Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File:                     WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier:          mj2i0peGo+WC7cjuqh3hokCQqXElCX6bkhkoWXRrcQ4=
Subject key identifier:   6B:39:1F:18:52:32:AD:39:5E:44:00:89:70:A2:88:BE:F5:F9:62:A9
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer:       /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial:       01901CD804536001E456F08FD1ADB772D83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number:          0F25
Signing time:             Sat 15 Jun 2024 17:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:36 +0000
Files and hashes:         1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: 88EpnYai5+Pj0UHTUsoaJJfABsN2r/J4n1hAv6z0ekw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:04:53:60:01:e4:56:f0:8f:d1:ad:b7:72:d8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
        Validity
            Not Before: Jun 15 17:00:36 2024 GMT
            Not After : Jun 16 17:00:36 2024 GMT
        Subject: CN=6b391f185232ad395e44008970a288bef5f962a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:70:af:fe:2d:6f:81:d2:16:1f:72:65:22:
                    fb:37:df:ce:75:7f:56:3e:6a:d7:35:4b:37:3a:7b:
                    8c:e6:c7:24:ef:6d:7d:73:ea:34:c4:c2:33:9a:6d:
                    19:fb:9e:b3:8a:05:72:7e:21:91:99:1f:88:34:b9:
                    19:2f:2f:8e:0a:03:9f:a3:5f:53:95:04:b0:78:44:
                    3b:45:3a:54:7a:1e:69:d6:54:e5:56:7d:1a:da:c5:
                    84:ef:1d:1a:30:d4:db:60:ac:63:49:6f:d5:e1:b8:
                    30:fb:cc:42:6f:ea:1a:0c:a9:36:77:ba:7b:fb:81:
                    03:af:10:f8:95:88:7f:fa:86:6b:f1:b7:d3:50:ed:
                    9f:19:80:53:b4:d2:4b:14:6e:f0:af:a5:b4:b1:62:
                    fd:41:f5:2a:c0:ac:a7:2b:f2:fb:ea:d6:67:de:ee:
                    87:90:84:ca:94:31:48:d7:6f:b8:7f:05:54:ef:d0:
                    0a:da:1f:23:bc:fc:3c:39:12:f0:3a:db:31:5d:e4:
                    68:22:c3:dd:56:c8:3e:8e:b9:ca:fd:36:9f:bc:ee:
                    7b:be:ac:a3:43:cb:44:c5:f8:a0:00:08:fc:c0:a0:
                    12:25:82:3a:67:2c:61:e2:d1:5a:b1:e6:38:87:c8:
                    d8:7e:0a:27:d6:59:6a:59:dc:c9:d2:f1:cf:dd:09:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:1F:18:52:32:AD:39:5E:44:00:89:70:A2:88:BE:F5:F9:62:A9
            X509v3 Authority Key Identifier:
                keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:9e:0c:f2:1f:ee:67:c6:d5:f6:73:03:e5:e5:e6:ae:b3:99:
         a7:91:3a:63:5b:d4:d7:f5:51:8c:59:c3:3c:24:b7:45:fd:89:
         77:5e:a5:e8:67:41:c7:e1:53:7a:ce:6b:93:31:b2:05:ed:b4:
         c4:fc:a2:7a:72:37:d3:c4:c3:f6:b1:cd:3d:1f:61:af:7b:a6:
         2b:6b:bd:08:8e:fc:00:68:ef:c5:6e:4f:7a:91:f7:94:05:3b:
         9b:2f:4a:98:9c:87:27:3d:e8:9b:a8:9a:e5:21:e2:90:fa:4b:
         02:9b:74:93:ef:62:76:77:67:99:91:cc:7e:d7:65:d8:8b:c0:
         7f:15:23:84:aa:ff:e4:90:51:f2:fa:90:71:f2:ef:68:a6:f0:
         b5:52:83:df:07:f2:56:df:91:1d:f4:d0:c7:29:6a:58:94:cd:
         03:e5:ee:75:27:37:3b:2c:4b:30:ae:93:7b:67:4a:64:f2:84:
         f4:ff:6a:6e:27:0d:20:f7:16:53:de:1e:99:74:73:a8:ea:aa:
         21:f8:0d:24:b9:84:49:27:26:ce:d3:bf:b4:26:2f:c2:e1:21:
         ee:f2:a3:1b:36:0c:1e:58:35:c3:aa:cf:e3:bf:c8:e5:35:64:
         95:15:b2:66:6f:f3:c4:ff:8f:4d:14:2b:9b:fe:e7:ca:54:49:
         99:f2:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:16:47 2024 by rpki-client on console-ams.rpki-client.org