Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
File:                     WBU_sgucj4zPbDmPTWGyFwfhu-I.mft (raw, json)
Hash identifier:          MzCU7wVNO3c33k9sb84iqJOh85hDI8G7c/u53yxl+kQ=
Subject key identifier:   FE:5E:94:6D:97:4E:0D:54:D3:E9:7A:D9:99:77:18:2B:5B:03:36:0C
Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
Certificate issuer:       /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Certificate serial:       018F97CE4754E3E2A15B3A25DEB4BB34CD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
Manifest number:          FE
Signing time:             Mon 20 May 2024 21:00:29 +0000
Manifest this update:     Mon 20 May 2024 21:00:29 +0000
Manifest next update:     Tue 21 May 2024 21:00:29 +0000
Files and hashes:         1: WBU_sgucj4zPbDmPTWGyFwfhu-I.crl (hash: GpwXbf9FGXm4DCVs9gL3LDuMY+e6CCL0B1IuhBpVeK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:ce:47:54:e3:e2:a1:5b:3a:25:de:b4:bb:34:cd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
        Validity
            Not Before: May 20 21:00:29 2024 GMT
            Not After : May 21 21:00:29 2024 GMT
        Subject: CN=fe5e946d974e0d54d3e97ad99977182b5b03360c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:06:65:89:35:83:c3:fe:15:0b:e9:a6:c9:
                    67:83:4b:62:75:61:e5:73:22:8a:ea:8f:4f:d0:fd:
                    b3:a2:29:21:43:2b:f3:b0:81:f0:8d:f5:df:db:1f:
                    8d:e1:3e:36:60:15:b7:df:ae:8e:ef:80:53:bf:1e:
                    bb:d3:78:e3:00:5b:65:bb:2a:27:fd:ac:88:97:e1:
                    72:03:08:a3:65:92:4a:e8:e6:58:5a:b8:23:22:22:
                    e0:de:c4:46:07:54:0b:42:66:b1:ad:7d:b0:23:a6:
                    ea:1e:ac:a1:b6:26:57:e3:4d:fd:38:ba:3c:68:68:
                    8e:bc:75:06:ce:41:d9:94:87:7b:83:12:f7:26:cf:
                    12:00:bc:5e:bf:8b:7c:42:74:05:ff:54:ac:70:dd:
                    a0:ad:66:be:b4:53:b2:45:5d:e1:2f:2b:c0:9c:25:
                    5e:5e:ce:59:97:2d:e5:68:65:dc:bf:da:4c:21:88:
                    17:bc:8c:e0:27:8a:84:9f:73:24:a1:5c:ad:4c:e7:
                    fa:c2:c6:23:14:1e:ab:85:dc:a8:42:a9:c3:a0:7b:
                    2c:0f:7d:cc:31:63:f8:85:9f:49:12:47:04:c7:86:
                    7c:0e:cd:b4:0c:0c:12:14:eb:7f:df:82:82:56:a1:
                    52:2a:ce:f8:ae:fd:9a:fa:d7:ac:56:93:ca:ab:9c:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:94:6D:97:4E:0D:54:D3:E9:7A:D9:99:77:18:2B:5B:03:36:0C
            X509v3 Authority Key Identifier:
                keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:24:2a:20:1a:83:71:a7:97:76:13:62:f8:0c:da:62:21:
         03:dc:4d:b3:96:5b:ce:ec:c7:04:9d:f4:c3:7f:dc:c6:56:68:
         8b:6f:fc:1d:c3:dd:d6:c6:07:28:b9:71:da:af:23:53:e3:96:
         0d:49:44:7b:f3:55:dc:2c:06:b3:aa:6e:db:fd:00:cf:71:de:
         5f:6d:6c:de:f1:37:83:94:7a:a4:56:8e:13:6c:60:3d:12:d2:
         5a:0e:4c:8b:e8:52:d3:f5:a7:e6:57:a2:5c:98:b4:54:c8:b0:
         57:0d:5e:81:2b:33:f9:47:4b:e4:3b:61:91:77:48:fe:61:45:
         e2:e1:1d:3d:67:5a:31:25:64:45:90:82:73:2e:08:c9:f6:ba:
         40:7b:db:75:e3:3c:37:e5:b6:61:ea:d1:e7:36:0d:d8:44:e8:
         15:d6:4d:c4:96:24:9a:44:00:77:2c:32:be:80:03:76:c9:c0:
         3f:12:c6:33:6e:0e:7c:d2:f5:29:74:9a:31:e5:7f:db:a3:47:
         23:6c:f5:86:b4:21:f1:42:5e:fd:56:6d:c2:a8:e2:fc:0f:c2:
         f8:ac:e6:14:18:e8:9b:86:47:95:8f:ec:6c:45:d7:58:be:7c:
         25:c5:8f:01:0d:58:46:73:72:2e:31:e4:19:09:a9:f8:05:e4:
         6c:44:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:15:09 2024 by rpki-client on console-fra.rpki-client.org