Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File:                     WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier:          lHj83aZj0V8DGhqXRsZsLG744aqzUrZPgnp21Ezuut8=
Subject key identifier:   CA:BE:3E:DB:5B:8B:DF:28:9B:2E:06:1E:A5:63:D8:66:FE:FF:81:9B
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer:       /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial:       01901DED3FFE993CBB08186C9D199B76D571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number:          087C
Signing time:             Sat 15 Jun 2024 22:03:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:25 +0000
Files and hashes:         1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: TBJzUMnNapNHEs6I4t6nqpDz1GuHaWmrfskCrJhtkD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:3f:fe:99:3c:bb:08:18:6c:9d:19:9b:76:d5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
        Validity
            Not Before: Jun 15 22:03:25 2024 GMT
            Not After : Jun 16 22:03:25 2024 GMT
        Subject: CN=cabe3edb5b8bdf289b2e061ea563d866feff819b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:5d:9d:49:54:19:6b:e1:f0:03:3d:07:fc:
                    04:61:3b:36:ef:f4:00:b2:e8:38:d9:71:26:89:78:
                    0f:38:de:65:d2:5a:7a:2b:45:a3:d1:f8:b2:37:ef:
                    3f:90:7a:be:18:72:b2:4c:3b:ca:2c:a8:92:5e:14:
                    e8:cc:0f:d9:f9:53:76:79:7b:b8:70:bc:b4:d2:0f:
                    01:70:f3:88:c3:2b:91:6a:4a:ec:d2:d6:49:1c:89:
                    d0:d8:e2:f7:87:cf:07:0b:c1:ac:07:13:0d:cf:a5:
                    33:c5:05:9c:8a:1f:56:6c:60:cd:f0:59:fd:8a:78:
                    4b:d4:4d:44:96:56:e0:a3:87:a1:27:2f:8d:aa:37:
                    da:19:3d:01:7b:80:59:19:73:4a:be:51:0f:95:76:
                    b4:48:d9:d4:2e:27:d7:52:e7:0b:5a:96:87:5b:19:
                    59:a5:2c:00:40:41:f6:76:88:e9:c9:a8:a8:a5:ae:
                    be:b4:1d:55:50:5e:27:ad:f7:89:ca:60:e1:d0:cb:
                    35:24:2d:3e:2e:68:2b:70:a8:75:e3:43:a1:d1:bd:
                    58:2f:9e:84:74:de:ab:9e:00:89:30:9c:e9:1b:da:
                    4d:6b:ec:dd:61:d4:fe:ab:70:39:7d:91:77:f8:9b:
                    c8:3c:d2:9f:a0:88:f9:e7:bf:74:72:3d:02:76:5a:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:3E:DB:5B:8B:DF:28:9B:2E:06:1E:A5:63:D8:66:FE:FF:81:9B
            X509v3 Authority Key Identifier:
                keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:61:b4:59:fe:22:cb:b5:53:28:f2:69:f3:8d:99:69:91:
         c1:9d:cc:2c:d1:f3:e1:56:50:ea:7b:f3:1d:6b:44:f6:5a:63:
         10:71:82:c3:a8:3d:ee:a3:25:20:e2:b2:75:cc:93:13:f9:85:
         fb:ac:f5:15:d4:7f:16:54:61:4b:c3:4f:f0:4d:e3:06:54:b5:
         52:0c:a3:be:7f:de:07:82:09:25:50:84:25:31:2c:5b:e6:ee:
         42:e7:f3:7b:50:ec:6d:f2:69:f3:84:b2:5c:7e:94:73:0a:e6:
         5a:82:8b:8b:01:6b:22:21:dc:ff:4e:41:f0:a5:31:5b:f0:90:
         15:23:62:40:19:62:80:98:53:20:91:d1:25:21:0f:94:ad:9a:
         4a:07:cc:7a:b5:e2:ff:9e:01:a0:a1:6f:74:31:eb:a4:48:48:
         c3:45:cc:2c:9b:57:43:98:a3:4b:a2:2c:29:7a:35:0f:e3:3a:
         19:ab:8c:71:80:03:c9:b6:a1:71:72:83:59:68:80:2b:80:c7:
         35:a9:90:0d:06:e8:dd:1b:83:6f:0a:13:fb:67:f1:a8:8e:72:
         06:54:c5:bd:87:f6:25:dd:a5:25:40:af:d9:54:2b:9f:19:ae:
         28:42:79:94:1c:36:fa:1a:a3:42:8d:b1:39:ce:8d:93:1a:f6:
         70:7f:7f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7T/+mTy7CBhsnRmbdtVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ODhmMDg1NWM0NDc4ZDFiOTRhYjhhOGQ2ZDlkOWM1MTFm
MzE0MjYwHhcNMjQwNjE1MjIwMzI1WhcNMjQwNjE2MjIwMzI1WjAzMTEwLwYDVQQD
EyhjYWJlM2VkYjViOGJkZjI4OWIyZTA2MWVhNTYzZDg2NmZlZmY4MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2hdnUlUGWvh8AM9B/wEYTs27/QA
sug42XEmiXgPON5l0lp6K0Wj0fiyN+8/kHq+GHKyTDvKLKiSXhTozA/Z+VN2eXu4
cLy00g8BcPOIwyuRakrs0tZJHInQ2OL3h88HC8GsBxMNz6UzxQWcih9WbGDN8Fn9
inhL1E1Ellbgo4ehJy+NqjfaGT0Be4BZGXNKvlEPlXa0SNnULifXUucLWpaHWxlZ
pSwAQEH2dojpyaiopa6+tB1VUF4nrfeJymDh0Ms1JC0+LmgrcKh140Oh0b1YL56E
dN6rngCJMJzpG9pNa+zdYdT+q3A5fZF3+JvIPNKfoIj55790cj0CdlqJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq+Pttbi98omy4GHqVj2Gb+/4GbMB8GA1UdIwQY
MBaAFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDkt
ODcxMjJiNTE0ZTY5LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDktODcxMjJiNTE0ZTY5
LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBZhtFn+
Isu1UyjyafONmWmRwZ3MLNHz4VZQ6nvzHWtE9lpjEHGCw6g97qMlIOKydcyTE/mF
+6z1FdR/FlRhS8NP8E3jBlS1Ugyjvn/eB4IJJVCEJTEsW+buQufze1DsbfJp84Sy
XH6UcwrmWoKLiwFrIiHc/05B8KUxW/CQFSNiQBligJhTIJHRJSEPlK2aSgfMerXi
/54BoKFvdDHrpEhIw0XMLJtXQ5ijS6IsKXo1D+M6GauMcYADybahcXKDWWiAK4DH
NamQDQbo3RuDbwoT+2fxqI5yBlTFvYf2Jd2lJUCv2VQrnxmuKEJ5lBw2+hqjQo2x
Oc6Nkxr2cH9/cQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:56 2024 by rpki-client on console-fra.rpki-client.org