Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File:                     WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier:          XzkqgNJNkYXTb6JNkdk0uEZVmhweYV0iFvNxx2KRZco=
Subject key identifier:   03:EC:BE:65:EB:69:4B:69:7B:6F:AB:05:0E:0A:E9:0C:B4:77:49:48
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer:       /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial:       0194BA848DE663A9FC8B97DCB30C4D430DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 04:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:36 +0000
Files and hashes:         1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: IuYFOITHiUHgqIRDz9DBqK2zHAaZyoEglvhRVquVBPM=)
                          2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
                          3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:8d:e6:63:a9:fc:8b:97:dc:b3:0c:4d:43:0d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
        Validity
            Not Before: Jan 31 04:00:36 2025 GMT
            Not After : Feb  1 04:00:36 2025 GMT
        Subject: CN=03ecbe65eb694b697b6fab050e0ae90cb4774948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:18:ff:cd:2b:01:da:1a:73:0c:bd:0a:c6:
                    ac:6e:8c:01:3a:06:19:2e:6c:12:f0:30:cb:e4:dc:
                    80:d5:e8:c5:90:37:80:7e:10:34:a2:32:87:cb:49:
                    56:45:4b:5a:33:f9:8e:0d:d5:bf:53:64:13:98:6d:
                    40:8b:33:b5:e0:20:60:f1:1f:17:70:9b:b4:f5:36:
                    5a:30:1d:86:ec:b5:a2:9d:3e:fc:73:40:a4:5e:47:
                    32:13:d8:7c:d0:4f:1e:be:f5:82:66:d0:62:0a:30:
                    4b:23:a4:45:fd:d8:e6:da:2c:58:f9:fe:eb:8d:bf:
                    28:ad:d1:0d:4a:f2:d2:55:f1:73:77:1d:6b:75:91:
                    ba:df:7e:2b:01:c7:b6:d8:b5:8a:7d:f3:17:1b:e6:
                    e6:b6:4a:bf:ea:97:99:9c:1e:b9:e9:94:7d:e3:23:
                    ed:1b:c2:46:15:75:63:af:3b:3b:45:6a:e9:8d:f8:
                    29:b3:88:0a:1c:e4:fe:e3:60:1a:2f:cc:8d:76:ba:
                    36:96:cb:0b:54:c6:e0:f9:1f:c5:e7:01:ee:66:94:
                    89:12:a5:ed:e9:d4:a4:2f:7b:f8:17:be:82:de:e9:
                    3d:39:53:17:5d:06:c7:2f:1f:a2:2b:16:11:46:87:
                    4b:b1:44:95:60:a0:e1:2b:be:17:1b:09:f8:0e:75:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EC:BE:65:EB:69:4B:69:7B:6F:AB:05:0E:0A:E9:0C:B4:77:49:48
            X509v3 Authority Key Identifier:
                keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fd:69:d8:8b:e0:05:f5:6b:58:58:38:00:1e:4f:fb:7f:40:
         69:e1:68:e7:59:f5:1c:6a:1a:f1:cb:36:13:b0:fb:7f:72:c1:
         6b:99:f4:bf:72:7d:fe:c2:53:08:68:40:c0:54:e9:05:a6:f0:
         6b:c0:8f:1b:fd:da:f0:dd:28:f3:19:36:f4:8c:b0:ea:e3:70:
         5d:14:4e:3c:9c:e8:3a:56:19:75:ef:5a:41:94:ae:67:f0:cd:
         91:82:05:1d:26:3b:2b:24:19:4e:c1:32:a3:fe:67:4c:70:78:
         c5:9b:e8:53:41:9e:c9:4e:da:91:f6:ca:a9:78:27:26:42:98:
         04:2e:14:89:65:92:0b:26:ef:fd:d3:95:7d:0c:ba:dc:90:f4:
         ea:9f:80:c1:d7:50:bf:e5:a2:35:1b:9c:51:0f:13:12:99:e7:
         59:fe:a2:98:c5:39:2f:77:33:d6:0d:45:1a:75:da:d4:73:d8:
         47:45:50:38:a8:94:c4:a2:4e:58:f3:a5:31:66:80:6a:17:43:
         85:85:f7:23:a7:47:53:72:ce:f5:1d:87:d5:35:ef:7d:6a:e7:
         c4:09:c4:1f:bd:60:f9:55:fd:b1:c2:22:6f:98:24:0c:19:1c:
         c7:88:d9:cd:45:06:82:17:a3:25:94:ef:f2:32:76:b5:c7:ad:
         ca:c4:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:29 2025 by rpki-client on console-fra.rpki-client.org