Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File:                     _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier:          NGd4/pk0BZTzM/tEB8+s+tlqzjnxUyx9w5I6yMvj6nQ=
Subject key identifier:   F9:49:4B:79:24:46:25:09:AA:E9:9E:77:14:44:68:F0:8B:85:20:11
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer:       /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial:       0194BB2976114AD20529111FC020E2B47CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number:          0A56
Signing time:             Fri 31 Jan 2025 07:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:44 +0000
Files and hashes:         1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: vaaZvmxF5ui/MHeg6S+8HrW0c/gHP50kQ1rHo/wt/dY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:76:11:4a:d2:05:29:11:1f:c0:20:e2:b4:7c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
        Validity
            Not Before: Jan 31 07:00:44 2025 GMT
            Not After : Feb  1 07:00:44 2025 GMT
        Subject: CN=f9494b7924462509aae99e77144468f08b852011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:0a:da:56:c8:be:80:9d:f0:ae:3d:3c:9a:
                    7b:cf:ca:fc:5c:bb:c5:4c:49:a2:c4:0d:62:49:31:
                    83:0e:76:0b:6e:e3:73:b4:be:90:ba:44:f1:11:ae:
                    61:72:a0:86:5c:ae:84:d7:1f:48:72:67:5e:83:9b:
                    c4:1c:fa:df:c9:83:7b:91:2e:4d:dc:30:1e:b5:61:
                    39:36:cd:e0:3a:e1:32:29:2a:75:0e:fb:7e:ff:1e:
                    98:86:fa:ec:51:42:5a:bc:69:a9:f4:43:13:01:3c:
                    0b:4f:f8:d2:e4:0c:e0:0f:6a:5b:66:d1:43:44:c9:
                    c9:b3:28:ea:12:22:91:a2:b3:d4:fc:d1:73:6c:32:
                    e1:1a:1b:8c:85:0e:f1:ab:6c:7c:a1:29:be:18:33:
                    ff:31:ca:cc:1c:34:93:15:d0:f5:f3:fc:07:e7:5c:
                    5f:fe:98:57:73:4b:be:bd:15:ac:ce:f5:e2:a0:55:
                    ef:e1:8d:7b:46:03:fa:8b:92:e9:de:ac:bd:ea:f0:
                    88:00:77:be:2b:a3:92:19:0a:46:67:2e:a7:f4:ac:
                    55:b3:23:88:88:e6:97:00:f5:15:b6:6e:12:97:86:
                    07:80:26:36:e0:d3:22:35:4b:ef:e9:55:6c:fa:51:
                    84:a5:b6:16:b0:5b:b5:91:91:b4:8c:5a:ac:9a:38:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:4B:79:24:46:25:09:AA:E9:9E:77:14:44:68:F0:8B:85:20:11
            X509v3 Authority Key Identifier:
                keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:e0:da:9d:d4:5d:eb:21:2e:c9:18:58:6d:a5:92:ac:01:
         06:89:9a:fb:22:05:02:d5:b2:ed:5c:aa:8d:fe:98:6a:66:17:
         fb:21:43:d1:29:dc:81:2e:b4:59:c8:5f:0a:db:e4:50:2e:95:
         b9:db:f3:11:c4:d4:b4:1c:95:70:67:01:54:80:67:90:e3:15:
         9e:49:b9:cb:79:ab:1b:1f:00:6c:a6:81:5c:e1:eb:48:f1:ea:
         3d:9b:1a:47:eb:06:d8:03:07:85:a8:90:b5:12:23:c2:0c:b6:
         9f:55:98:bb:1e:fc:f4:c4:56:3d:53:f5:c1:9f:62:eb:28:53:
         a0:2a:61:7b:6b:b9:a5:7e:d9:40:8f:e7:33:ac:3c:da:06:d1:
         49:20:cb:f2:7d:fd:0b:4c:fe:52:04:1d:19:b5:f4:ec:57:e8:
         38:dc:1c:89:8a:17:a2:f2:38:34:78:86:03:23:43:58:5f:6d:
         b3:43:7a:b0:53:c0:1b:da:35:c4:a9:6c:1a:a9:e4:f6:86:83:
         81:62:19:76:1b:21:8e:dd:87:9e:b1:42:8b:53:6d:d8:2a:4e:
         14:67:8e:f3:9f:af:52:b1:f6:72:e3:c6:7e:e5:8a:ee:62:93:
         cc:17:f0:06:09:80:8e:56:3b:41:b1:1d:da:b2:7a:fc:59:c4:
         28:83:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:13 2025 by rpki-client on console-fra.rpki-client.org