Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
File:                     WQrh--tOt2hwRl3ryP0GXBb4vtE.mft (raw, json)
Hash identifier:          6OzBHMHNrMoye8kWnOLJaxGBd/UXXMrfyN7abDkFXsc=
Subject key identifier:   39:0A:97:02:84:DB:CE:F5:73:61:45:C4:C9:4A:E2:0C:59:60:56:BC
Authority key identifier: 59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
Certificate issuer:       /CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Certificate serial:       019369A17E734978644EF66FE38999AB5B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
Manifest number:          014C
Signing time:             Tue 26 Nov 2024 18:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:11 +0000
Files and hashes:         1: WQrh--tOt2hwRl3ryP0GXBb4vtE.crl (hash: JcKTGbkUoygCgPR2trt/VBY4EHhS2xvKOnBXt50uqYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:7e:73:49:78:64:4e:f6:6f:e3:89:99:ab:5b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
        Validity
            Not Before: Nov 26 18:00:11 2024 GMT
            Not After : Nov 27 18:00:11 2024 GMT
        Subject: CN=390a970284dbcef5736145c4c94ae20c596056bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:0e:52:12:48:f7:cd:2c:51:8a:e1:ad:28:
                    cb:80:13:b6:d7:e0:6f:ec:0a:96:31:70:8c:f4:89:
                    a6:8a:d5:9f:d4:5c:6a:3c:b3:51:1e:d0:df:9b:45:
                    90:59:17:e6:0c:4d:4d:4a:89:ad:4e:f6:b8:a4:36:
                    52:6d:33:f5:6c:3b:3d:bc:65:cf:a6:59:63:38:06:
                    23:18:9f:c8:d7:f2:6a:2f:fb:19:30:49:f9:40:91:
                    0c:cf:0e:77:22:5c:75:a6:5c:54:85:9b:0e:21:38:
                    e4:e4:da:b9:5b:f1:97:76:a7:07:24:d0:1d:86:cb:
                    02:7e:29:39:6c:b2:3a:8e:2d:62:7c:67:14:98:03:
                    a7:aa:7b:4a:55:7a:3f:b1:fb:6c:50:01:b2:b1:5f:
                    af:76:bd:fa:0d:8d:db:ff:dc:0d:67:e3:1a:f2:e6:
                    03:4a:77:07:a5:a4:51:75:ca:b2:48:9b:06:05:93:
                    a2:d8:15:eb:49:fe:01:02:ad:70:cc:99:69:07:ef:
                    d4:14:19:81:a8:d8:ab:73:8f:c3:57:55:f0:f9:f0:
                    fb:36:ad:07:49:98:0e:b3:48:55:57:61:cd:5d:91:
                    7c:7c:cc:6f:0c:af:7b:b5:9f:84:f2:73:9a:66:5e:
                    b8:5a:b2:32:b3:c1:c2:f7:98:4c:68:c7:85:c6:fa:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0A:97:02:84:DB:CE:F5:73:61:45:C4:C9:4A:E2:0C:59:60:56:BC
            X509v3 Authority Key Identifier:
                keyid:59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f3:57:27:23:58:a9:9e:06:31:fb:7d:8b:a4:69:c6:79:34:
         92:a7:61:04:48:2d:32:3c:89:6f:1c:24:2c:6b:ce:02:7f:16:
         09:ee:4d:31:93:6f:13:c9:5c:d7:d8:e7:17:2e:c1:1c:74:77:
         56:71:bc:13:f8:f2:2d:09:4a:cc:e4:9f:34:f4:13:36:3d:0f:
         c3:3d:62:95:d6:b3:ee:60:28:64:74:25:4f:7c:6a:9c:ff:1a:
         61:99:c2:71:72:9d:49:36:75:32:f2:f6:ce:27:b0:90:50:1c:
         56:76:b1:1d:5a:17:4e:8f:5d:a3:da:91:50:c0:cd:69:4f:46:
         cd:d7:29:94:9e:46:f0:3f:81:93:b4:1d:85:70:7b:b6:03:e5:
         55:4d:71:ee:95:e3:4d:8b:c3:b0:86:2d:05:5a:62:c3:e1:c1:
         f0:2c:d9:da:6e:6c:a5:06:f0:c4:09:cc:d2:b2:aa:c1:bd:4d:
         b0:98:c2:24:00:ca:17:fd:1e:11:8a:c8:bf:4b:5a:08:13:b9:
         8b:dc:ab:de:5a:58:e3:c2:25:09:91:13:79:c3:d0:b0:3c:0f:
         05:b5:87:e6:53:42:4d:f4:40:4c:6a:b1:b2:53:3b:74:38:73:
         22:a3:f4:54:58:df:b8:0d:2a:e1:c0:63:e4:a9:9f:37:c8:bb:
         a5:27:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:30 2024 by rpki-client on console-fra.rpki-client.org