Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File:                     WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier:          lbVbllIgoq/fGONbdRAVxCDqT/fZm6iwhfiiaH3DNbs=
Subject key identifier:   6F:30:D6:E5:A1:AB:A1:5D:31:02:25:6B:1A:36:98:BF:25:CD:9B:CC
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer:       /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial:       018F8824969701848BA8670C00CE06B75F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number:          0E85
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: gvooxms3/jBvwTtxjB90w32M8tZntTEwWag5PAUUUKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:96:97:01:84:8b:a8:67:0c:00:ce:06:b7:5f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=6f30d6e5a1aba15d3102256b1a3698bf25cd9bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:aa:17:51:32:89:b1:68:10:27:e0:d1:6a:
                    3f:97:ac:f3:c7:bb:45:31:9f:e1:87:af:c8:f0:49:
                    3c:69:d3:73:1f:77:be:f9:5f:e0:8f:e1:75:fd:e8:
                    a8:ea:01:c2:18:e0:b9:55:6c:25:4b:37:e5:d3:34:
                    81:59:a6:8e:b2:c0:32:1d:ee:00:28:18:93:86:64:
                    39:d2:f2:1c:45:9f:58:1f:91:cd:06:04:b3:8c:b4:
                    59:a9:0c:01:21:41:39:2c:cb:95:84:a8:54:db:18:
                    78:68:80:f5:24:27:47:52:33:03:1e:e0:6e:f2:56:
                    e7:06:53:ab:2c:7b:82:51:cd:5d:f8:c9:10:0c:2c:
                    c9:00:7a:54:ec:fc:78:82:58:f9:56:ee:67:fe:c4:
                    03:92:c1:97:a1:7b:dd:ca:67:69:8c:be:3f:03:c7:
                    e3:8f:39:ed:5d:97:ea:6f:ff:d0:0c:ed:70:e6:c0:
                    ba:6d:12:d0:f0:ab:b1:e8:1b:49:3a:7a:7c:fd:03:
                    c1:f6:c7:03:15:1b:bf:bf:8a:94:a9:4f:97:10:7a:
                    1f:f2:c1:6b:9c:ac:a9:b6:85:91:59:85:ab:11:bc:
                    34:83:2c:18:50:20:70:6f:0b:04:da:28:8a:3d:67:
                    01:da:5a:4a:4c:30:a5:6a:90:2e:1d:af:88:84:31:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:D6:E5:A1:AB:A1:5D:31:02:25:6B:1A:36:98:BF:25:CD:9B:CC
            X509v3 Authority Key Identifier:
                keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:00:4f:69:65:0c:9a:b3:99:97:57:c6:a7:5f:73:dd:0e:
         5c:b1:17:07:df:9f:cc:d7:e9:23:8d:65:d3:a8:cb:82:ea:90:
         ff:8c:b2:9b:8d:58:4f:8c:f4:fc:f2:27:c8:c6:c3:e3:46:bc:
         84:a6:8a:b8:65:6b:d5:cc:cf:2b:b2:70:05:f9:3c:61:05:5c:
         ca:ad:3d:d9:2e:79:26:7f:ce:f6:6e:f5:71:54:14:1e:a0:83:
         52:f7:85:88:78:2e:d5:f3:c0:44:7d:c4:c4:37:39:44:86:fa:
         3f:8e:67:b8:f8:67:57:80:2e:a3:9a:8c:59:07:3b:09:c6:53:
         32:ee:a0:09:c9:fd:d6:2a:f2:22:fc:88:12:68:b2:d4:c6:3e:
         09:c1:08:ec:4d:21:61:37:05:35:e0:a8:88:9d:f5:71:e7:77:
         fc:34:53:73:ae:49:2b:2b:49:d5:62:6f:5e:41:37:3e:3d:d5:
         bd:aa:ba:a1:20:02:0d:99:cd:20:79:89:dc:10:a8:2f:ca:98:
         a9:70:c2:1f:a5:87:47:d7:3b:85:67:7a:8b:74:5d:c5:92:d2:
         87:69:6c:7b:f0:0c:8a:c8:c5:c2:46:19:9a:62:16:e5:e7:fd:
         5a:56:e0:51:07:78:ee:66:db:02:41:48:60:41:53:d3:58:71:
         9a:ae:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:28:45 2024 by rpki-client on console-ams.rpki-client.org