Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.mft
File:                     WxcoTsom_W90q-Lyef500uGTkQ0.mft (raw, json)
Hash identifier:          9dtAKfaHZRQmQobASMUs2ds+tPGHGCYu2LA1V3Lwz0E=
Subject key identifier:   3C:E1:66:C3:EA:B8:2F:04:E7:F6:4D:DD:58:A9:0A:4A:25:4F:E9:76
Authority key identifier: 5B:17:28:4E:CA:26:FD:6F:74:AB:E2:F2:79:FE:74:D2:E1:93:91:0D
Certificate issuer:       /CN=5b17284eca26fd6f74abe2f279fe74d2e193910d
Certificate serial:       01901E8F92D6EE3F6BCB51DFEB0C4B2F2164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxcoTsom_W90q-Lyef500uGTkQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.mft
Manifest number:          08B7
Signing time:             Sun 16 Jun 2024 01:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:43 +0000
Files and hashes:         1: WxcoTsom_W90q-Lyef500uGTkQ0.crl (hash: cCby+eQhj/Xe03rExFO8bBVLPAc33/DwvQfCNJtiEWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxcoTsom_W90q-Lyef500uGTkQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:92:d6:ee:3f:6b:cb:51:df:eb:0c:4b:2f:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b17284eca26fd6f74abe2f279fe74d2e193910d
        Validity
            Not Before: Jun 16 01:00:43 2024 GMT
            Not After : Jun 17 01:00:43 2024 GMT
        Subject: CN=3ce166c3eab82f04e7f64ddd58a90a4a254fe976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:6d:97:70:a6:43:b7:54:09:49:76:75:ec:
                    7b:19:51:69:94:ec:52:52:7d:7d:4a:f1:72:2d:38:
                    d7:66:da:5b:3c:16:32:bd:7e:54:7b:df:46:62:a9:
                    2c:a8:50:ad:14:bb:63:c9:5e:65:5c:28:87:b5:30:
                    bb:6d:52:aa:e6:b7:26:4c:c6:20:31:e6:de:6a:e0:
                    ee:a3:78:0f:65:8a:29:ae:35:6a:13:ab:2e:05:df:
                    db:ad:d4:7d:fc:76:f7:ff:6f:b6:b4:aa:b7:92:00:
                    9c:fb:d5:66:26:97:ce:a6:2a:03:a8:0e:7d:ae:a8:
                    93:1a:ff:33:5f:73:db:39:64:f4:9f:c7:9f:9a:97:
                    87:31:e9:1c:02:31:54:c1:5b:65:13:ef:17:33:8a:
                    fc:08:b0:17:8f:2b:2b:07:0c:53:11:75:f1:65:bf:
                    16:3a:73:e0:2f:96:74:ff:e7:64:5b:59:ad:b2:8f:
                    11:d3:bc:ba:6e:fb:3b:5e:13:b1:52:d9:15:e8:1b:
                    e5:d1:60:eb:0a:ad:af:96:56:b7:ce:be:5f:6f:09:
                    34:35:73:59:99:4d:e4:0e:dd:ac:e1:52:82:6a:53:
                    fe:ea:ab:41:2d:bd:6d:3a:8b:5c:fe:3d:9f:4b:ed:
                    ab:68:cd:77:66:58:af:cb:ba:af:8f:c0:29:f6:1b:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:66:C3:EA:B8:2F:04:E7:F6:4D:DD:58:A9:0A:4A:25:4F:E9:76
            X509v3 Authority Key Identifier:
                keyid:5B:17:28:4E:CA:26:FD:6F:74:AB:E2:F2:79:FE:74:D2:E1:93:91:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxcoTsom_W90q-Lyef500uGTkQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d0a7d6-ec4e-4e21-9dbb-d097a3cf8caa/1/WxcoTsom_W90q-Lyef500uGTkQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:c8:aa:f3:ea:9c:51:5d:e6:80:85:1d:91:a7:2a:2f:ff:
         55:84:8b:e1:9f:81:49:8e:45:b8:8a:fa:19:a9:9e:e6:ca:cf:
         f7:0e:1c:01:5e:f2:7f:7e:ef:1e:3c:43:36:af:17:86:4c:ab:
         c0:04:78:3c:a5:d4:c0:80:62:d4:8d:cd:66:60:46:66:fe:45:
         3c:a9:66:5d:cb:cc:93:22:50:c1:16:08:99:32:7d:00:ff:27:
         ef:68:f1:ff:30:69:a6:ed:7c:99:b4:1c:a4:da:5a:b0:4d:dd:
         34:4a:ae:9f:e9:c4:16:20:1e:fb:85:d7:65:f9:fe:16:3c:ad:
         1e:b4:ef:35:45:a8:26:eb:66:8a:4a:e3:01:2a:d1:c9:61:18:
         3b:88:91:b4:48:51:d7:0d:70:67:04:87:33:0d:e2:01:cc:30:
         76:f7:95:f8:97:fe:6c:07:eb:79:12:12:a6:0c:ab:cb:49:73:
         5c:fc:99:2b:be:ef:fd:13:c8:fe:89:c0:6d:ac:96:1a:21:ad:
         d2:87:88:00:2c:73:4d:37:da:17:90:5e:03:da:65:8b:10:6f:
         94:af:92:24:cb:cb:14:cf:69:45:2b:53:e1:ac:69:ac:1d:97:
         c2:7f:09:b0:82:ff:65:61:04:9c:c7:f7:50:8f:7b:54:8f:fb:
         0e:0e:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:11:32 2024 by rpki-client on console-ams.rpki-client.org