Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          nflAT5oH8VZ1JW+Sxr6LtUpTlGiWCeGQZFO0LPatic0=
Subject key identifier:   9C:EA:81:FC:AB:C9:B8:1B:3C:6E:01:93:67:E2:83:9E:50:85:0B:94
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01934DF38964B6CCB6106AE3D878F8E5517A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          04F3
Signing time:             Thu 21 Nov 2024 09:00:26 +0000
Manifest this update:     Thu 21 Nov 2024 09:00:26 +0000
Manifest next update:     Fri 22 Nov 2024 09:00:26 +0000
Files and hashes:         1: 3iXA6yiaW4FBAgQoW_vm-9bfWJM.roa (hash: /lQH8QWXd7BH6S2tlvvdo5Nn4HgG/VjZ0JevJm5XSNM=)
                          2: 6n05MDgd73W6UPogiL52fi_H2rQ.roa (hash: OCNicH/1HdV08KfjZGDs2MYKoLpajxRdUZ00juXJEBQ=)
                          3: 8IPlYHI3LVnwEd_4JVSg_cYqoDU.roa (hash: r7LsVfU2dP8Fguwr3LQ/9Jz4V89CfzCGyRsy4w1gXm8=)
                          4: BnFfpBGVQQZDT8YSDbsqD0Ao6m4.roa (hash: p+CZldrYvz77b9LORxcUNV/ys3Plt3SOZBWtubL86c8=)
                          5: C2ixSRiqvBnLxFND7Mlp5Hi7kVs.roa (hash: dHobWK9IdoDyXHUtBFS/XkC429cNCZ4od/e9wPK+EZ0=)
                          6: FAs0j_dey3yogwr3cqf-sJk5_pk.roa (hash: f5etfxmCKfC1eZrhFZSOWy0l4Gzq/Iybov6wb1n5wiI=)
                          7: LFFlvPXw1rmFMx2FNEdYaXI36DA.roa (hash: l8w+Fg6XUn8+D9ub5RCs6MkoQrZhezm5qzBQVULYAKE=)
                          8: O8r1pmhaPSmMdkxELTdx1242t7c.roa (hash: wzXy9RDRmH9f4znX0wrEx08e8oRJ2l8sC68l5knBcrA=)
                          9: T7d09Hgo1skANZLIp1XFPZgt7yA.roa (hash: fhzC2tt/Ye1MqIhphOq75oRSndldEhM9lzb7Q5B+yGo=)
                          10: VFHX_FgpBZlEd-_NB_m3Fg7I2eY.roa (hash: KUBw6xDzuuzKzy3z+YX2qWhMedscY4OSENCxpS2t66Q=)
                          11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: LJGWd3lucGlmbrsqT0MiNkFnHIiv6f7brAyVpQiAB3o=)
                          12: XSs0dHuO_6vpY2bDmg95lhyFM0s.roa (hash: q82qJufoOwn/LBneCPhD+WpyuilfRwB8NHSwZQ4uzlE=)
                          13: _I1-i6IZGCeN7LPwKnpNfshmo80.roa (hash: lY6mi9OM1c+wvW1OBnAZR3N+HNzrJ463MUoh/E7WqpA=)
                          14: acBvTtRLi_O3jwzDHrXkimr1ha4.roa (hash: R6qEPYfKhVLNJZTprjc/U5bH+GZ31u97KyuY6UB7HrM=)
                          15: iBeyry2GEeQW4nBbCkP0miiqyyY.roa (hash: eQJuc8/Ek2oK6IRN1qJaSWrSlu2ycHl2CLnz0P5OxI4=)
                          16: jn61MsjFKIftc3vWy9QKibOxY4c.roa (hash: KIV3qeMAFB3H2sdXT9N/LtygZZCKsaFQvTG7pREZ0lU=)
                          17: kWBE3nZDOot98goC9DEeIM-kP-k.roa (hash: W1WrNuMBEDkZguqeZh2WFv7MAmJ0WfLVkTzHSJVDaTk=)
                          18: kZrEx1_e9Xbg1mmYICMnjPVv9os.roa (hash: NOVBff+Y/2rB+jCO1yj4tprwZr9/pFViCLO1UVINS60=)
                          19: ko1Zt653bHsgSWtsIVFTBMNKTT4.roa (hash: itSo6jQQIGcS3Nu0HYNm+E6ozNtm4Qf5rgkWaFYAsns=)
                          20: v0zpICY_uoCuRiUkbkV3gIcVsJc.roa (hash: Si17y5ue90xdRHIJlv/yhy0krenuqvWH0CAz2+KJOps=)
                          21: vGCrQ6WGY4rw-gTm5lU79V8wTD8.roa (hash: x7cJZioH3R+9iaY4BtxYhJMQlkhFgyMhcDdtYIrqt3M=)
                          22: wf0Q1jwukhkR-489oaDeeCmfZpg.roa (hash: UBicaI6TwXQ8yZzlGyQ+CtkJGksvEmkZwFZ2eDYTAew=)
                          23: woU98QVxYC4qZhigJ6uOFI8PM-M.roa (hash: rftkeoz1M+cYvNG1KX6H5ZUirsVdQjIT8qHWn+AV+Ag=)
                          24: wyvTzYumi1EjPn3XZZMByhrPluc.roa (hash: cyJOXOIg2FZJxv1ZPglhDwRmXSGp5pDNEl//0HuSt8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4d:f3:89:64:b6:cc:b6:10:6a:e3:d8:78:f8:e5:51:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Nov 21 09:00:26 2024 GMT
            Not After : Nov 22 09:00:26 2024 GMT
        Subject: CN=9cea81fcabc9b81b3c6e019367e2839e50850b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:24:29:6b:eb:5a:1a:85:aa:28:e9:2d:4b:
                    52:c6:3f:1e:df:44:27:f1:37:c2:86:c0:c9:55:97:
                    dc:73:bd:68:21:60:15:7d:a3:9e:2d:59:f8:3e:1b:
                    fb:22:9c:74:76:05:76:d0:6e:6c:e0:e1:56:cf:7a:
                    8b:ad:10:f0:ea:1f:dc:f7:86:07:64:bf:07:3f:c0:
                    8c:92:0c:d2:8e:60:6f:9f:6e:81:08:73:e7:d5:19:
                    26:32:88:4d:4c:e9:1d:0c:9b:a3:67:95:97:d6:e1:
                    ac:9b:68:2f:2b:04:d3:16:a0:44:ae:18:a9:07:be:
                    c0:61:b9:8d:e2:0f:f2:91:71:ae:9d:d6:b4:08:64:
                    8f:c7:53:a3:af:39:5f:01:00:fd:f7:78:12:12:19:
                    89:49:c4:a9:04:9f:88:85:46:62:7a:ed:94:99:4c:
                    dd:13:cc:60:7b:7f:57:74:0e:96:2c:84:3f:f1:1d:
                    a3:fc:d5:d4:8c:c5:a7:c0:c3:84:5a:e9:28:46:dd:
                    68:ad:56:a6:b4:71:2c:7b:27:f9:08:fb:5e:7a:da:
                    c2:ca:74:49:61:04:a2:a9:24:92:80:0a:36:f8:07:
                    c1:c4:e8:b6:b9:83:d6:9b:29:8d:a1:9c:41:56:3a:
                    78:4e:a8:ec:73:f1:ad:7e:f3:ce:3d:6c:fe:3f:f9:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:81:FC:AB:C9:B8:1B:3C:6E:01:93:67:E2:83:9E:50:85:0B:94
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d6:a5:8d:42:b2:e1:f6:04:37:b4:be:a4:75:d5:6b:f2:46:
         c1:93:cb:be:ad:ab:e2:4d:1f:33:0d:c0:d2:44:0e:ad:7e:0a:
         c7:ee:26:09:16:8b:6c:f2:bc:07:33:f7:4d:ff:0e:c4:05:c1:
         73:1b:fc:17:d3:53:19:3a:39:91:a9:17:69:0b:52:24:19:4e:
         9b:5e:01:1a:7f:95:16:60:6c:1d:f6:8a:2e:ac:0a:f6:8d:4a:
         d0:ce:20:5c:cf:36:d0:8e:1e:fc:2d:3b:9d:e2:62:06:c7:57:
         a8:b3:66:fe:b9:9e:b0:90:60:51:87:a4:6a:ea:71:87:0d:5d:
         1f:7b:55:27:0f:c3:b0:2d:e6:7c:51:9b:f4:e6:d5:4f:14:3c:
         d8:96:3e:f1:4e:ed:9c:c6:bc:53:b6:62:45:cb:23:ea:41:b4:
         8c:39:9f:bd:6b:5b:67:35:bc:a3:91:57:92:a6:ef:71:2c:64:
         98:b9:7b:b2:ca:ac:2d:d0:92:ac:98:d6:65:5c:16:ee:8c:2b:
         b2:01:ce:25:52:61:53:d9:14:29:2c:1f:e3:9c:dd:8a:32:63:
         21:a6:0e:11:4a:03:74:f4:cb:1f:ab:59:25:26:1a:fa:77:eb:
         cb:38:5a:d0:99:85:c0:34:fe:fb:18:29:d7:f7:d1:7b:9c:30:
         7d:6c:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:02:06 2024 by rpki-client on console-ams.rpki-client.org