Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File:                     Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier:          kbzJpFyJVOBXrBoqoTgAaTKN36zEy4vd/Z2Jhr5vaSI=
Subject key identifier:   97:23:E2:A9:C4:DF:43:6E:DC:62:16:33:E5:31:07:75:61:2B:15:4A
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer:       /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial:       018F874A4153F7DB73DE4584994C70C5C923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number:          0FDF
Signing time:             Fri 17 May 2024 16:02:21 +0000
Manifest this update:     Fri 17 May 2024 16:02:21 +0000
Manifest next update:     Sat 18 May 2024 16:02:21 +0000
Files and hashes:         1: Euj0yT7TyzsqzcrrRR8j7IWHHIs.roa (hash: D0n9E5v2CMo767V0GKDClvmsokbEw9b6M609MX+t+rE=)
                          2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: UX/PXUC2yl1qqy8VyxQopmjqT6Ityk1ptCgXcOs73E0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:41:53:f7:db:73:de:45:84:99:4c:70:c5:c9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
        Validity
            Not Before: May 17 16:02:21 2024 GMT
            Not After : May 18 16:02:21 2024 GMT
        Subject: CN=9723e2a9c4df436edc621633e5310775612b154a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:da:ab:2c:d3:2b:01:7f:e5:25:97:8d:0c:
                    51:21:eb:48:b0:92:f5:59:19:ef:6c:00:19:ad:3a:
                    28:4f:74:ad:7a:88:da:5b:9d:2e:a5:8c:f9:8f:5d:
                    98:4a:ef:51:e2:e5:5d:55:74:1b:38:7d:c6:ac:55:
                    29:15:43:79:2e:76:1b:58:7f:e6:20:43:9b:5f:65:
                    b1:bf:a8:74:17:b7:27:c8:cf:c8:b6:c9:99:5b:1f:
                    75:2d:3e:05:0d:46:b1:10:7d:dd:b3:83:62:bc:0f:
                    08:4f:de:31:14:99:3c:9e:bc:d3:25:78:06:84:c9:
                    3c:b9:a3:5f:76:38:eb:ed:5c:54:94:4b:d1:45:ae:
                    b6:a0:d7:28:95:b4:78:81:ef:6d:c4:97:83:91:97:
                    56:30:70:72:79:3f:f8:e0:03:59:ff:6d:e4:8c:86:
                    51:4d:42:8e:65:23:60:d1:db:85:b4:49:d6:0a:40:
                    92:85:88:12:13:90:62:95:ed:60:df:58:0c:27:3b:
                    34:d3:7a:ec:82:f3:28:15:9f:b9:fe:19:05:f0:70:
                    14:db:3e:47:38:a6:33:49:dd:7d:e8:ce:0d:82:96:
                    55:9d:6d:70:94:0e:21:97:33:0d:48:f1:83:35:71:
                    d0:95:bc:63:dc:de:b5:de:a4:43:1d:33:44:3c:a7:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:E2:A9:C4:DF:43:6E:DC:62:16:33:E5:31:07:75:61:2B:15:4A
            X509v3 Authority Key Identifier:
                keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:91:ad:af:27:f9:a4:ae:3a:2f:51:76:c3:16:b3:f5:ef:c4:
         57:9c:df:d5:ac:60:b5:ce:5a:ae:e6:41:f3:90:f9:44:08:90:
         23:99:ac:37:ad:b2:1b:90:16:1f:ca:d7:5f:c9:94:0f:98:4b:
         1d:d6:b0:b4:f4:38:d3:fe:34:48:53:94:0e:38:c5:48:80:c9:
         1a:62:4b:ea:39:74:b4:97:15:5a:72:09:9d:bc:77:e8:fa:fb:
         cc:c9:95:cc:39:d3:bc:00:f9:99:22:86:66:ab:42:c7:ba:d8:
         b8:f7:3a:61:75:6b:ff:d6:42:a0:4c:36:ab:63:e9:6c:4f:9e:
         a4:8e:d0:4b:8b:35:fa:14:51:34:09:e8:40:b9:ea:40:8e:90:
         57:10:80:cd:ab:a8:76:5e:86:2f:ae:9d:b6:1d:ed:a9:0c:5d:
         8b:44:ad:89:ee:5e:d6:97:cb:79:57:ed:e8:5d:b7:4e:b3:e8:
         86:45:89:8e:1f:f8:79:42:8f:c3:c2:58:9b:1f:18:f5:79:b3:
         8d:90:5d:3b:ed:6b:ce:03:88:8d:95:b4:70:a4:a6:a3:fc:d8:
         1f:55:d2:36:1e:4f:42:48:b3:87:d6:64:47:5f:ab:91:8e:cb:
         ca:de:31:4e:71:45:f6:cc:27:15:cc:54:5d:a0:0f:5a:fe:c7:
         e0:ae:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:19 2024 by rpki-client on console-fra.rpki-client.org