Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
File:                     W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft (raw, json)
Hash identifier:          SLATtJc1FL8ia0cgN9p59QcUwrmzo+NqLrrghcm4LH8=
Subject key identifier:   36:01:AB:63:4F:22:04:1B:1C:2E:99:F7:F0:B5:8E:DD:EA:0B:76:50
Authority key identifier: 5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0
Certificate issuer:       /CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
Certificate serial:       0194BB299B4782C8BB673274AEF333450BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 07:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:53 +0000
Files and hashes:         1: W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl (hash: vtYoRYdV0djD3bzoSYOvBOmFqmL10bT3MTiC58aqK3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:9b:47:82:c8:bb:67:32:74:ae:f3:33:45:0b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
        Validity
            Not Before: Jan 31 07:00:53 2025 GMT
            Not After : Feb  1 07:00:53 2025 GMT
        Subject: CN=3601ab634f22041b1c2e99f7f0b58eddea0b7650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:4a:7f:2d:62:56:88:a4:cf:33:14:3d:15:
                    df:86:2b:7d:17:2f:c7:d3:26:dd:da:87:aa:98:80:
                    10:98:42:c9:c6:ad:7c:d8:72:09:cc:7b:90:59:33:
                    ed:f1:b7:48:c5:60:dc:76:c6:77:73:8a:cb:22:f0:
                    a2:8c:49:b4:7a:da:2a:7e:7a:0d:f8:c3:e3:22:85:
                    dd:fd:a2:ac:6d:11:b5:06:4e:d1:90:d5:d3:60:dc:
                    58:70:77:8c:21:1a:41:2f:2e:48:9b:58:9b:2a:4f:
                    67:87:f7:1b:e7:a8:20:a1:56:53:cc:26:72:7f:8a:
                    33:7c:d4:a4:3b:bb:2f:98:15:a3:e5:95:a6:a9:55:
                    bb:fe:51:d9:45:84:c0:71:0c:51:2c:3c:ba:80:4a:
                    3c:d8:5d:5f:c9:8e:a8:c8:ee:f1:63:e7:20:a4:6c:
                    03:8e:81:04:51:4a:6d:86:34:07:33:2a:fd:07:22:
                    76:de:a9:8e:06:2d:00:a4:57:46:52:fa:4d:4a:af:
                    a1:f9:dd:f4:33:d8:c5:3b:18:f2:70:7c:bd:5f:f4:
                    57:78:53:c6:e0:07:b4:55:a9:09:73:3f:f6:31:35:
                    bf:a9:cb:9d:0e:5a:a5:c2:af:62:d7:b1:98:28:15:
                    2b:66:b2:ab:7e:ab:d9:93:35:88:e9:82:72:56:4c:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:AB:63:4F:22:04:1B:1C:2E:99:F7:F0:B5:8E:DD:EA:0B:76:50
            X509v3 Authority Key Identifier:
                keyid:5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:af:0c:ec:9a:52:ac:49:9d:54:47:46:20:f2:55:06:c8:1b:
         01:92:4c:06:00:9e:30:1b:4d:b2:3e:8f:a4:63:4e:44:69:4c:
         5a:ba:86:38:0c:79:e3:27:59:09:08:94:bd:87:33:cc:ce:09:
         79:d6:74:76:9b:97:13:98:76:0f:c8:c7:29:5e:ac:c8:b6:fe:
         a1:89:36:7b:19:aa:04:69:d3:4a:8b:ea:02:54:74:2a:5f:bc:
         5d:fc:eb:99:b5:62:df:df:9a:a4:60:1f:d6:f2:3b:54:50:cd:
         74:40:d7:c7:15:e3:1c:35:e6:b1:e1:f0:39:2f:d6:be:c0:67:
         00:5a:97:2a:19:15:db:f3:7e:49:c5:d9:e6:b8:7e:6f:08:f1:
         c8:10:8c:7f:da:cb:bb:8c:fb:07:3a:f5:0e:45:95:21:2b:84:
         ed:e4:cf:a0:5c:16:55:a1:bd:a9:68:e2:f4:91:63:3f:75:30:
         78:78:e7:19:6b:af:40:cc:26:56:68:75:f1:d2:52:13:e9:ce:
         d2:8d:1e:82:4e:45:61:bf:26:e0:62:d9:76:4c:9f:19:d3:61:
         1d:3e:08:7f:a8:c6:54:ce:cf:80:02:60:b1:fc:81:e9:5c:79:
         c9:fd:16:d5:86:15:e9:c4:20:b6:93:ff:7f:d4:60:1f:44:c6:
         3d:c0:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:43 2025 by rpki-client on console-fra.rpki-client.org