Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          fNJ7vb80zDvQucDQdKTv7dZ4mZrEmHnl1w3iJAeTqDY=
Subject key identifier:   A6:8F:42:C6:67:40:B0:72:B3:AC:AA:A3:0C:B9:C1:13:53:12:2F:6B
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       01935576055A5C9B8699B8DA9DB3DCA8B573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          136B
Signing time:             Fri 22 Nov 2024 20:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:18 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: ZJETm/uGF1LbyNX1HT78Kmx1QOGzMtikffpzijHQePs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:05:5a:5c:9b:86:99:b8:da:9d:b3:dc:a8:b5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: Nov 22 20:00:18 2024 GMT
            Not After : Nov 23 20:00:18 2024 GMT
        Subject: CN=a68f42c66740b072b3acaaa30cb9c11353122f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:49:44:3d:77:23:21:21:ea:3d:e4:a5:7a:
                    e6:6d:05:d5:c4:bc:e9:9d:98:71:43:53:57:95:a6:
                    95:8c:77:6f:2d:7d:ea:0f:56:93:9e:08:5a:ad:7e:
                    4e:a6:18:4c:b6:f4:0e:5d:ee:86:ca:1f:d6:db:76:
                    30:e4:26:c3:01:07:a0:39:a8:5c:16:52:7c:85:5a:
                    60:5f:95:76:61:a7:15:b0:e1:96:c9:a9:d1:4e:8d:
                    eb:cd:94:43:02:57:30:62:f8:c7:0a:5c:35:1d:95:
                    f6:23:ef:67:09:5b:a1:07:cc:38:6d:5f:65:c3:ec:
                    85:9a:c6:8b:81:d7:c4:05:78:a3:8c:71:35:07:76:
                    c4:72:5c:41:48:85:7c:73:2e:e2:42:f9:36:59:20:
                    ba:ea:4e:2a:94:a8:db:6b:02:be:6c:64:af:be:92:
                    4b:60:b0:b3:41:f6:79:43:c4:c1:99:90:eb:38:76:
                    77:cb:3b:f6:0c:a0:43:e7:26:3e:41:e6:22:f4:96:
                    fa:39:ee:81:76:76:21:3b:bd:f7:75:70:45:e9:28:
                    35:33:ea:b1:ef:4b:63:36:57:1a:3c:99:f7:88:e0:
                    67:f6:4e:2e:5e:ab:96:50:7a:df:8a:82:47:92:54:
                    7e:5c:02:80:2f:71:45:68:f1:73:06:de:69:78:b8:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8F:42:C6:67:40:B0:72:B3:AC:AA:A3:0C:B9:C1:13:53:12:2F:6B
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:aa:e5:d4:24:7b:f2:c3:5b:32:3c:33:a7:8b:74:1d:5e:
         0b:8d:ef:52:50:65:c7:5a:6c:94:43:d6:0c:e9:4e:fe:75:12:
         60:6a:5c:dc:b5:cd:4d:26:63:bc:95:8f:7b:62:ff:df:3f:59:
         9c:c9:08:e1:87:5f:6e:c1:67:2a:4a:0e:0f:9e:59:f1:90:a9:
         e0:8e:08:b0:d1:27:92:d6:46:5b:76:40:56:5e:3e:0e:f0:95:
         11:a6:7b:ba:57:a1:38:78:07:f9:0d:ea:3d:d2:a4:2c:f6:47:
         98:b2:24:fc:c7:5e:ca:ed:45:d5:28:49:82:bc:b4:c9:6a:49:
         03:8c:a7:a1:1b:43:10:25:b6:80:98:ad:57:e4:b5:a9:b2:c9:
         90:7b:08:35:54:2f:0c:6e:01:dc:33:59:b6:78:23:e4:d6:d0:
         db:90:d2:bc:a4:7e:18:5d:2e:a9:52:e7:e2:74:6d:e8:4d:fc:
         96:34:19:9e:6c:4b:bf:33:a2:bc:3d:9b:fe:f3:04:28:d4:56:
         a8:83:81:f1:6a:8c:39:1a:fd:b8:c3:9b:a3:2e:3b:4c:3e:c3:
         1b:19:30:be:a2:88:f8:81:5c:44:cf:40:5c:71:9e:5e:84:22:
         eb:c9:0c:b8:03:f5:c7:0e:47:a6:29:db:da:fc:30:76:d1:ee:
         27:9b:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:25 2024 by rpki-client on console-ams.rpki-client.org