Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          ZNtyw2CYXzhGEMyOXMmVsB0yH0FMrpRQtGdxlKv+s54=
Subject key identifier:   3C:61:F2:2E:74:66:4F:5A:CC:17:F5:B3:F8:DC:4B:60:93:FA:C5:72
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       0193587877EBB7BFD22A668608AD57360149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          07C3
Signing time:             Sat 23 Nov 2024 10:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:50 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: ZTd/TPqFeUhGcSVhYH8v5NWOFKWDK69qGaN+16z+5iY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:77:eb:b7:bf:d2:2a:66:86:08:ad:57:36:01:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Nov 23 10:01:50 2024 GMT
            Not After : Nov 24 10:01:50 2024 GMT
        Subject: CN=3c61f22e74664f5acc17f5b3f8dc4b6093fac572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:3f:32:72:97:97:c0:af:47:71:94:d0:e4:
                    91:dc:55:53:ec:c4:ca:63:8c:3f:b9:58:53:57:09:
                    36:cc:af:12:78:2c:24:28:52:d4:d8:44:e2:65:d8:
                    bf:eb:83:f7:c9:c9:6d:4a:3f:c2:69:5b:ec:ac:72:
                    3d:15:3d:12:a9:1f:bd:60:5e:6f:dd:f5:59:45:44:
                    34:4c:ec:e7:f7:8d:d7:39:ff:4b:da:12:cf:d3:e1:
                    99:c9:f2:31:a6:05:44:9b:b5:06:d6:2d:4a:eb:ef:
                    b0:27:b3:a5:25:c2:52:db:9b:08:45:43:3e:8e:a5:
                    52:5b:0a:ff:ad:81:6d:f3:96:22:42:b3:1b:96:da:
                    03:77:ab:ed:9d:cf:7b:5b:10:bc:c3:3e:a4:9f:e7:
                    91:b5:0f:03:60:f6:b1:6e:56:03:10:4a:fb:fd:9f:
                    2c:0e:72:30:03:4b:07:3a:07:7d:1a:49:a1:19:ad:
                    66:3e:76:00:2a:5a:b9:89:9c:82:39:87:7c:01:f9:
                    e7:05:ec:26:ee:47:8d:f2:59:64:e0:7b:73:95:aa:
                    b1:9e:4f:a0:ee:1c:40:f6:24:55:f4:98:00:48:fe:
                    d1:3a:8e:7f:87:05:f5:90:13:48:65:89:4b:1e:dc:
                    8a:10:f2:a2:2a:19:65:42:68:e9:5d:7d:40:fa:e5:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:F2:2E:74:66:4F:5A:CC:17:F5:B3:F8:DC:4B:60:93:FA:C5:72
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:a1:6f:28:ae:69:f0:f0:64:54:92:84:37:0f:11:c7:80:
         e8:18:e4:ac:1d:95:90:2f:41:b2:cc:f2:d7:6a:79:d5:65:d5:
         e6:41:e0:9c:5f:5e:fc:c2:e1:1b:6f:ef:ba:d0:1c:57:88:15:
         93:87:98:0c:9d:35:42:27:61:68:85:a7:51:0e:e0:a3:89:82:
         7e:0e:33:c1:f4:b0:93:11:46:f8:5d:57:9f:96:50:d2:96:b3:
         b1:a2:04:2c:26:e1:99:52:e3:7f:4c:34:57:fb:48:2e:0a:e0:
         df:a6:26:e7:1d:77:27:61:e3:33:bb:09:2f:6a:17:2b:f1:3e:
         a1:87:cc:31:60:3b:16:92:24:65:84:72:a9:47:98:c6:83:cd:
         07:e4:2c:5f:95:de:0f:f0:92:2d:f5:b1:2a:c5:f9:c7:1c:db:
         1f:a7:9f:04:e0:c9:83:6f:4c:40:58:8d:d1:9f:8e:eb:10:b7:
         6c:92:69:d9:05:7d:ec:33:9a:8d:d5:04:e5:87:bd:4a:c5:3b:
         86:8f:76:95:ae:e9:2f:3d:fc:96:b1:97:5b:96:29:86:bf:e2:
         f6:44:d2:8f:d0:96:55:35:a1:ac:ed:0b:bd:1f:e2:22:f7:54:
         9d:9e:32:1b:b1:c8:89:74:55:d0:c9:7f:68:93:aa:b9:19:81:
         7b:33:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:11 2024 by rpki-client on console-fra.rpki-client.org