Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File:                     wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier:          d3YNkLInSDE0+E0VYMrHPQ8uPSpBcmqG4epvhfG4t7g=
Subject key identifier:   BD:53:BD:57:EF:47:AB:19:88:46:AA:AD:2F:01:C4:0D:A9:9C:8D:79
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer:       /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial:       0191FAB50AE90347C66CE9C028024A6F189A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number:          DA
Signing time:             Mon 16 Sep 2024 12:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:54 +0000
Files and hashes:         1: c86EWGmb8_g_XtI1fw0a5cUb3Kg.roa (hash: 7cxjKcy0PbV7Bt35+rvvzzaLzJwpAUh9I+0vnxiQQ5U=)
                          2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: tErvAa2yPMV4BJ43bs12WkedpsXEo0ksVFe2IKlHQWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:0a:e9:03:47:c6:6c:e9:c0:28:02:4a:6f:18:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
        Validity
            Not Before: Sep 16 12:00:54 2024 GMT
            Not After : Sep 17 12:00:54 2024 GMT
        Subject: CN=bd53bd57ef47ab198846aaad2f01c40da99c8d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2d:0c:16:a7:7d:81:ec:a4:a3:72:8c:0e:1e:
                    f0:db:4b:53:31:48:d9:7b:5a:be:70:0d:ea:8b:e8:
                    6e:76:b9:95:ef:b8:51:03:56:13:6f:e6:8d:ee:b1:
                    85:bb:b4:92:e3:ed:59:81:e4:3a:bf:7f:b4:6d:d7:
                    b5:b7:ab:bf:65:07:96:df:7c:5f:82:81:91:24:1a:
                    f1:78:8e:d9:83:73:bd:c2:e9:97:b9:f6:36:a5:c9:
                    59:cf:9e:0a:35:c7:a2:8c:23:3a:a2:bd:be:30:c6:
                    d6:ab:0b:00:bd:aa:ee:9f:c0:2d:7c:c3:1c:9c:31:
                    4e:c9:cf:67:c5:6e:f5:5a:61:6d:6a:b0:e3:52:4c:
                    48:b9:f1:26:84:27:7d:42:e5:f1:52:b6:19:cb:07:
                    29:16:08:50:cf:5e:d0:ed:4b:bc:be:9d:4c:d5:5d:
                    ae:dc:e7:27:df:9a:42:c6:8a:0d:bd:22:a2:d3:6e:
                    31:08:c2:ce:52:68:74:57:52:11:73:9b:2f:1f:74:
                    41:52:00:e1:3d:37:c5:42:7d:21:af:a5:a5:63:c5:
                    2d:af:cb:d3:fe:b6:94:81:58:fa:e1:10:03:4b:fe:
                    9a:d3:77:a9:7a:1e:9f:83:21:50:1d:c6:67:f8:e3:
                    87:47:51:35:40:01:ce:3d:aa:34:23:36:76:f9:cf:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:53:BD:57:EF:47:AB:19:88:46:AA:AD:2F:01:C4:0D:A9:9C:8D:79
            X509v3 Authority Key Identifier:
                keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:c3:6f:67:64:b3:23:5b:7e:73:b1:aa:54:d9:d9:f8:68:
         1b:af:40:0c:d6:15:51:58:d0:26:13:cc:a5:fd:51:e1:ff:67:
         53:1c:8c:c4:3a:c3:bd:47:04:b3:2e:ed:98:e1:dd:40:cd:82:
         d3:85:10:1b:f5:dc:a9:8a:dd:35:41:88:21:3c:cf:24:3c:f1:
         5f:e3:a0:67:9b:60:63:16:60:1f:99:83:b5:74:a2:a8:37:12:
         25:7f:aa:2d:4c:8d:8e:ce:eb:0d:26:d2:0f:f6:b2:d5:d5:01:
         3f:f3:8b:af:a2:9d:a3:5a:2f:1d:78:4d:53:a9:f7:d6:05:d3:
         23:da:80:eb:08:3a:43:4c:a2:67:57:79:66:e7:6d:02:27:bd:
         35:a5:77:96:9f:76:33:04:57:84:d9:c2:59:a1:5a:2f:53:d3:
         da:9c:a1:b6:ac:c8:5c:83:47:40:54:70:53:ff:a5:79:23:4c:
         09:bd:18:18:16:24:9a:ef:a0:e5:0e:a9:41:7f:6c:68:b6:25:
         64:60:e3:b0:ce:a5:71:3d:9a:e7:02:1c:4f:3d:2d:22:a1:54:
         1b:c4:fb:4c:13:8b:a3:3c:9e:fe:ae:f0:e0:44:eb:81:c8:8b:
         d9:19:2c:83:0f:3b:93:c1:04:48:9d:1a:98:d9:c7:bb:95:a6:
         fc:25:5f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6tQrpA0fGbOnAKAJKbxiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjQwOTE2MTIwMDU0WhcNMjQwOTE3MTIwMDU0WjAzMTEwLwYDVQQD
EyhiZDUzYmQ1N2VmNDdhYjE5ODg0NmFhYWQyZjAxYzQwZGE5OWM4ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S0MFqd9geyko3KMDh7w20tTMUjZ
e1q+cA3qi+hudrmV77hRA1YTb+aN7rGFu7SS4+1ZgeQ6v3+0bde1t6u/ZQeW33xf
goGRJBrxeI7Zg3O9wumXufY2pclZz54KNceijCM6or2+MMbWqwsAvarun8AtfMMc
nDFOyc9nxW71WmFtarDjUkxIufEmhCd9QuXxUrYZywcpFghQz17Q7Uu8vp1M1V2u
3Ocn35pCxooNvSKi024xCMLOUmh0V1IRc5svH3RBUgDhPTfFQn0hr6WlY8Utr8vT
/raUgVj64RADS/6a03epeh6fgyFQHcZn+OOHR1E1QAHOPao0IzZ2+c9sQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1TvVfvR6sZiEaqrS8BxA2pnI15MB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGLDb2dk
syNbfnOxqlTZ2fhoG69ADNYVUVjQJhPMpf1R4f9nUxyMxDrDvUcEsy7tmOHdQM2C
04UQG/XcqYrdNUGIITzPJDzxX+OgZ5tgYxZgH5mDtXSiqDcSJX+qLUyNjs7rDSbS
D/ay1dUBP/OLr6Kdo1ovHXhNU6n31gXTI9qA6wg6Q0yiZ1d5ZudtAie9NaV3lp92
MwRXhNnCWaFaL1PT2pyhtqzIXINHQFRwU/+leSNMCb0YGBYkmu+g5Q6pQX9saLYl
ZGDjsM6lcT2a5wIcTz0tIqFUG8T7TBOLozye/q7w4ETrgciL2Rksgw87k8EESJ0a
mNnHu5Wm/CVfKg==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:35:13 2024 by rpki-client on console-ams.rpki-client.org