Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          oxGQLaDWrVoue3YC7GnolTGFAsQYSm9hwanFY6fPy/M=
Subject key identifier:   27:CB:0A:80:AA:96:6B:C1:BB:83:3C:C6:30:EA:CF:29:CA:C0:03:06
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       0193549AC0CAD1FCEFE49C9AD03323ECA6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 16:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:48 +0000
Files and hashes:         1: 1-NFKDd3yr11CvV2XD312m6U0VAw.roa (hash: dp3noC2IVomNgx9zMWwJ0nUtxEzXGpFAEn+uJshKVuo=)
                          2: HvijPALkoIMtuY13Jt_49-KP3XE.roa (hash: 2CjCxrPIZtk90VPDDCbU75gtEERT2qcD/8qiLdQdhz4=)
                          3: RRORfH_oQnm47Xr-bQ4PECjibNQ.roa (hash: Ry6lJGzM3kLMvGVD35TyTKfaddFAyipQtEOFrm8yNL8=)
                          4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: oW/rheuO7LTvW8QnN+CgcRySPN7jCYOApSBI1kRbdgE=)
                          5: _4IkagEyyAA1mV5VxooFA1ZB30k.roa (hash: MplmkeCWiEyfCVpwgmun1YzXyDuVx0Gj5QIe3JZ24iU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:c0:ca:d1:fc:ef:e4:9c:9a:d0:33:23:ec:a6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Nov 22 16:00:48 2024 GMT
            Not After : Nov 23 16:00:48 2024 GMT
        Subject: CN=27cb0a80aa966bc1bb833cc630eacf29cac00306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:6d:f2:f9:51:36:79:cd:68:8e:d9:b7:68:
                    ac:51:28:87:b6:5c:c3:20:9d:f2:ca:26:1e:52:7b:
                    80:f5:18:46:d6:09:af:b3:b3:ca:2d:dc:b1:72:d5:
                    63:e3:02:2a:d4:87:0a:7f:09:fe:99:c7:c8:9d:23:
                    a8:64:4a:f9:17:8d:bc:ef:5e:73:f4:38:c7:52:92:
                    0d:cd:00:ac:3b:d7:d6:16:04:77:40:6b:34:ae:57:
                    03:89:4c:1d:ca:71:c8:81:f2:1d:9c:37:42:ac:07:
                    0c:5d:1a:2c:4a:0f:06:85:f0:64:66:ab:4d:48:65:
                    d6:2d:70:9e:d5:6f:c1:8f:c0:06:7f:85:39:c0:e6:
                    d7:eb:6b:a1:7d:3a:4b:97:a7:3f:db:c0:39:3f:5f:
                    b6:26:e2:0b:60:a1:0f:f4:a5:29:7a:4c:27:f3:db:
                    40:d4:9a:1c:04:5b:dd:3b:9c:03:80:e3:3d:75:79:
                    49:17:75:9d:65:bc:39:09:2f:e4:23:4c:10:af:5e:
                    04:ba:b0:9b:bf:8e:dc:1c:e4:50:f6:ae:c7:81:c3:
                    d3:24:0f:2c:3c:9f:2c:e8:88:e3:f5:ed:36:16:a7:
                    aa:2a:cc:4a:33:6c:ce:e3:bc:4e:00:ca:38:0a:ba:
                    e8:cd:b8:9e:d5:05:14:d0:74:0b:18:0d:14:ca:b1:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CB:0A:80:AA:96:6B:C1:BB:83:3C:C6:30:EA:CF:29:CA:C0:03:06
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:e2:57:1a:15:50:d0:48:5c:cd:34:2c:c7:d8:7c:fd:0d:
         53:c2:a6:32:3a:3d:75:0d:4c:0a:11:f3:3e:63:02:d0:0a:d0:
         9e:ab:89:c4:d7:28:07:c3:9a:ae:ff:6d:52:17:cd:c3:7b:e5:
         d3:4c:70:fd:60:a3:ec:83:2f:7b:b2:99:b2:54:ac:c3:ba:2f:
         a5:0d:83:bd:40:c1:44:b0:e3:c4:37:24:59:f5:50:26:7a:b4:
         a7:b3:a5:92:ea:e3:e9:60:45:30:5b:96:45:a9:f2:34:00:78:
         cb:ad:0b:30:8e:70:13:8f:af:3d:44:3c:9f:15:60:05:40:d8:
         b5:b8:65:bb:ab:c1:b0:9c:92:99:f3:90:dd:2e:d0:99:38:10:
         2c:8c:74:88:e2:6e:cc:06:21:af:ac:8a:08:d0:b0:1f:c0:d8:
         ff:2a:0b:9a:85:8e:7b:57:db:f7:3f:f5:61:b9:7a:82:92:22:
         11:8e:c4:cb:30:51:0a:92:a0:00:62:ab:8a:a3:36:cd:97:71:
         e8:80:d9:ff:d3:ac:2c:e2:60:c2:a4:13:90:56:cd:1b:00:ac:
         9e:46:4e:08:5c:f7:09:de:88:08:2c:35:bb:0f:a0:87:3e:f5:
         f1:70:e5:f7:e8:1f:97:f9:f8:6d:40:d2:2d:19:35:be:69:74:
         88:5e:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:51 2024 by rpki-client on console-fra.rpki-client.org