Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          5lGz4936GEi8TrIFLfOrQoOUCzG8RRS4PQ/DjYSkhl4=
Subject key identifier:   FF:4B:89:88:D4:4A:00:FB:99:71:FB:84:B4:2E:4F:3F:B6:0C:F6:F1
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       019352E2CD3B18958A7715A4927982204544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          03FA
Signing time:             Fri 22 Nov 2024 08:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:15 +0000
Files and hashes:         1: 4Frao6vnKbuyOrkyGv12TpCGRSg.roa (hash: s9ploTaZSw6F2++QUDa2mmM+36ngFMmWj5cnITXgyBc=)
                          2: Gvw93C2t4FzNoa5HvIuCJtDNtf0.roa (hash: vrJUOxWFMiikrmshKC5J4sD01m8oSRLhGaR3N0loZ7o=)
                          3: LbMg4K4jM2SUGk4Hq2Z88_mKVtA.roa (hash: d3P/efJ26Y9kQ9ajmo1r2SNRREyIrDqHcvaqVXVU4/8=)
                          4: NfscdmUeXqxSa1PMjlKvvS5E2qM.roa (hash: SMxmgqbfVPWOEcDBEWaPkhiWnDU/9QsTcNRcZ/u4qkc=)
                          5: Xf7Re6rSwX_Rq1tXcJY-dzjs_xY.roa (hash: wg2iUBdR9hG3MKWgZz/DO+N769LGgOWssjACqXYgdeg=)
                          6: Y1gEJGFkTesUOCEpHIW-clM49z4.roa (hash: xastalsFHV6sEhMyzqBwU2cbxLE7KGbnfhBZRsMmEQg=)
                          7: mXVorXrzSitENCASOyLe3z78wkU.roa (hash: g49ZcM5/zs7sN9wvqlJ+V52rlXcsAQmIitybG9dVbBk=)
                          8: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: zEOGjtDS2ildcuW0RSWvq9hzhitlmYh6sXVTckK62jE=)
                          9: y-nXZceaCcPoG2ive4bdpnDs3ng.roa (hash: yzr/JrJ+xed5WTxRfx9tUfksGwsGBDG15cSUN2hwN70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:cd:3b:18:95:8a:77:15:a4:92:79:82:20:45:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Nov 22 08:00:15 2024 GMT
            Not After : Nov 23 08:00:15 2024 GMT
        Subject: CN=ff4b8988d44a00fb9971fb84b42e4f3fb60cf6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:1a:6c:f6:6e:8a:d9:fd:0f:5c:12:60:73:
                    e1:14:05:48:48:55:c0:a6:ec:4b:e3:b8:39:5e:9f:
                    a0:6e:26:a5:bf:10:c8:bc:54:0c:41:67:4e:d8:f8:
                    37:16:48:d4:44:52:e3:27:37:e4:26:f5:1e:d6:ff:
                    a2:ed:cd:2b:29:f8:77:e9:1b:f4:3d:63:51:cf:02:
                    d8:78:02:ab:d3:ec:1b:c4:79:ce:46:45:c7:8e:02:
                    99:0f:22:16:a8:31:6f:35:e7:50:57:e4:bb:d4:2c:
                    3e:e9:33:37:f3:a0:e7:fe:6a:35:37:80:8c:2e:31:
                    da:09:66:1d:f7:eb:a9:5a:52:3c:51:f1:4f:7d:85:
                    44:d2:3c:34:5b:1c:3e:81:08:c6:12:05:8d:33:f2:
                    e9:26:b8:35:0e:02:13:04:7e:a9:98:80:dc:29:6f:
                    0b:0d:b7:cb:3d:e7:bc:39:e6:ef:aa:f2:b9:fc:a1:
                    ca:a0:0e:2d:ff:92:23:72:d6:e4:ef:de:f4:14:bd:
                    87:be:79:a8:a9:ec:ef:4b:37:d1:8e:3d:0b:3f:46:
                    49:e4:cf:d2:3a:29:ef:95:28:6c:49:a4:a7:8c:cd:
                    d5:39:4d:24:8e:93:2b:0a:0e:69:23:0d:a6:6f:1a:
                    dc:23:9d:1e:e7:01:ea:d3:35:4f:97:30:5f:59:ca:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:89:88:D4:4A:00:FB:99:71:FB:84:B4:2E:4F:3F:B6:0C:F6:F1
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:79:e0:91:70:e2:d4:eb:8c:b8:f0:04:32:85:d4:cc:0b:
         48:46:ae:0d:c3:6e:25:fb:52:8e:f7:73:50:63:99:9d:cc:02:
         fc:bc:75:cd:46:18:d1:dd:2e:81:f0:08:37:5e:f2:18:d0:1b:
         e3:1e:2a:b3:1b:fd:61:8a:4e:21:0c:a1:6d:03:5c:d4:3e:52:
         73:76:7b:30:ac:cc:c8:8d:71:8f:69:f6:de:6f:b1:50:40:47:
         92:0e:ba:e7:26:52:63:d4:1c:25:46:d2:f4:84:de:29:86:39:
         32:bb:04:5e:c1:16:f8:bd:38:af:3e:75:68:6c:d0:3d:57:8f:
         dd:7f:5e:e6:b2:bd:d8:6b:27:81:02:9f:90:14:cb:3a:50:72:
         2d:19:49:86:db:49:97:bf:9e:48:20:ed:a1:bf:2e:d4:ba:a6:
         e8:f4:ac:66:27:a8:29:55:3a:16:ec:eb:aa:cf:a4:de:95:4c:
         65:21:75:a7:11:df:ea:be:c9:26:5c:24:ba:a1:1e:b0:36:64:
         23:1c:ed:67:fd:82:b1:8f:00:f0:97:23:ef:40:00:dc:a9:87:
         50:ca:e1:68:dc:b2:e8:c4:92:8e:9a:a2:fe:59:a2:97:a1:46:
         b1:47:8d:46:3c:d0:e2:32:33:8d:83:3e:4a:0c:0a:17:91:02:
         8d:eb:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:58 2024 by rpki-client on console-ams.rpki-client.org