Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File:                     WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier:          23huZ7QddvebLAkpyxrdKKkdXbK8ijZ3+o3i16W2gOE=
Subject key identifier:   5D:89:1F:C7:F3:73:E7:02:F6:7E:4B:73:93:04:1D:40:1F:6C:C3:42
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer:       /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial:       0190459D48BCFB92D4936F92480B0FB42603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number:          0509
Signing time:             Sun 23 Jun 2024 15:00:53 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:53 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:53 +0000
Files and hashes:         1: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: xjCDOuxYPfijQvzzI0hPc70K/t4HOpdn5g9jBdd9E88=)
                          2: e8keRH_fZsFbx29y6vNPeDnTKk8.roa (hash: LTKeB9qOYlGSkChRjVpoZfCsHhyZXmMAd2Oo/BNtE2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:48:bc:fb:92:d4:93:6f:92:48:0b:0f:b4:26:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
        Validity
            Not Before: Jun 23 15:00:53 2024 GMT
            Not After : Jun 24 15:00:53 2024 GMT
        Subject: CN=5d891fc7f373e702f67e4b7393041d401f6cc342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:e0:8c:e7:9a:02:3c:8d:1b:99:22:bf:5e:
                    e6:e7:10:a8:d1:bf:ab:36:27:c0:7e:e6:96:58:bc:
                    f7:d5:25:66:74:b1:46:84:3d:98:e9:c5:01:4f:fb:
                    db:79:72:b5:9a:9b:8e:13:28:cc:25:16:00:c7:ec:
                    33:9a:98:4f:f2:18:5c:60:2d:4c:5f:51:4f:64:cb:
                    0e:62:81:b0:c7:d1:5a:08:af:da:99:2a:37:c0:09:
                    ac:37:5b:96:a4:6e:28:8f:9d:63:c5:b7:7f:28:25:
                    2b:b2:c7:54:56:33:bf:ce:75:fd:a4:87:2e:43:21:
                    2e:36:72:8d:dc:95:3a:6f:0b:74:c2:72:10:6a:95:
                    51:53:2e:fa:19:d1:9e:46:a6:4a:16:88:85:c5:32:
                    cf:04:a4:f6:b0:4a:ef:3c:7a:e3:d1:f2:4f:76:1d:
                    ee:c8:51:6f:b2:08:f2:cf:55:e6:7d:60:bc:d0:b4:
                    be:04:85:58:68:54:1d:be:f4:21:93:81:62:b6:bd:
                    9a:94:ba:6a:fb:f1:f4:34:fe:46:2d:73:cc:fa:bc:
                    fa:87:7e:3b:72:60:ba:5e:28:d4:ea:71:79:b1:e9:
                    fd:0c:40:29:61:fd:43:98:d5:f2:8c:71:c8:26:69:
                    0a:f4:13:97:87:38:5b:9c:2e:98:ef:04:4f:e2:a9:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:1F:C7:F3:73:E7:02:F6:7E:4B:73:93:04:1D:40:1F:6C:C3:42
            X509v3 Authority Key Identifier:
                keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:52:c8:3f:6f:1c:64:0b:15:7b:48:da:aa:82:23:ab:49:3c:
         12:9d:7d:30:c9:b7:14:13:b1:41:eb:3d:98:77:2b:b7:bb:d5:
         76:f2:ea:70:1f:a6:e0:75:35:90:3a:af:a6:b3:9d:08:39:8e:
         c9:19:e9:be:8b:79:c5:d7:23:24:42:01:73:b4:c2:70:e1:7b:
         50:b7:13:db:c3:04:2b:75:8e:81:94:6a:56:b5:8e:b3:8f:60:
         4b:1c:e3:4e:15:a4:2f:28:27:ae:23:7c:4a:3c:ff:b4:5f:c9:
         cc:4f:45:60:ce:fa:80:92:8f:76:3f:fe:5b:69:6f:05:b8:9d:
         16:ab:42:d9:48:be:ce:67:7c:2f:6f:87:46:16:ca:2c:dd:37:
         64:ce:a5:24:d1:89:5b:b9:0c:52:70:1f:58:f4:0b:43:94:81:
         7e:dd:45:bc:38:4c:6e:a5:9e:95:31:02:12:54:28:e9:3b:53:
         d5:22:59:94:15:19:b9:6d:b5:3b:37:e6:05:dd:c4:97:62:0a:
         b1:4b:08:ac:7c:6d:ee:a3:e4:93:b7:d2:d2:b7:83:e4:eb:47:
         d6:e7:8a:90:45:a9:91:62:0e:6f:92:51:d6:79:e5:c6:31:34:
         bd:04:93:79:d8:78:ed:99:da:13:ab:ca:af:0c:bf:96:1d:f9:
         77:75:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:01 2024 by rpki-client on console-ams.rpki-client.org