Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File:                     X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier:          mFP6hlboIeuvg4UwhgMF49x0thoF1eAqA3MaKOWmRWU=
Subject key identifier:   43:B3:CB:A5:50:6D:38:92:E8:99:B7:36:3F:A5:8C:3F:C7:92:F5:8F
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer:       /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial:       01901F345BC165BACF2A873A761B9B437987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number:          0C91
Signing time:             Sun 16 Jun 2024 04:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:43 +0000
Files and hashes:         1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: pts58S41aNCksTiJ38FLgC5OkIKjVdeREZBB6AJKa40=)
                          2: i3DwN6lJy8EPnTNtTaSWnpQMZXY.roa (hash: ySuXNuaplT8iRj4swZT+lEoDRhD6P1DW5EJ5EiRiXn8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:5b:c1:65:ba:cf:2a:87:3a:76:1b:9b:43:79:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
        Validity
            Not Before: Jun 16 04:00:43 2024 GMT
            Not After : Jun 17 04:00:43 2024 GMT
        Subject: CN=43b3cba5506d3892e899b7363fa58c3fc792f58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:63:ee:78:9b:17:a3:12:de:28:07:9e:20:
                    c4:56:32:6e:07:9f:bd:eb:af:77:92:67:23:b9:e0:
                    6d:98:8a:9a:87:a4:41:2a:58:41:72:0d:4d:56:47:
                    4d:6e:a8:cf:5c:e4:e0:57:f5:6b:9c:1d:81:e9:84:
                    9d:b4:5c:df:38:51:5a:eb:6f:73:4f:1b:b3:f7:53:
                    8a:08:89:36:e3:c8:5a:76:c0:03:11:38:58:39:25:
                    af:ca:57:ba:ca:81:a9:35:10:9d:9d:5f:4a:8a:c5:
                    8e:6d:2e:73:54:cd:49:77:24:11:90:0b:08:18:44:
                    8d:05:aa:77:f5:47:56:47:93:db:ab:db:36:df:2f:
                    d5:62:e4:34:ef:db:53:61:98:ea:3e:fc:9f:b3:cf:
                    8c:10:c2:71:be:c4:3b:4a:33:ec:67:20:29:4e:bb:
                    bf:36:05:1b:95:f9:3c:83:f9:db:25:e4:aa:41:20:
                    fd:04:87:1e:8b:84:f2:52:b2:bd:56:76:a8:55:e2:
                    02:0f:3b:79:e6:01:d4:9f:b0:e6:02:75:f9:b5:5b:
                    bf:5f:f6:b3:13:71:d0:c4:e7:e0:68:4f:d9:a1:28:
                    2c:7a:9d:1a:6d:ab:e6:ea:cc:18:97:d7:61:1c:2d:
                    0d:2a:1f:d4:7d:44:2f:59:73:a8:c0:5b:1c:e0:ae:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B3:CB:A5:50:6D:38:92:E8:99:B7:36:3F:A5:8C:3F:C7:92:F5:8F
            X509v3 Authority Key Identifier:
                keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:3f:23:36:f7:b8:0b:20:a0:71:54:d7:9d:43:6f:2c:eb:
         24:97:c5:05:e3:3d:1b:98:40:42:ca:7b:d0:db:24:42:91:cb:
         b4:72:f6:bb:e9:63:66:11:9a:b4:d9:61:c0:0d:13:a3:c7:d4:
         47:5a:ad:9f:7b:89:99:09:16:39:35:12:7a:ba:a3:90:5d:79:
         f2:52:cb:8f:9e:26:e0:ce:f2:85:c7:68:aa:80:8f:f0:47:cf:
         59:3b:df:7c:34:aa:77:18:4b:dc:da:f7:ad:1c:f1:c9:25:d7:
         b7:e8:70:19:17:62:21:0a:8f:a2:89:26:e8:87:da:0c:86:2e:
         d6:4b:5b:eb:c1:64:8b:8e:29:15:7f:04:ce:99:57:72:7d:3d:
         df:96:06:29:5a:ed:e4:88:15:5a:e0:d3:0a:9e:a3:38:66:b6:
         8a:b3:de:63:61:5b:e9:24:a8:07:f9:ba:02:dd:ca:ec:9f:8d:
         68:e8:46:06:dc:00:f0:21:fd:b1:96:48:67:05:91:b9:71:2a:
         d7:60:b3:af:1c:88:80:9b:30:4f:83:e3:0b:73:f4:f2:39:11:
         bf:07:e7:ea:76:b0:0b:ea:3d:2d:0f:41:c8:33:1e:3e:0c:9f:
         39:2e:78:a4:14:23:9b:6a:6a:ef:a4:50:fd:73:0a:66:aa:1e:
         77:3c:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:41 2024 by rpki-client on console-fra.rpki-client.org