Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File:                     wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier:          em6KCfsw9/MZgT2TvLrcDG5hvDv5xR2UF85ZrABx/Ec=
Subject key identifier:   B5:3C:85:57:C6:FF:B1:38:79:4F:0E:51:7F:85:62:88:9B:6F:94:18
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer:       /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial:       018F87EDA051E6A99851AFA778B66574A342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number:          0ACF
Signing time:             Fri 17 May 2024 19:00:48 +0000
Manifest this update:     Fri 17 May 2024 19:00:48 +0000
Manifest next update:     Sat 18 May 2024 19:00:48 +0000
Files and hashes:         1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: 2S2S9aemTuXmYlnSm0ZZbxh7bsvSeLAcyXKbAJ7zF8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a0:51:e6:a9:98:51:af:a7:78:b6:65:74:a3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
        Validity
            Not Before: May 17 19:00:48 2024 GMT
            Not After : May 18 19:00:48 2024 GMT
        Subject: CN=b53c8557c6ffb138794f0e517f8562889b6f9418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:af:e2:16:69:0a:8d:af:b7:a9:fb:ad:93:
                    28:24:00:59:0d:4f:ff:76:eb:72:d8:34:ff:bb:6a:
                    f4:1c:6e:53:b6:cc:12:d4:84:a2:b8:b8:3c:9b:10:
                    33:24:7e:5d:89:eb:af:45:85:64:c3:05:42:4e:3f:
                    e4:25:d5:81:3f:bc:99:08:ec:23:88:56:17:ab:d3:
                    07:93:f0:18:10:03:2e:a4:72:d3:e4:4e:f6:3a:82:
                    c4:1d:be:d6:4c:18:45:7d:98:cf:07:d5:87:9c:b5:
                    7b:48:7d:a7:5b:e9:ba:86:48:17:25:81:0e:e3:4d:
                    0f:0e:ab:6f:ec:8f:43:34:6a:72:50:f2:26:8a:58:
                    f4:89:91:34:dd:10:b7:e0:2b:11:ea:fa:c3:9c:26:
                    d9:95:16:c0:f7:0b:00:69:52:d3:24:89:a7:82:c0:
                    99:e5:56:e5:7d:3f:f6:91:32:f4:35:40:7e:ee:33:
                    18:d5:f1:e7:24:52:5b:54:48:31:25:55:96:6e:3e:
                    f0:14:83:3e:20:66:cc:b1:42:e4:bf:4d:8f:f5:cc:
                    36:f3:bf:da:86:71:49:86:71:0c:7b:d2:21:9a:1d:
                    f0:59:27:a8:99:16:bb:95:cd:6c:7e:d6:eb:c0:db:
                    9f:45:81:b8:07:3a:6a:b8:91:b7:9e:a9:b9:88:fd:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3C:85:57:C6:FF:B1:38:79:4F:0E:51:7F:85:62:88:9B:6F:94:18
            X509v3 Authority Key Identifier:
                keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:53:58:e9:e9:94:52:92:55:51:ef:43:69:91:78:45:ee:
         80:24:1e:d3:0b:2b:38:ce:d4:4f:f6:61:f2:7d:21:30:8d:bb:
         28:a3:23:70:dd:25:e1:3e:1c:30:14:c8:f2:5c:54:91:46:b6:
         05:26:0a:dc:5c:5a:91:d3:49:14:3c:33:12:6a:84:60:98:17:
         3d:57:22:ea:ab:2a:6c:32:b2:6f:a4:c9:b2:7b:14:aa:5d:2c:
         bd:de:a7:da:e3:ef:83:ff:5c:3b:08:07:8d:72:80:a2:8c:65:
         47:16:28:b9:be:a2:41:ce:0b:d9:98:b9:18:f5:3f:59:86:cd:
         34:78:04:c5:5b:39:12:3e:71:c1:49:3f:84:7b:5d:43:a9:83:
         45:73:56:5c:e8:cc:d8:29:a0:24:b3:90:a6:09:8e:87:e5:e1:
         61:9f:53:bc:52:20:27:02:d6:12:99:c6:63:cf:71:f9:03:2c:
         25:ac:5f:6b:f6:a9:ba:30:e8:b9:06:c8:89:d3:a5:e1:e3:69:
         d4:75:bb:ad:20:eb:ec:a8:3a:bc:99:a7:06:d6:eb:bb:d1:0a:
         50:56:a5:ac:3b:1a:ed:96:92:a9:5a:df:ad:50:11:97:86:89:
         10:60:85:a8:19:87:97:42:38:15:3f:de:60:91:08:7e:9d:bc:
         72:e6:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:00 2024 by rpki-client on console-ams.rpki-client.org