0f:4f:73:
         be:33:22:46:f7:89:83:dc:c8:f4:a6:1e:f7:22:11:09:18:97:
         ba:8f:f0:a6:be:e3:3e:88:d6:02:8b:f9:46:ea:e9:23:41:75:
         07:fc:35:0a:ec:5a:a4:a6:e6:5c:16:26:58:f8:32:42:8a:82:
         bf:c9:7e:5d:71:d9:a9:92:f9:fd:fb:14:42:06:22:fb:4b:ef:
         76:4b:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:20 2024 by rpki-client on console-fra.rpki-client.org