Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          Vla+6priq8Na74pKxfZy+PuEI5P0OBsEcjtCqkSfXhM=
Subject key identifier:   CC:35:AD:43:4C:53:1A:7C:23:87:3E:DE:61:5F:C8:83:8A:69:2C:55
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019358AE1A8F4CBC1C7D59D372D3989179C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          0DE6
Signing time:             Sat 23 Nov 2024 11:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:25 +0000
Files and hashes:         1: AUWisMsK5h3E1jxMp6yqH0TxXRc.roa (hash: OwD8E7YPDbBMiqeFjLpgHLLm2VPQJQyl7/FPvjjlvBg=)
                          2: QCR3XI9TovoQjg1rbKWY49M12Dw.roa (hash: gKRsH0jabmKIUTg0riK48T2N0Jeksd1+DENgOUscTwU=)
                          3: VKzwSbv1hPuC2EzE-O4Ag9V_T5I.roa (hash: gniQwQkOVbiXuWg7m1Fh2iZWDxxI5lMoKiVRFQt3aV4=)
                          4: kPp8ELLfTbiBDd32U3dA4eYrRdk.roa (hash: Fg61gX5TDDxQAegxMyVNJHb0YIxcWpzpyiie6Yvz8Ug=)
                          5: m-OJ2R-eV_ppzayaH1S26dUvv7I.roa (hash: cSZiVLduo7MMPPT9ayPwingc8VYLm6+YB66QEj8WlkE=)
                          6: pfPNXGH-UkPPnd7O_Gz0n-66VA0.roa (hash: AwV32FyyD1dpNXICrz5hAtdz/7YYOrwVrngDsKkIoTI=)
                          7: vjzVMumKYyr0ZcVkpWxnz1s32D8.roa (hash: yibEV7o8RctnXlIr4Hz1rL3F9Qm52jxxi5ciMbh6qzA=)
                          8: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: o5dJ7zt9iJRbRRJ/WmZR3+wc4CxZZhOzEd8TOC5w/7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ae:1a:8f:4c:bc:1c:7d:59:d3:72:d3:98:91:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Nov 23 11:00:25 2024 GMT
            Not After : Nov 24 11:00:25 2024 GMT
        Subject: CN=cc35ad434c531a7c23873ede615fc8838a692c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:3c:c3:f4:56:5b:44:e0:da:a2:0b:7e:2d:
                    57:30:8a:c1:09:ec:fe:60:5f:da:63:e4:8f:93:64:
                    98:f5:aa:6f:41:71:bd:39:7f:0e:ad:14:13:b6:7a:
                    c7:e5:5f:b2:37:b1:0c:bd:9b:b5:c2:5c:dd:86:8b:
                    3e:a8:22:36:17:36:3a:6c:58:52:ea:93:78:b0:d2:
                    47:fd:f1:ca:dc:89:a1:c7:1e:3c:f4:f2:93:60:d6:
                    e4:a2:9a:e2:be:1d:86:60:df:95:6e:80:b4:ba:be:
                    80:a3:5b:b2:d4:e9:38:d4:bd:dc:9a:11:f1:23:e4:
                    16:96:8e:4b:98:b2:1d:69:5d:12:b1:64:08:12:a4:
                    c8:99:d0:62:b5:8c:d9:17:a0:03:8d:78:67:e4:aa:
                    17:0c:42:4b:4c:4c:78:38:c4:c8:16:7f:66:52:76:
                    c1:73:e5:39:f5:96:cf:85:54:7c:78:1f:8f:77:0a:
                    34:4e:6b:4d:6a:ee:10:74:a3:48:79:a3:73:63:28:
                    f0:4c:77:f4:50:80:f6:80:6b:25:70:c4:8b:41:5b:
                    64:54:4e:1d:84:55:0e:a1:b8:d9:5b:fb:b1:a1:12:
                    a1:23:bb:47:b3:16:82:11:fe:af:30:2b:5c:72:d5:
                    6c:9c:f5:a2:a5:27:67:82:49:b6:0e:7f:7b:0a:3d:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:AD:43:4C:53:1A:7C:23:87:3E:DE:61:5F:C8:83:8A:69:2C:55
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:29:e1:aa:b8:91:ea:04:34:43:c6:70:39:c9:ab:04:89:
         cc:79:3e:ad:55:60:aa:d4:00:48:2b:5f:10:a4:57:65:1c:f3:
         bb:fa:04:97:82:1f:16:26:04:6a:c9:05:fd:92:9f:60:0e:0a:
         63:18:78:b9:b3:ba:9b:11:cf:7f:1d:e1:69:e0:05:78:c9:90:
         c5:b4:db:63:f8:9d:70:6e:4b:4d:7d:37:14:e9:ea:97:17:3e:
         0c:f2:2b:de:ab:c2:e0:ff:8b:fc:2a:28:99:39:5f:1b:dd:bd:
         dd:ec:3e:0d:9a:e1:ba:40:dc:af:e7:7a:0a:b7:96:0e:f9:17:
         26:bc:3a:23:a6:84:f2:23:dc:63:8f:54:d8:45:81:5e:58:05:
         dc:55:3b:8e:00:19:eb:a3:9b:52:2d:7e:fd:07:1e:41:d6:b8:
         47:fd:41:2e:70:ec:d0:d9:65:8d:f4:a1:64:74:59:94:05:bb:
         2d:51:45:a9:84:bc:50:42:4b:30:e1:c7:eb:47:4f:31:ca:c2:
         98:0a:72:9d:ae:b4:d5:7f:94:24:91:12:3f:e4:3a:98:fc:38:
         9a:8c:ce:d8:91:ec:25:e4:cd:e0:c6:84:f0:31:22:45:fc:59:
         57:44:b0:6c:56:25:c8:9d:fa:46:54:31:fe:ed:a9:a6:17:10:
         93:92:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:54 2024 by rpki-client on console-fra.rpki-client.org