Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          53qbMwRMMbSLZvSR2NITlVPq4nGX1OSH4bTaTxuNUQg=
Subject key identifier:   CA:F0:F4:79:AF:18:11:4C:81:20:36:B4:86:98:B1:C3:61:5A:1E:64
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       018F98AB4F23B7050E7206F26F393D7E7541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          0F71
Signing time:             Tue 21 May 2024 01:01:54 +0000
Manifest this update:     Tue 21 May 2024 01:01:54 +0000
Manifest next update:     Wed 22 May 2024 01:01:54 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: yiH6GyXkjm4kDllUPmCByG97NvDvCHw6KiKgW0Xugb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 01:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:4f:23:b7:05:0e:72:06:f2:6f:39:3d:7e:75:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: May 21 01:01:54 2024 GMT
            Not After : May 22 01:01:54 2024 GMT
        Subject: CN=caf0f479af18114c812036b48698b1c3615a1e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:ef:5f:ae:e4:0d:3e:7f:8b:a2:f4:36:af:
                    30:f9:03:8e:78:29:20:84:87:b6:ef:ff:c5:bd:0f:
                    3d:e0:87:be:76:7c:99:bb:ed:71:6e:e0:1a:9f:aa:
                    06:4d:bf:e9:e9:95:e5:9d:44:bd:8d:87:4b:be:21:
                    fd:3d:b1:4b:a1:a6:96:1a:7f:29:d2:40:4d:d0:b5:
                    08:da:43:6a:d7:e9:f4:04:cf:4a:e3:e6:f3:33:a2:
                    db:9f:0e:b6:b6:cc:65:37:41:d2:df:2b:d4:c2:78:
                    30:19:89:ee:3b:73:d6:61:68:4f:16:8e:cc:fd:d9:
                    c7:09:10:bf:90:3b:b8:43:c5:2a:b0:b9:72:b2:03:
                    f2:2b:a9:ec:f9:9c:14:44:09:6a:d3:26:a6:09:44:
                    ca:ae:d8:39:dc:42:47:f5:1e:7a:41:dc:07:03:89:
                    2e:02:cc:2d:75:33:f1:70:49:02:f7:68:14:f3:ed:
                    c2:2d:53:df:58:4e:de:1a:94:9d:65:be:84:d3:58:
                    0f:6f:02:39:a9:52:b1:15:50:4f:3b:32:f1:26:db:
                    cb:69:59:6d:5c:bc:d9:d6:18:91:3e:53:d0:77:2d:
                    2b:e0:96:3e:8e:d3:36:89:cd:37:b9:67:12:f3:7e:
                    8c:cc:e2:ab:3c:a8:0b:bc:0c:eb:57:43:ae:7e:a1:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:F4:79:AF:18:11:4C:81:20:36:B4:86:98:B1:C3:61:5A:1E:64
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:52:dc:57:38:34:23:9c:b4:ee:76:15:db:a8:8e:9b:d2:
         31:02:14:76:fd:8e:46:6b:b2:ac:94:cb:c3:33:65:f0:d7:86:
         8d:8c:8c:2c:16:66:be:58:90:1c:30:eb:cc:d0:2c:67:49:e7:
         a3:c4:26:c2:c3:a7:55:a8:0c:b6:ab:6d:dd:37:0d:c7:9a:ff:
         63:d9:4f:52:45:83:21:97:a5:41:ed:ba:2c:c8:e6:e4:6b:25:
         46:ed:e7:fb:9b:c0:8e:8a:ee:f0:5a:35:df:d0:a3:ce:31:fb:
         e1:fe:81:c1:47:6b:48:19:db:39:7d:f3:51:be:d1:43:19:2a:
         25:ae:5f:cc:44:5b:e7:ad:88:04:57:01:c3:4a:d2:80:44:d0:
         81:0e:71:2b:26:bd:9e:e8:f3:d9:7f:80:cd:01:ce:ea:f0:6b:
         59:b9:f5:a1:41:36:74:4a:8b:fc:44:8a:ef:27:a7:ba:5a:68:
         3d:53:5a:e8:4a:55:ad:f5:39:2c:50:2a:f8:18:c9:6f:52:95:
         9d:0e:58:20:d4:c9:ab:8a:45:5a:08:c4:e1:30:48:e7:0c:68:
         7c:e3:72:bc:40:f2:98:44:65:10:8e:f3:d3:0d:dd:89:78:15:
         60:77:dd:f7:61:d5:47:38:87:72:06:d8:8c:eb:a7:aa:68:85:
         f2:e0:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:59:26 2024 by rpki-client on console-fra.rpki-client.org