Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          wjemNHuy/gZCDSGiwO+8LlhigjFyMKJWYEvjipnAzrk=
Subject key identifier:   5C:D1:A0:16:8C:9C:0E:31:05:35:8F:B1:2E:B9:A3:A1:DC:8F:01:EF
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       01901CA17DAE84F4EF0746507733C1AB9C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 16:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:03 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: uMlq714s10gTPcdYpzq14dONk7zZyPsjOYYinl0D3FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:7d:ae:84:f4:ef:07:46:50:77:33:c1:ab:9c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Jun 15 16:01:03 2024 GMT
            Not After : Jun 16 16:01:03 2024 GMT
        Subject: CN=5cd1a0168c9c0e3105358fb12eb9a3a1dc8f01ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:d5:06:31:c0:af:c9:89:d7:84:37:f0:29:
                    3b:d5:5d:b0:6e:9d:7c:d5:db:9e:bb:5d:a4:a7:72:
                    45:2f:23:4b:96:c8:1a:53:ec:cd:a0:8c:39:6c:d2:
                    4b:4b:6f:21:40:3d:4d:8b:09:54:f7:40:02:b5:4e:
                    ed:a3:d4:c3:d7:6c:83:6b:65:16:ab:dc:f9:bf:26:
                    96:4e:5b:05:8c:e5:88:69:85:66:34:16:ff:c0:d0:
                    a7:bf:45:91:0e:57:3a:34:63:75:9d:3a:73:cb:58:
                    0c:d8:2d:6a:1d:38:7b:3d:d5:54:7f:95:db:d8:29:
                    4f:9e:8b:a1:c4:34:f6:fe:17:24:50:5b:b7:99:29:
                    a6:ab:73:03:2b:be:59:63:54:56:07:7f:6b:46:1b:
                    29:d0:62:df:96:01:75:13:57:60:9a:ec:cb:71:d0:
                    9f:e0:25:b4:ad:11:e4:f1:7d:0a:a2:3c:b7:84:3e:
                    66:8f:56:5d:4e:ae:9f:3e:7c:17:95:94:1f:a3:49:
                    96:e4:23:f0:53:a2:dc:e8:e0:18:e4:97:65:50:61:
                    36:8f:6d:e1:5e:7c:84:75:3d:57:af:e5:0b:52:b4:
                    52:60:a6:c6:a8:bd:34:1b:0f:da:03:00:65:43:5a:
                    00:b8:6e:e3:e1:f4:37:be:89:58:1d:90:00:e4:bb:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:A0:16:8C:9C:0E:31:05:35:8F:B1:2E:B9:A3:A1:DC:8F:01:EF
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:71:1c:2e:4b:fe:df:ae:b0:f7:62:74:44:40:7e:55:3c:
         d5:62:db:d7:7f:6c:84:68:31:00:c9:f3:ca:88:2b:e8:0c:55:
         cf:b2:79:35:e8:c4:2a:86:25:94:70:f6:20:fc:f3:53:e0:86:
         56:17:88:d2:14:0d:28:dd:e4:48:02:e8:37:5b:31:7d:37:4f:
         06:93:2b:a5:75:a4:de:cc:77:15:38:37:16:8a:4d:93:8a:4f:
         ed:50:f7:39:66:43:fc:2f:45:64:c4:02:91:a5:72:da:ff:02:
         d3:d2:81:85:42:07:a4:53:2b:b3:43:b5:d8:89:cd:94:4c:c7:
         14:ce:98:bd:1c:79:e4:ea:59:aa:49:ce:3c:85:4a:37:45:8d:
         8d:15:2e:25:91:3d:81:57:ae:8a:cc:9c:9c:eb:25:a1:f1:54:
         3e:d7:29:9c:62:3f:9a:19:38:92:49:9e:58:2d:66:03:28:7b:
         d8:17:dd:1b:38:78:07:71:44:5c:d0:8c:14:5e:bb:d0:cf:08:
         fd:a8:fa:4c:0a:d9:ea:41:20:00:34:dc:ad:7a:57:78:dc:e3:
         66:8e:7b:25:81:95:f3:f5:10:26:fa:5f:f6:50:52:ed:2c:27:
         9a:33:36:da:09:2a:cc:ac:39:93:e2:6d:ad:ab:b2:10:fb:34:
         03:3a:76:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoX2uhPTvB0ZQdzPBq5wuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWE1MWY0NWMwY2I2Mzc5MTQyMGQwOTQzYzI4MzUxZDFi
YmJkMGEwHhcNMjQwNjE1MTYwMTAzWhcNMjQwNjE2MTYwMTAzWjAzMTEwLwYDVQQD
Eyg1Y2QxYTAxNjhjOWMwZTMxMDUzNThmYjEyZWI5YTNhMWRjOGYwMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDVBjHAr8mJ14Q38Ck71V2wbp18
1dueu12kp3JFLyNLlsgaU+zNoIw5bNJLS28hQD1NiwlU90ACtU7to9TD12yDa2UW
q9z5vyaWTlsFjOWIaYVmNBb/wNCnv0WRDlc6NGN1nTpzy1gM2C1qHTh7PdVUf5Xb
2ClPnouhxDT2/hckUFu3mSmmq3MDK75ZY1RWB39rRhsp0GLflgF1E1dgmuzLcdCf
4CW0rRHk8X0Kojy3hD5mj1ZdTq6fPnwXlZQfo0mW5CPwU6Lc6OAY5JdlUGE2j23h
XnyEdT1Xr+ULUrRSYKbGqL00Gw/aAwBlQ1oAuG7j4fQ3volYHZAA5LtztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzRoBaMnA4xBTWPsS65o6HcjwHvMB8GA1UdIwQY
MBaAFFlaUfRcDLY3kUINCUPCg1HRu70KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYt
YWFmYWFlYWVkOGJiLzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYtYWFmYWFlYWVkOGJi
LzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy5xHC5L
/t+usPdidERAflU81WLb139shGgxAMnzyogr6AxVz7J5NejEKoYllHD2IPzzU+CG
VheI0hQNKN3kSALoN1sxfTdPBpMrpXWk3sx3FTg3FopNk4pP7VD3OWZD/C9FZMQC
kaVy2v8C09KBhUIHpFMrs0O12InNlEzHFM6YvRx55OpZqknOPIVKN0WNjRUuJZE9
gVeuisycnOslofFUPtcpnGI/mhk4kkmeWC1mAyh72BfdGzh4B3FEXNCMFF670M8I
/aj6TArZ6kEgADTcrXpXeNzjZo57JYGV8/UQJvpf9lBS7SwnmjM22gkqzKw5k+Jt
rauyEPs0Azp2gA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:29:28 2024 by rpki-client on console-ams.rpki-client.org