Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          +CFAho/So5jf15atUDPv6+5SSJrhEkvei69REMnMK0g=
Subject key identifier:   46:4C:99:B0:D0:17:C4:CA:BD:95:5D:B7:31:B1:18:6D:13:F1:D8:BA
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       01901E591AD2275CADE9CACC145E2CB5599A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0851
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: WtzaAxKA7j+srRAV35vsMZD8UJpU7mtJKjlZ0alq4gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1a:d2:27:5c:ad:e9:ca:cc:14:5e:2c:b5:59:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=464c99b0d017c4cabd955db731b1186d13f1d8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:9f:f0:61:78:33:33:4c:fe:53:15:b1:7c:
                    89:31:31:a0:c3:df:5f:f3:80:d2:ca:fb:8a:32:35:
                    23:c4:28:41:e0:74:94:61:cb:93:a8:28:f9:67:1f:
                    00:7e:f0:8b:3c:27:91:19:03:41:34:7e:76:d1:05:
                    28:23:a8:de:b7:7f:e2:b1:e2:6a:cd:11:18:05:73:
                    00:2d:aa:db:05:e9:bf:d6:70:60:fd:ef:11:a3:24:
                    90:de:14:9a:1b:fb:8c:d5:40:5a:2d:cc:41:48:95:
                    a5:9b:51:25:f2:da:4f:07:3e:bb:3e:97:05:4a:9d:
                    c0:4a:79:e0:e2:2c:64:99:36:80:21:87:cc:cd:c6:
                    a0:46:ef:59:57:1f:45:98:06:c6:3d:e5:18:a4:72:
                    04:1d:31:ef:4b:a7:0b:c1:aa:8d:c3:da:7f:ce:e7:
                    ec:ee:59:8e:88:9d:ef:03:d5:2f:d3:a7:fc:19:49:
                    0e:12:fd:98:ab:5d:52:33:fa:c1:67:09:31:0a:34:
                    c4:0f:42:5c:81:a9:b0:38:fb:7c:2e:56:f7:9c:78:
                    3e:5c:32:3b:6a:b8:06:5c:91:e6:c8:e6:9d:34:6a:
                    95:2b:68:d5:18:59:ff:4c:a6:bb:a4:6f:24:44:ea:
                    25:81:4b:e7:b4:72:77:65:7f:f4:0f:cf:7d:56:ad:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:99:B0:D0:17:C4:CA:BD:95:5D:B7:31:B1:18:6D:13:F1:D8:BA
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:8f:22:e8:20:4b:70:a6:5c:03:12:88:53:6c:f1:63:7f:91:
         58:6f:db:fe:7f:33:b9:ed:8d:52:43:88:83:d3:9c:d5:a6:20:
         e7:5b:58:46:d3:72:9c:ea:72:42:58:38:e1:c7:b7:11:6b:a2:
         5e:d5:55:29:78:cd:80:b1:e7:16:b3:bd:97:5c:d0:c9:ed:22:
         2d:69:57:44:2e:f2:e6:ab:35:16:c0:3d:7e:9a:79:7a:f6:c4:
         b6:75:78:1c:46:35:ed:22:c9:3a:6e:0a:e6:2d:3e:28:7e:96:
         5f:05:61:3b:a1:f1:c6:73:74:78:64:18:2b:59:09:5a:02:d5:
         79:08:67:71:8a:5e:68:de:62:71:cd:b6:ba:04:fd:5b:83:20:
         14:79:4d:2d:22:79:27:a3:af:85:cc:96:ca:2e:db:cc:fd:1c:
         9a:2b:00:20:bc:3b:2d:57:c5:b5:ce:e6:61:31:ac:b2:6d:0e:
         5d:0b:f2:97:e1:3f:2d:35:c0:25:2b:6b:c7:77:23:a2:65:55:
         db:1c:8e:e4:02:2e:ed:06:40:37:9b:83:5f:a5:b2:f5:48:2f:
         8d:cd:bf:dd:5b:a6:dd:75:3a:3b:c2:6e:9f:c9:3b:02:a2:ab:
         b4:1a:8f:db:47:0d:c3:b2:59:1a:92:ce:2b:b3:bd:18:ce:4b:
         b6:e4:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:50 2024 by rpki-client on console-fra.rpki-client.org