Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File:                     W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier:          XKx8sLRy9zHK9pOdX7gkTmHwB6sT82nID9Fi+Q5+SJ4=
Subject key identifier:   B6:85:A6:23:01:1E:40:6F:F2:F4:70:B6:03:5E:75:58:27:EA:39:C5
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer:       /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial:       01901E58A675C4DF8519A09F5E496FE1644F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number:          0A8A
Signing time:             Sun 16 Jun 2024 00:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:44 +0000
Files and hashes:         1: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: UhMgBFhDMq2naUpizgFmUULtMgorjsSnzyHE1k12xwg=)
                          2: lx_0h9VEp824IgchbfXwwU993HY.roa (hash: tH/EbeD4SJPM0+FLHl3UA5Ub7/tz10ipgZ+yNHKhhT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a6:75:c4:df:85:19:a0:9f:5e:49:6f:e1:64:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
        Validity
            Not Before: Jun 16 00:00:44 2024 GMT
            Not After : Jun 17 00:00:44 2024 GMT
        Subject: CN=b685a623011e406ff2f470b6035e755827ea39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:53:6c:c4:0f:16:ad:5a:35:19:93:2f:e0:
                    fc:5a:62:a2:fe:e0:11:5c:81:56:db:db:12:6a:75:
                    07:55:80:f4:f1:6b:16:d7:17:37:6f:bf:d8:41:35:
                    e1:ce:d7:03:ad:47:15:f9:67:bc:29:98:4c:70:c7:
                    95:15:af:3e:c0:9a:36:da:0c:5c:b1:01:61:92:14:
                    bf:8b:4a:32:68:bf:70:d4:41:26:a9:95:98:09:a9:
                    c1:d0:0d:ae:bf:c4:e4:cb:1a:7c:ab:7d:2c:ab:cc:
                    e8:7a:b8:35:46:2e:ea:f7:da:bd:88:87:9a:69:b2:
                    3a:34:56:d2:22:5c:1b:51:46:f4:fe:89:87:40:80:
                    0a:d4:32:7d:ca:6e:94:80:9c:f9:b1:b8:45:66:e5:
                    1f:a3:55:b0:9b:1c:58:40:4a:30:a9:c1:eb:13:90:
                    3d:f1:a6:57:74:03:a1:dd:42:a3:c6:07:51:79:a6:
                    79:6d:1f:25:e4:1e:89:7d:70:06:30:28:6c:36:d4:
                    86:07:9f:d3:9c:31:c0:7e:77:a6:62:12:b0:b4:65:
                    93:33:90:9e:f1:eb:41:87:be:ee:b4:86:3d:4d:1e:
                    98:c7:72:16:8b:65:4b:23:af:31:61:3a:d9:66:f1:
                    0d:27:c6:c5:fe:b5:65:47:62:39:c9:0f:21:3c:6b:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:A6:23:01:1E:40:6F:F2:F4:70:B6:03:5E:75:58:27:EA:39:C5
            X509v3 Authority Key Identifier:
                keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:f1:a2:87:71:69:6b:e6:3e:b9:a4:e7:74:86:7f:f8:1a:
         f8:df:37:f8:0a:e0:29:d4:dc:ec:2f:f3:f5:12:b4:c2:9c:c4:
         48:a4:a6:f3:98:21:fc:08:93:a3:6e:46:54:4d:fc:db:16:b9:
         0d:0d:05:66:1e:03:88:4e:9f:89:d7:e2:98:bf:3c:bc:1c:9d:
         84:97:88:fb:7d:9c:5a:62:25:59:cc:0e:fa:5e:54:ba:68:d2:
         ca:ae:66:f2:d6:36:85:3e:d9:70:41:d1:9d:8e:c0:b7:03:20:
         37:d8:06:02:94:11:7b:b0:4f:bb:33:f8:9d:1c:26:29:44:70:
         d5:fe:73:3f:15:e0:37:4d:21:b0:70:1d:7c:6f:70:69:0d:30:
         6e:98:5e:33:01:32:cd:75:77:83:ed:ff:ec:07:8b:1e:3f:11:
         03:02:44:d9:74:72:0b:0a:07:76:c9:15:de:59:85:c6:aa:99:
         00:3e:fa:5c:29:86:04:cc:e8:66:e5:4f:ba:50:17:73:9c:4f:
         92:9a:d3:e4:23:81:83:90:99:4c:b8:f0:83:ba:74:df:87:dd:
         c4:b4:8e:b2:51:79:18:b7:84:71:d4:c5:d2:57:15:2c:4e:ce:
         83:62:92:8d:d7:94:dd:cc:6e:69:ea:30:e3:f9:f6:6e:44:d5:
         77:a7:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:10 2024 by rpki-client on console-fra.rpki-client.org