Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
File:                     Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft (raw, json)
Hash identifier:          oXHcarY2xZuQH1SAaSpx3d+gNL99XwI2nSg8ii3C9po=
Subject key identifier:   47:7A:E9:A0:1A:0B:4C:63:83:E1:74:A4:47:6A:F7:F9:D8:A1:CD:E7
Authority key identifier: 5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B
Certificate issuer:       /CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
Certificate serial:       019356F73B3068C23E259DFB64B4486DD2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 03:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:03 +0000
Files and hashes:         1: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl (hash: 9ryx8V4Wk5x2Z/eUkLpvV7NGyWAMARRJjcV7yG4IBfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:3b:30:68:c2:3e:25:9d:fb:64:b4:48:6d:d2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
        Validity
            Not Before: Nov 23 03:01:03 2024 GMT
            Not After : Nov 24 03:01:03 2024 GMT
        Subject: CN=477ae9a01a0b4c6383e174a4476af7f9d8a1cde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:71:c2:71:9c:30:d3:91:72:53:4e:0f:0d:
                    d7:48:4f:c5:99:da:9d:6f:b0:08:6b:06:51:9e:d8:
                    5c:bb:e0:e6:6d:3e:26:2b:4f:e7:00:0c:8f:6d:d1:
                    a7:d5:08:3a:8a:1c:fb:4b:16:4b:bc:b8:32:e9:39:
                    f6:7f:3b:f4:3d:e7:d3:92:35:cb:98:b6:23:f5:ea:
                    85:f6:ce:8b:d4:69:69:c4:d0:2b:8e:36:b8:52:b0:
                    b9:b2:24:07:16:da:d6:d1:f5:11:95:fe:8c:f5:86:
                    98:e7:0e:34:1a:62:cd:9a:db:2e:f6:7e:52:98:36:
                    7f:22:57:70:1b:60:b4:dd:3f:ff:34:28:1f:68:05:
                    0d:9f:0f:5c:c1:d3:33:c2:6a:31:92:64:3f:f5:5e:
                    18:78:40:d0:06:fc:32:3f:de:74:82:8b:2a:98:52:
                    29:f5:da:7e:73:94:19:81:d6:ca:74:21:47:5b:e3:
                    4c:04:0f:a1:8c:3a:f1:10:74:da:f4:f3:e7:a4:d6:
                    11:9c:2e:57:b5:34:54:79:4f:d8:a1:fb:ab:37:d5:
                    a5:b9:f2:b3:87:07:94:ce:c2:b1:2a:0a:fd:c3:70:
                    b1:be:52:b3:71:f9:ab:eb:92:3c:32:27:59:36:83:
                    a3:8b:79:5d:d3:b7:5c:97:c7:71:f5:57:0e:b8:9f:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7A:E9:A0:1A:0B:4C:63:83:E1:74:A4:47:6A:F7:F9:D8:A1:CD:E7
            X509v3 Authority Key Identifier:
                keyid:5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:64:04:2a:48:49:8d:4f:a3:f0:1b:88:83:90:52:0e:e8:2d:
         92:3f:4c:6b:69:4b:37:28:fa:a1:3d:64:6d:63:20:fc:09:ae:
         8c:16:0c:18:cb:bc:98:dc:9f:b0:dc:67:23:99:df:f9:d5:17:
         f7:37:53:fd:40:08:66:76:8f:85:a1:58:2f:ae:a8:f7:f7:b4:
         26:44:1e:bc:36:5b:59:f2:90:ee:5d:2a:d5:e4:6d:b4:91:11:
         8a:c2:09:ad:71:8b:5e:16:8a:3a:41:2d:5b:0f:79:10:f3:05:
         76:70:9f:e0:05:6a:ab:84:4c:cb:1b:23:38:0e:e3:0a:98:08:
         84:90:bb:67:b9:7a:63:8a:66:e6:70:7b:93:2b:64:f5:4d:f0:
         71:61:78:57:c3:4d:0f:19:70:af:30:79:1c:5a:4a:28:23:ad:
         61:19:e4:61:13:28:77:2b:20:f6:75:bd:5f:e9:d8:3d:9a:24:
         d3:8c:40:c7:13:02:29:9a:90:ff:18:41:07:97:2b:13:fc:8d:
         c8:8a:66:2e:87:5e:c1:60:37:fb:93:8b:b7:87:e1:b7:ed:e7:
         39:4a:01:ce:a6:07:67:de:17:04:ef:6f:5e:c8:07:70:1b:fd:
         85:03:43:2f:86:77:e2:03:05:da:52:47:f8:e3:9c:63:e0:d3:
         63:1e:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----