Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File:                     _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier:          U74i+j4gmHKGI0S2BalqCpNwlsMEx0Di9LCb3pMFQQs=
Subject key identifier:   47:B9:58:40:4C:93:AE:9F:25:F7:20:66:A6:D8:14:2E:04:A3:77:66
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer:       /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial:       018F86A3AB613B5AFCC8600B14976688E97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number:          07A4
Signing time:             Fri 17 May 2024 13:00:24 +0000
Manifest this update:     Fri 17 May 2024 13:00:24 +0000
Manifest next update:     Sat 18 May 2024 13:00:24 +0000
Files and hashes:         1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: Cq+Y7wMcWQk5FjHC5AiDPH+TJICHm4+1uazg3Abf/qo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ab:61:3b:5a:fc:c8:60:0b:14:97:66:88:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
        Validity
            Not Before: May 17 13:00:24 2024 GMT
            Not After : May 18 13:00:24 2024 GMT
        Subject: CN=47b958404c93ae9f25f72066a6d8142e04a37766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:2c:40:8b:d3:f5:74:18:7d:4a:74:9b:37:
                    bf:c5:d2:54:c7:ab:14:c9:a6:5d:bc:7e:4a:c5:c0:
                    60:f4:b1:9e:2a:38:ec:77:d1:3c:49:cd:66:b2:e0:
                    bf:44:f7:dc:ff:12:02:eb:1b:36:22:82:22:45:70:
                    1c:45:07:1b:09:ae:b2:82:d4:ab:cb:bb:bd:06:cd:
                    2a:06:ff:4e:63:f1:46:4e:fb:f8:32:b0:59:66:66:
                    24:e6:06:42:0d:c4:a1:32:84:ec:a9:2d:5d:6e:54:
                    2f:58:75:d9:ee:e5:ff:88:54:59:93:e1:63:fa:55:
                    05:94:f1:60:67:9f:d7:28:8f:f7:df:82:4b:5b:58:
                    5a:17:38:c8:72:9d:7a:00:9f:f3:3d:0f:0e:42:4a:
                    1c:8a:a3:81:31:84:b4:bb:1a:a4:47:0e:21:6d:7b:
                    5c:3d:c8:d3:f3:18:75:32:b4:38:5f:5a:1a:cc:c3:
                    ff:06:7a:7d:ad:bb:15:59:a3:da:d6:87:74:c6:f6:
                    46:8e:39:ac:89:46:5c:8f:ba:1c:6c:8c:fd:27:df:
                    2b:63:a0:de:20:d1:a3:98:7a:57:28:f7:ad:68:b3:
                    05:b8:9a:09:1a:a2:31:18:ae:58:16:c7:0c:70:81:
                    2b:70:b6:a1:11:01:8c:7d:6b:ae:04:04:42:b9:a7:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:58:40:4C:93:AE:9F:25:F7:20:66:A6:D8:14:2E:04:A3:77:66
            X509v3 Authority Key Identifier:
                keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:e8:d7:2c:68:39:f6:7f:4a:2f:bd:b9:30:1d:e4:60:58:
         70:81:db:a4:f2:fe:9e:2a:eb:ed:10:fb:2a:07:9f:05:fc:4a:
         55:81:96:10:65:37:7b:fa:89:f0:45:1f:12:8d:af:65:a8:af:
         d0:b5:77:8f:d6:64:f1:c2:32:9a:5e:4f:70:79:c9:f9:63:7c:
         c0:97:56:28:3a:9d:cf:79:ec:66:ec:9c:e1:99:87:08:fc:a2:
         71:f4:26:fa:af:80:02:b8:99:15:76:66:f8:33:55:0c:33:26:
         ea:67:ee:42:0c:69:27:1f:0d:1b:02:77:fc:0b:0b:71:df:a1:
         73:c3:80:08:26:f4:42:5e:bc:8b:3f:b4:0e:18:ae:a9:9e:9d:
         7b:82:18:44:ae:be:6a:be:d2:b7:ba:52:76:24:d0:38:0b:0e:
         d6:b9:97:dc:46:2a:73:83:40:26:84:18:db:16:a8:03:03:e7:
         d1:2e:1e:fc:a7:20:fa:fd:23:6b:3f:06:4f:8d:33:fb:ac:9e:
         20:e2:0c:c2:3d:33:b7:e9:94:6f:4a:b7:1d:86:89:03:2c:d7:
         b2:bd:04:c9:c8:b1:0a:9b:00:75:71:51:ba:5d:cd:c1:32:5a:
         20:46:29:f5:4c:22:39:c7:72:74:f2:1e:7f:c7:c8:cd:70:9a:
         5f:0b:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:31 2024 by rpki-client on console-fra.rpki-client.org