Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
File:                     WX_cXffB0EeLTfoykI2f-VgYrHg.mft (raw, json)
Hash identifier:          GN1eMAGBHvBWSxSAXJc0iF+UlGKmb8Gm9vAAPlWj51U=
Subject key identifier:   8F:82:6F:41:52:E9:CB:F2:5B:3A:01:27:2F:71:93:89:92:60:4E:3B
Authority key identifier: 59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78
Certificate issuer:       /CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
Certificate serial:       019043E5B22266362C8662BDA433972A4124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
Manifest number:          0511
Signing time:             Sun 23 Jun 2024 07:00:45 +0000
Manifest this update:     Sun 23 Jun 2024 07:00:45 +0000
Manifest next update:     Mon 24 Jun 2024 07:00:45 +0000
Files and hashes:         1: WX_cXffB0EeLTfoykI2f-VgYrHg.crl (hash: 0/t80e+q3RmR6cyqb78fWUMgZ2P1gBTRsSg/ieue5Uo=)
                          2: _ifwGi4zMaSxu8ywRwQOqAx1A_w.roa (hash: xnLGll/v15O1cqSaWGEEMJahrvZNwpBk7atYbxcNKFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:e5:b2:22:66:36:2c:86:62:bd:a4:33:97:2a:41:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597fdc5df7c1d0478b4dfa32908d9ff95818ac78
        Validity
            Not Before: Jun 23 07:00:45 2024 GMT
            Not After : Jun 24 07:00:45 2024 GMT
        Subject: CN=8f826f4152e9cbf25b3a01272f71938992604e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:75:eb:39:df:14:1d:bc:d6:ee:f8:c2:b8:
                    87:44:5e:f8:a5:8b:b1:4c:a0:19:96:9f:4f:4d:18:
                    c8:a7:90:aa:ba:98:61:89:9b:54:17:5f:7f:0c:2c:
                    e9:90:b7:87:37:41:60:5d:80:3e:9d:a2:f6:22:21:
                    14:a8:f2:6b:d4:04:44:34:84:4e:cc:34:08:60:47:
                    2c:4a:c3:c1:01:9a:f8:49:7a:fb:61:eb:6e:1c:3e:
                    57:ea:70:45:8a:87:11:8e:a1:79:16:a3:d1:f9:f4:
                    46:39:4c:12:fd:ac:69:8a:71:ce:4d:92:ae:ac:e0:
                    9e:8f:ac:c9:69:5e:23:bf:9b:34:61:72:6f:15:b7:
                    bc:b7:2c:4c:8f:4d:ab:3b:dc:1b:be:6d:d9:1f:e9:
                    7d:79:36:8a:dc:c9:11:06:00:0e:ac:64:a2:97:b8:
                    67:01:26:03:6f:0d:70:ab:2d:29:08:a2:0a:d2:76:
                    6c:5f:bc:1e:35:a2:45:f5:76:bf:cf:b9:7b:85:b2:
                    43:ef:f9:c8:51:25:20:c8:e4:c6:1f:74:c1:ca:1d:
                    bc:75:8a:a9:c7:91:36:2b:bd:7c:61:43:80:88:9d:
                    a6:fa:cc:78:c4:0e:88:e9:28:f3:0b:b9:24:d3:b4:
                    1f:02:ce:2e:b2:f7:79:24:5b:32:df:62:69:ce:89:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:6F:41:52:E9:CB:F2:5B:3A:01:27:2F:71:93:89:92:60:4E:3B
            X509v3 Authority Key Identifier:
                keyid:59:7F:DC:5D:F7:C1:D0:47:8B:4D:FA:32:90:8D:9F:F9:58:18:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX_cXffB0EeLTfoykI2f-VgYrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1b4f68-3f28-4ff2-8f92-2f89fca6728b/1/WX_cXffB0EeLTfoykI2f-VgYrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:21:48:d2:0d:01:0c:a9:b6:9d:a0:cd:05:c9:38:93:2f:
         11:8f:62:4b:a8:65:c7:91:8a:b3:ef:28:8f:c6:99:39:46:74:
         30:6b:70:58:c6:84:8a:b5:18:82:e8:ac:0c:b2:c1:01:b2:b6:
         df:b0:cf:79:6c:5b:3f:a6:80:c5:b3:9e:31:93:83:1c:dd:fe:
         24:06:48:ca:19:77:9e:94:ee:2d:4d:b9:2a:96:7e:a1:da:0d:
         c3:3e:88:2e:b9:02:45:a2:20:34:28:47:3d:a5:07:06:2f:06:
         59:bb:c7:5f:5a:a8:8f:f0:c4:4a:6c:5a:79:4e:ca:dc:cb:66:
         f9:a4:43:e5:b1:32:9f:a3:01:d1:18:b9:94:f5:2e:29:3d:78:
         ab:98:1c:e1:c7:c6:85:a1:97:91:18:4b:10:26:cd:2b:6e:f0:
         dd:de:a3:67:ed:62:e9:d4:84:83:49:40:88:d2:59:b8:c8:50:
         cc:7e:6d:f8:1a:96:2b:d1:bd:91:e9:1d:ab:0b:dd:1d:d0:cc:
         5b:59:9c:aa:29:6c:88:95:ee:f4:3b:df:23:cf:fd:83:c8:bb:
         92:4e:cc:61:0f:6c:31:d1:b8:37:b1:e8:80:9d:7a:a4:f5:de:
         8e:22:3a:1c:71:a9:c5:43:65:16:dc:f8:ee:b1:43:87:a5:bd:
         78:3b:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:03:57 2024 by rpki-client on console-fra.rpki-client.org