Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File:                     W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier:          ogf2X2mUs9L1+eR0ayF2X8p+jwWKAsCZ7uEMkQiwiWo=
Subject key identifier:   C3:DE:C9:63:A0:27:DE:2D:F9:CC:02:C1:80:81:1A:4C:AF:FA:54:15
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer:       /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial:       01901D45EBC2DBCDBBC6A7DA60F1EB5034FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 19:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:39 +0000
Files and hashes:         1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: DVLlSxUi7R2YXkzjfISqBS0HNc1J3F1nxiB2fzD01Jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:eb:c2:db:cd:bb:c6:a7:da:60:f1:eb:50:34:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
        Validity
            Not Before: Jun 15 19:00:39 2024 GMT
            Not After : Jun 16 19:00:39 2024 GMT
        Subject: CN=c3dec963a027de2df9cc02c180811a4caffa5415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:e1:20:62:d3:5c:03:21:5f:63:9d:a4:bb:
                    b6:96:e4:65:72:49:2a:b5:e4:d6:89:c1:85:c9:15:
                    8c:9a:ae:01:6b:2f:4b:43:5f:c3:49:d0:2b:b8:8c:
                    21:86:d2:36:d5:06:7a:dc:b0:bd:7a:72:cd:47:61:
                    81:fc:4d:0b:b6:6d:fe:6d:97:c4:69:32:72:c9:bd:
                    11:f8:f0:3b:ae:42:1b:15:51:38:75:e2:ca:a4:4b:
                    c3:3e:bb:0a:c4:ba:19:dc:66:31:1a:bc:b5:d4:6e:
                    f3:e3:ef:c3:61:51:26:86:c8:8e:a0:b9:2a:60:d9:
                    34:df:35:ce:8b:0a:5c:dc:d6:7f:06:ec:35:3e:21:
                    b5:51:60:d0:88:53:d7:95:2e:41:9b:83:45:f6:d0:
                    d6:7d:c3:f3:64:6a:c0:3f:d2:1b:92:02:4f:87:9a:
                    04:fe:48:2e:5e:f4:27:07:46:72:f1:ad:e8:1d:8d:
                    96:63:1c:8f:a4:e0:51:c9:3a:79:b5:f2:ca:1e:21:
                    a1:af:ad:24:a6:a0:db:b6:ab:df:29:d5:c2:44:21:
                    3c:56:b9:f3:40:38:22:ff:d8:31:75:a2:a8:cc:fe:
                    31:cb:c0:54:38:7e:dc:32:48:93:f2:5e:03:ee:9e:
                    06:20:9a:92:26:d2:b2:6b:c2:dc:f4:9c:6e:11:56:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DE:C9:63:A0:27:DE:2D:F9:CC:02:C1:80:81:1A:4C:AF:FA:54:15
            X509v3 Authority Key Identifier:
                keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:67:2a:ae:fc:62:8e:fd:c5:af:6b:19:c6:b2:df:8d:55:
         a9:e6:6e:b8:31:5f:8a:82:7b:5a:a7:f4:31:9a:e7:e6:64:66:
         c2:76:a2:18:b3:3f:54:fe:ad:44:cf:64:1c:ea:c4:39:1e:42:
         d3:97:29:79:fe:30:af:60:ae:47:73:c7:4f:76:6e:b4:ac:c1:
         2b:7a:4d:1f:7d:e3:24:b3:a4:da:45:a0:22:0a:57:f6:43:8e:
         58:a1:27:2e:e9:5e:21:9b:ba:cf:96:50:e7:f7:bf:e0:73:d8:
         ca:68:bd:ad:c5:d7:2c:f9:87:98:78:38:7b:50:32:f1:e5:52:
         7b:cb:af:ab:56:15:1c:f3:ab:39:d9:48:5a:16:85:f7:80:2a:
         c4:45:ac:63:06:59:f9:7e:17:a4:1a:e8:8c:b9:b0:14:06:a7:
         77:04:8b:0f:69:77:59:c6:72:31:89:1f:81:69:64:4a:ff:dc:
         b6:82:af:75:b6:06:92:c8:14:01:a5:0c:60:7b:ad:13:0a:94:
         98:4e:17:4a:20:71:b8:87:e2:8a:34:e5:94:3a:ae:ef:18:3f:
         09:2e:63:fc:7c:d5:3b:d1:9e:29:e6:8f:d7:67:a9:9e:98:57:
         c4:6d:78:17:6f:d2:07:21:63:0b:16:d2:b8:95:69:0a:fb:4b:
         d0:cc:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:11:34 2024 by rpki-client on console-ams.rpki-client.org