Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          CqkBnFatyqq9PYx753YQOVpdnXFUXk+J8Jseiz1gpew=
Subject key identifier:   5D:CE:34:A5:26:AA:E8:C9:D1:C7:B0:54:8E:8E:9B:0F:B5:49:3B:F5
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       01901EC66FA11F1C402C53C45355E4B82BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 02:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:39 +0000
Files and hashes:         1: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: xmklMmvqjLUkESv1/85EXHZgMPg3mxZ1CRZC2nG3rEg=)
                          2: iRk6QrKBCVrFoRZfuf8icR2GUZ8.roa (hash: PXPhvmAzmAp7edcSCK4tHlVtrRZd6oUbk6BwWn3AvKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:6f:a1:1f:1c:40:2c:53:c4:53:55:e4:b8:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Jun 16 02:00:39 2024 GMT
            Not After : Jun 17 02:00:39 2024 GMT
        Subject: CN=5dce34a526aae8c9d1c7b0548e8e9b0fb5493bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:0c:1a:da:35:33:ee:04:1a:95:1c:04:5c:
                    19:be:4e:a7:e5:2c:cd:ad:ec:e5:16:c0:0b:6b:00:
                    97:fd:53:7d:3d:af:72:c8:45:40:58:f5:f8:f6:9c:
                    a6:1b:c7:15:c9:6a:4f:96:cd:8a:a5:0f:6b:bc:c2:
                    fe:25:af:a0:1a:74:a5:5c:e6:c6:34:d9:3c:8f:7b:
                    0e:c5:aa:a7:48:8e:27:99:a3:01:bb:39:6b:e6:c6:
                    ba:5d:5f:af:d7:72:dc:df:9c:c5:74:21:0e:fc:ab:
                    3f:e3:f0:6c:3e:84:3a:54:50:d2:73:b5:27:8b:c4:
                    22:2a:74:56:ec:4c:e6:07:9f:58:9e:79:4e:13:63:
                    47:72:cf:9e:66:47:9e:ee:8f:b2:0d:b3:a9:e4:a7:
                    a5:ae:4e:dd:eb:04:e9:d6:76:2d:4c:b9:72:2e:6e:
                    07:e2:ea:15:47:98:83:cd:fc:a7:b3:2b:09:24:ad:
                    0f:f0:62:ca:b9:06:fe:5a:1f:72:4a:3c:22:29:f6:
                    64:20:6c:eb:c9:63:68:5a:f0:a2:3d:6f:03:05:56:
                    f4:6f:eb:a4:50:1b:2e:48:e0:45:e1:89:c2:1d:b8:
                    77:3c:75:9a:49:30:06:1d:67:0f:a8:18:a0:d1:3f:
                    dc:6b:15:0a:87:15:27:ca:56:5b:db:de:08:3a:6e:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:34:A5:26:AA:E8:C9:D1:C7:B0:54:8E:8E:9B:0F:B5:49:3B:F5
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6f:96:c4:6d:0b:77:bf:18:c2:35:b0:23:ee:e9:6c:72:69:
         d2:37:bb:8f:6c:98:5a:d0:93:22:4c:1e:f0:68:36:d9:c3:f3:
         ef:d3:c4:30:af:82:dd:85:1e:07:cc:e2:ff:69:72:5b:83:f2:
         bb:0c:13:97:f5:62:e6:ac:f2:f7:54:48:fb:3f:e0:ae:5a:04:
         a9:c5:9c:98:73:a5:3c:65:5e:52:60:a5:d2:41:a3:f5:67:7c:
         c4:cf:47:ab:bf:7c:bf:31:b2:99:48:41:7a:87:4a:b8:da:13:
         69:02:81:27:10:6f:30:e1:59:23:c6:88:13:89:28:df:2e:1f:
         be:3f:75:15:94:f3:95:23:09:35:b3:b2:20:3f:5a:d2:6b:56:
         d0:3a:cd:9f:09:b4:e1:67:01:d4:52:3d:ed:b6:46:a6:5b:ff:
         c1:dd:aa:b3:89:7f:d4:9c:91:88:21:be:7e:3a:85:2b:51:de:
         4a:10:54:8d:9e:f5:cb:c0:da:42:30:5f:89:c3:fb:48:27:58:
         ec:ad:69:e2:15:aa:e1:d8:cd:3c:dd:46:7b:a0:28:d7:83:a0:
         7b:88:89:99:88:6c:be:da:c2:63:75:a7:00:0f:16:42:c4:1d:
         3f:92:4f:bd:06:e6:c3:05:73:1e:60:fb:e2:63:22:f4:86:ec:
         60:f0:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:24 2024 by rpki-client on console-fra.rpki-client.org