Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
File:                     Way0AidliYvk8GBQzTovkpHYM2c.mft (raw, json)
Hash identifier:          8qeYTR/L7b+c4TsU/9qHf6HFo+/fn+jWhSb4PyWGt8Y=
Subject key identifier:   82:0D:A1:1A:4F:B5:73:81:A1:28:6C:42:75:EC:23:4F:A0:78:5C:CC
Authority key identifier: 59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67
Certificate issuer:       /CN=59acb4022765898be4f06050cd3a2f9291d83367
Certificate serial:       01935A6614F1C78BA32B35B0014FF411E908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 19:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 19:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 19:00:59 +0000
Files and hashes:         1: FYfrpMiW8uI7BWTKJBs0KbwURcA.roa (hash: IS8wRbsA4ojx8lK2BxumlNW0rD6kEtSaYYyyXMD8/ck=)
                          2: Way0AidliYvk8GBQzTovkpHYM2c.crl (hash: WSUxDcc/YRf+Uv73Iyb+HR6BBEFOfFvrQQVGwC4rSkA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:14:f1:c7:8b:a3:2b:35:b0:01:4f:f4:11:e9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59acb4022765898be4f06050cd3a2f9291d83367
        Validity
            Not Before: Nov 23 19:00:59 2024 GMT
            Not After : Nov 24 19:00:59 2024 GMT
        Subject: CN=820da11a4fb57381a1286c4275ec234fa0785ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:53:85:e2:12:98:15:64:d7:51:dd:56:13:
                    b2:18:4b:dc:9a:d7:16:c0:ea:f5:e6:a8:7c:0f:d6:
                    c1:3e:04:ed:87:33:d6:17:00:7a:b0:1d:09:4c:4b:
                    3a:f1:e5:a3:02:99:72:a0:41:8e:15:79:4a:c6:6b:
                    1d:1a:d1:86:60:c8:69:4f:42:fb:15:57:bc:25:8b:
                    67:bf:32:71:bd:bd:9b:cc:04:4c:50:b2:d4:6e:59:
                    62:fd:7e:a5:9b:1f:f1:40:7a:86:af:eb:b1:69:23:
                    d5:91:e2:b6:93:e2:e1:17:d2:30:50:6b:f0:ca:95:
                    61:b1:e7:6c:b9:d6:9e:79:f2:3a:05:dd:a8:80:61:
                    d9:72:73:3b:05:7f:d6:54:d0:68:ed:89:e0:aa:55:
                    43:89:5f:35:81:9e:a0:ee:f0:95:cf:63:01:a0:ff:
                    ad:a3:fe:ee:27:b5:85:22:84:56:65:13:49:95:7a:
                    d7:80:f4:bd:1c:02:52:f0:a9:92:6a:b2:3c:74:0c:
                    c9:1e:67:9c:27:dc:16:b2:c4:94:e1:04:85:7b:3f:
                    7d:8d:45:b2:23:a2:28:f0:1e:b7:b2:27:a6:98:5f:
                    54:72:0e:04:3b:36:34:ce:1c:1f:94:0e:49:84:23:
                    03:b8:87:74:f4:4b:87:93:5f:ff:58:c4:8d:0e:73:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:A1:1A:4F:B5:73:81:A1:28:6C:42:75:EC:23:4F:A0:78:5C:CC
            X509v3 Authority Key Identifier:
                keyid:59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5d:67:39:37:f2:93:38:9b:e7:56:5c:9a:26:2c:3b:79:25:
         00:53:64:34:2e:00:a6:ab:a5:a7:9e:47:ac:bf:ea:70:70:80:
         c3:3d:22:8c:64:f3:c5:f1:80:ed:dc:37:b9:0f:e7:5a:f5:3f:
         1a:d5:be:ed:5b:19:5a:0d:ec:34:f8:27:da:0c:30:f4:28:9a:
         53:2d:85:9a:04:2a:97:81:ab:6e:fd:e0:b5:04:e5:d2:45:2a:
         12:da:5f:46:b0:a5:bb:09:c1:34:6e:31:bc:ad:d5:17:cf:43:
         67:b0:3a:b6:7a:4b:4b:b7:b4:c5:24:f2:ff:d0:fc:06:6b:ae:
         53:6d:68:f1:c8:43:68:65:43:fd:59:0b:98:96:46:ad:02:f5:
         88:2c:d9:20:02:14:42:98:cb:e3:77:cb:f8:5e:41:28:cb:38:
         6e:9d:f6:8d:17:a2:af:79:8c:58:d9:be:91:93:78:66:91:a9:
         12:61:92:60:c6:37:98:b1:c5:1f:ec:35:86:27:1f:26:35:ab:
         e5:a2:1f:50:d3:1e:25:e2:5a:93:05:cd:74:1e:cd:37:78:16:
         95:65:02:f7:64:96:3a:af:15:b8:12:2c:25:f6:a1:c2:e5:d0:
         04:78:c9:35:31:55:92:25:6b:fd:52:93:bf:80:62:39:7e:ab:
         3a:f2:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:42:37 2024 by rpki-client on console-fra.rpki-client.org