Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File:                     WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier:          qEPGi64WXoDaKcyJpFNXIathJnaPxH+l4U4CkPX9QK4=
Subject key identifier:   7C:81:B8:E1:C6:80:71:AA:57:49:53:2E:2F:2D:A3:50:34:DE:CD:D6
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer:       /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial:       019358772ED0ABCE455CB3AD179E311AE4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number:          079D
Signing time:             Sat 23 Nov 2024 10:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:25 +0000
Files and hashes:         1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: d4WLvYPHshtPhoQIWmdfAA5FAgHafp1a+vspgZ6CpVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:2e:d0:ab:ce:45:5c:b3:ad:17:9e:31:1a:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
        Validity
            Not Before: Nov 23 10:00:25 2024 GMT
            Not After : Nov 24 10:00:25 2024 GMT
        Subject: CN=7c81b8e1c68071aa5749532e2f2da35034decdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:15:ae:b1:9a:51:fd:7c:f2:fc:3c:ef:78:
                    7d:6b:10:0f:53:0b:8d:7d:5a:ff:b3:2b:b4:66:44:
                    06:bf:96:8b:74:6a:cd:af:62:49:95:a6:3e:87:a3:
                    7d:d2:23:6b:10:e4:51:5e:d4:01:b3:f8:9e:7c:63:
                    ab:70:36:46:c8:7b:6d:10:4e:86:ea:69:92:12:15:
                    38:ef:4f:dc:05:6d:fa:98:08:49:c6:94:04:75:d0:
                    d9:4d:ff:ea:bf:5c:0b:d1:e4:7c:4a:3a:4f:6d:6e:
                    04:da:2d:eb:fe:32:e6:89:52:e1:ee:69:69:18:11:
                    31:05:98:48:89:65:a8:c3:d7:8a:8e:a4:a9:1c:34:
                    a5:8b:b0:7b:d1:c8:47:8a:f4:4a:70:3c:1d:af:b5:
                    fc:83:ab:02:6d:22:a1:13:27:cd:5a:6a:11:f4:ea:
                    58:8b:dc:5a:55:54:e0:95:60:71:94:9f:d8:6e:b3:
                    4b:8f:8f:05:dd:14:71:04:0b:b9:cf:ee:99:4c:b5:
                    d6:a8:ea:ad:6c:88:b7:bc:cf:7a:77:6a:26:50:87:
                    70:a1:b8:3e:0e:38:d8:7f:6a:0a:e0:da:ba:de:36:
                    74:19:a1:8a:6c:58:be:43:f3:51:ec:0b:2c:82:c3:
                    02:ea:c4:a8:2c:2a:b7:e8:d9:07:c8:dd:18:e9:c1:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:81:B8:E1:C6:80:71:AA:57:49:53:2E:2F:2D:A3:50:34:DE:CD:D6
            X509v3 Authority Key Identifier:
                keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:b0:24:14:30:fe:a1:c0:80:a1:3d:98:6e:6d:de:2c:a6:
         e2:2f:b1:5f:9a:fa:e1:6d:99:7c:33:28:c0:d3:77:1c:76:a6:
         1e:ea:69:d6:b4:29:ea:0a:a5:f1:a2:e8:6a:2e:0d:74:0b:a8:
         4e:bf:b0:37:25:e7:15:38:15:38:c2:ac:12:6f:2f:2e:86:12:
         c9:64:ed:e4:be:7b:63:28:f6:4d:7c:ac:53:e0:c1:59:8f:be:
         1b:af:02:68:24:49:c8:7e:c6:5d:bf:5a:19:1b:f3:de:c1:d3:
         ae:3e:e0:eb:0b:c7:5c:01:09:63:43:ac:72:d4:c0:3f:19:f4:
         bd:ff:f8:d5:2c:cd:80:ac:54:fc:d4:e0:98:00:91:60:d2:27:
         56:62:e6:7f:38:96:3b:d2:72:18:8c:b6:19:13:41:ee:4a:d7:
         aa:62:c5:84:64:7e:96:e0:58:92:24:58:df:0d:2c:2a:f5:d9:
         ee:db:c5:dc:bb:4d:f9:aa:72:5e:1c:14:e5:4d:e7:f1:25:2e:
         7a:27:33:7b:ca:40:9d:9a:4e:73:f4:5e:b3:d7:52:03:81:71:
         4e:3e:65:75:53:af:3c:de:4c:6e:e8:57:d8:a3:7c:ff:37:cd:
         ea:3b:3f:60:27:5e:e3:1f:cb:e8:8e:e4:2b:2c:a4:0c:fb:86:
         46:b3:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:53 2024 by rpki-client on console-ams.rpki-client.org