Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
File:                     wnaouodMP73a00TQMliz4sBNe8s.mft (raw, json)
Hash identifier:          XeYW3FFVixiaryJp+KFYz3zfkfALq1CuVOoTWPBCklI=
Subject key identifier:   D9:F6:B6:13:23:47:AA:68:D8:19:9A:A2:01:93:48:F5:66:96:F2:A5
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Certificate issuer:       /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial:       0194BB975860608E714CD43AF561015AC689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
Manifest number:          0D58
Signing time:             Fri 31 Jan 2025 09:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:45 +0000
Files and hashes:         1: 0Nf_rzlffoz7wwVi3Pb2g0HuGls.roa (hash: 0LfgA8H9e4em0FQLoBAMDdwCTf6yeabJ5FzgfDm6WQc=)
                          2: Pki6gb_S1520VEM07UejShPDZGk.roa (hash: 7A7gzwXJGbe4mkaDrxLi5aJVByeCNXa6iSELALDb/bg=)
                          3: wnaouodMP73a00TQMliz4sBNe8s.crl (hash: tmER5mB3NBUlPB408MXAWfYhMkmUT0sPVl0jsQJRH9M=)
                          4: yBBzstTaOk57G_P5zLCVHKExcZ8.roa (hash: mLlsvymN4uLLcemV8g47YSkzHhZQynCIXD4Wv9H9sKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:58:60:60:8e:71:4c:d4:3a:f5:61:01:5a:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
        Validity
            Not Before: Jan 31 09:00:45 2025 GMT
            Not After : Feb  1 09:00:45 2025 GMT
        Subject: CN=d9f6b6132347aa68d8199aa2019348f56696f2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:dd:e8:31:3f:f4:80:aa:36:82:79:40:a4:
                    3b:75:3b:08:95:8c:74:56:76:e0:24:b5:dd:be:e4:
                    9e:48:a7:8a:d7:e5:44:8b:fc:2f:01:4c:26:c9:26:
                    36:34:e5:68:23:74:84:1c:82:fb:06:5e:59:38:76:
                    0e:10:6b:d4:03:7c:19:c1:ae:f7:75:5f:90:3d:1e:
                    2d:ef:af:ed:34:15:82:aa:07:d3:2d:18:35:45:45:
                    0e:fe:0b:1c:8f:d7:b5:9d:f6:47:1e:6d:40:ac:08:
                    48:4e:11:bf:71:d5:af:d5:e3:39:99:9c:c3:ed:4b:
                    25:c7:6b:7a:bd:86:22:80:84:5a:a1:bc:6b:30:53:
                    71:dc:61:da:8c:dc:12:f1:c9:12:2c:30:a9:33:e2:
                    1e:f7:2b:80:a5:41:35:1e:aa:ff:f6:a1:3d:da:94:
                    70:e9:2d:8c:3d:66:5c:18:45:d7:a0:7e:31:8d:02:
                    32:9f:d8:a2:24:4d:4b:9f:a7:1c:7f:88:63:e2:9f:
                    f3:ce:dd:1e:b1:19:91:3e:55:58:95:61:81:02:21:
                    42:6d:14:66:e1:e4:b7:38:7c:89:1f:47:48:99:2c:
                    61:1c:4b:93:c2:99:57:28:e7:3b:d5:ce:71:bf:f5:
                    51:58:f0:09:59:f4:f8:b5:20:96:57:dd:c3:2d:ad:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F6:B6:13:23:47:AA:68:D8:19:9A:A2:01:93:48:F5:66:96:F2:A5
            X509v3 Authority Key Identifier:
                keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:08:b9:06:37:06:5e:ea:5a:17:18:f0:f5:a7:ca:41:ab:
         be:92:df:d8:f8:44:c9:ac:74:4b:d4:2c:e4:e9:bc:44:2c:6d:
         1b:36:3d:9c:3d:fd:ef:be:88:dd:59:4a:c8:cd:3d:5f:29:12:
         67:8c:c1:a6:0d:eb:6b:65:d2:20:5e:42:80:f2:6d:e8:74:7a:
         8f:6f:68:aa:df:b7:29:13:60:f2:7e:ed:73:91:3f:bf:6a:6a:
         ce:e8:c7:0f:9a:b3:96:50:d5:6c:53:f2:f6:6c:57:77:8a:f2:
         37:0d:0e:91:9d:8f:a6:fd:7a:4c:da:24:e1:fc:da:b3:c4:8d:
         38:83:27:0c:a7:5a:d9:26:49:f0:2c:43:4f:f9:d5:49:2e:61:
         0f:8b:f7:a6:df:f7:3b:bb:83:65:b9:6b:b5:51:bb:7f:dd:a5:
         d0:d6:0e:fc:5b:a2:07:2b:bd:b2:b8:9f:e2:1b:f0:97:de:92:
         04:cb:6f:f9:e8:3c:79:08:e6:68:57:ba:f5:20:7f:34:1b:5b:
         14:b8:72:46:17:55:bc:4a:5a:ce:ad:09:3f:be:a2:5b:bb:9b:
         b5:9a:ca:63:5e:9a:69:44:ed:d2:c6:e6:e4:cb:12:8d:2c:88:
         c4:11:2e:dd:c3:a6:b6:4d:4f:f3:8b:df:23:8a:ce:b0:da:cd:
         7b:45:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:52 2025 by rpki-client on console-fra.rpki-client.org