Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          0/xbsezGl+Z4QFO3ss9rhVR17rB3CfXj/7NzrR7n2Ms=
Subject key identifier:   C8:BF:1B:BB:60:42:A8:1B:AE:87:2A:67:DC:B3:2D:C2:23:F4:A9:C8
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       0193693424F0559EA96B36B7ACD72775FAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 16:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:45 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: SWec93LSkW57CsbIgqnacUNonFnwE3uDGgoMcgVYUto=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:24:f0:55:9e:a9:6b:36:b7:ac:d7:27:75:fa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Nov 26 16:00:45 2024 GMT
            Not After : Nov 27 16:00:45 2024 GMT
        Subject: CN=c8bf1bbb6042a81bae872a67dcb32dc223f4a9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:53:aa:b2:f5:09:46:77:bf:77:21:a7:82:
                    22:6b:92:13:4d:0a:32:33:64:22:1c:6c:16:f1:6f:
                    b9:b1:2c:16:24:22:b3:42:32:59:2d:a5:18:cd:07:
                    4e:a3:f1:3c:3a:e3:85:eb:9a:3f:d5:a1:f6:2c:ae:
                    f5:db:a8:b8:94:cf:73:0b:39:2d:a8:a4:ef:4e:63:
                    8c:bb:cd:98:43:81:94:e7:31:fa:c2:0a:4f:db:2f:
                    21:39:17:94:20:82:48:04:c8:4b:ff:86:0c:0e:35:
                    6b:7e:30:3e:7f:d5:c3:20:f7:a6:37:79:c2:53:82:
                    47:85:07:6b:25:e5:3f:0b:38:3e:ad:48:c7:3d:33:
                    69:17:d0:ba:57:ae:f8:4d:05:6d:3f:be:8a:95:14:
                    b8:bc:10:19:89:4e:5e:b5:9c:fa:54:54:c0:6f:7f:
                    f3:73:60:2c:75:2c:8d:85:fd:09:04:29:ef:06:f8:
                    81:bc:27:5c:22:38:fc:37:5d:e5:58:e8:09:53:36:
                    b6:bd:af:30:bf:c6:68:e6:0c:bb:07:9e:1f:aa:2a:
                    6d:43:e2:f6:8c:c2:6e:8f:88:6a:a8:32:16:14:79:
                    94:f1:ed:9c:53:c6:78:62:33:73:3e:b6:f6:c0:60:
                    73:0a:3f:29:db:4a:7e:c5:2f:04:d2:21:3a:ee:c3:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:1B:BB:60:42:A8:1B:AE:87:2A:67:DC:B3:2D:C2:23:F4:A9:C8
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b9:cd:af:8c:aa:bb:ba:fd:24:a5:ca:fe:25:10:e8:15:17:
         41:7d:18:73:23:f3:19:10:69:0e:3c:6c:4e:58:17:34:69:1a:
         78:d8:ba:71:f6:23:d7:ee:d3:68:99:df:7b:cf:7e:62:13:51:
         e0:91:15:a5:2f:b3:c1:13:2c:62:0c:95:17:1f:80:36:46:bc:
         17:d7:ba:49:5d:4d:7b:af:9f:a5:43:f7:56:17:05:2c:f1:40:
         4b:fa:3c:2e:f4:f1:f6:4e:7f:a5:8b:5f:0b:c0:35:1e:6a:2a:
         7f:04:88:0a:d7:31:a5:0b:17:71:b6:a6:f4:eb:c3:05:1d:65:
         e8:bc:1a:fc:2e:21:88:85:7b:58:12:b4:bf:ca:78:4c:4b:3f:
         b4:b1:25:6d:41:4d:ea:fc:35:f1:b4:17:7a:fb:77:32:c7:8b:
         af:e6:7d:c9:94:41:01:0d:6d:b1:79:d1:0c:00:3f:d2:89:cd:
         6f:a8:9b:28:ff:87:e0:74:44:03:b6:84:3d:2e:c5:aa:41:35:
         4f:5f:c1:58:50:f3:f0:d7:2c:5c:70:d8:2f:96:33:67:91:a7:
         30:e6:35:39:07:cd:bc:bc:1d:f3:3e:5f:4f:39:bb:66:6f:42:
         34:a8:f9:88:05:ad:2c:a2:23:d1:ca:3b:1b:f3:68:9a:8a:82:
         83:bd:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----