Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
File:                     wn0dON377r2u5sDEJkvWihqyNaw.mft (raw, json)
Hash identifier:          zgZO5U89W8H6vqFggcvD77QgE/swkhrP9sbX6y4qnCs=
Subject key identifier:   83:62:D5:59:05:23:D6:DF:33:B3:B7:97:DC:0D:3A:10:62:EE:6F:C9
Authority key identifier: C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC
Certificate issuer:       /CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
Certificate serial:       01935689503F9B0A05EAABF3A8C2B91C27B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
Manifest number:          0A66
Signing time:             Sat 23 Nov 2024 01:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:59 +0000
Files and hashes:         1: wn0dON377r2u5sDEJkvWihqyNaw.crl (hash: d6KdnYXBbesncag7O6+ksXNE6CiYDX+C2kPUG+Fqin8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:50:3f:9b:0a:05:ea:ab:f3:a8:c2:b9:1c:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
        Validity
            Not Before: Nov 23 01:00:59 2024 GMT
            Not After : Nov 24 01:00:59 2024 GMT
        Subject: CN=8362d5590523d6df33b3b797dc0d3a1062ee6fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:ff:d3:1e:9a:e2:e6:38:00:00:94:12:6b:
                    db:61:6b:88:f4:83:3c:3d:3a:16:d4:b2:ca:4d:1a:
                    62:81:6f:74:f4:89:6b:c1:0d:fc:ca:f4:44:8d:b5:
                    94:b9:b4:73:83:1a:0b:1b:e8:5e:d5:75:1a:7c:20:
                    59:b2:8f:1f:f9:c7:d0:57:12:e7:9e:7c:40:2b:2e:
                    d1:32:5f:2d:00:8c:e3:c5:36:7a:b5:50:76:01:28:
                    c4:2d:3c:3d:2c:8e:ad:23:ae:6d:ab:4d:1f:ed:48:
                    16:69:c7:f9:53:81:7f:22:16:9f:98:a6:d4:eb:49:
                    ed:90:0c:13:b8:8b:4c:c9:5d:0b:f5:79:73:e4:52:
                    9d:01:94:2f:8b:7e:97:90:73:79:09:8d:22:3e:58:
                    11:0e:21:a9:db:02:bb:e7:5a:89:32:a6:52:be:ce:
                    f6:09:c1:a4:c0:cd:5d:74:44:44:90:22:c4:71:b9:
                    25:e7:27:54:bd:0d:26:6f:f0:02:62:30:ba:79:c7:
                    f6:f8:a5:b1:c5:06:84:87:19:9c:68:e4:19:19:a0:
                    d7:70:61:d5:08:42:86:ef:fc:e1:11:eb:95:38:1c:
                    1c:b6:f3:fa:67:ea:01:e5:93:e7:bf:f4:84:90:00:
                    c3:37:4d:b6:ed:07:0b:40:25:16:47:ea:6b:2c:e6:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:D5:59:05:23:D6:DF:33:B3:B7:97:DC:0D:3A:10:62:EE:6F:C9
            X509v3 Authority Key Identifier:
                keyid:C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:45:26:70:68:c6:c2:c0:af:33:b0:40:07:ab:09:87:d5:
         30:42:e2:7e:70:75:4e:94:70:23:52:fc:b3:f5:45:82:b7:a4:
         ed:8f:b3:a8:09:a9:e7:73:bf:05:56:16:74:78:8c:f3:4c:34:
         43:49:f6:40:59:24:ab:0e:cf:79:18:03:10:77:cd:8b:63:c5:
         aa:f8:cc:0b:e7:3b:54:f8:45:4e:54:d0:88:b4:ca:eb:da:70:
         72:81:49:58:cd:88:28:41:b0:cd:2f:97:94:91:fe:5a:ef:b0:
         ef:60:cd:c7:c9:3a:a2:79:37:0e:43:ae:8b:cd:11:6d:a3:f4:
         18:fb:6f:ca:5f:0d:32:cf:d3:c4:bd:79:8f:09:10:0b:2f:f9:
         97:35:ed:ee:0d:33:f5:c2:d6:88:85:5d:a9:ae:91:3a:b3:ad:
         e9:6c:7a:be:08:0d:b9:9e:f6:67:ca:b5:48:34:61:db:94:f5:
         7e:42:24:38:ed:2a:fb:41:7d:30:07:cb:ed:a4:fd:1f:5f:33:
         c5:34:f0:5a:0e:9d:0c:a4:98:b5:8f:3a:f5:c3:0c:87:9d:5d:
         ed:d9:0a:5d:33:7b:6b:c7:9a:3c:97:00:91:0d:34:a9:8d:e0:
         2d:d4:4d:c6:05:40:42:c2:27:b4:2e:46:49:9b:d7:0f:e2:15:
         21:95:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:33 2024 by rpki-client on console-fra.rpki-client.org