Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File:                     0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier:          qievf0ZdfNSVH/6LPcf0V8g3oyKNu3zB0OUCLiSm+Zc=
Subject key identifier:   57:15:B0:4B:B3:8D:B7:DC:1A:60:E2:D9:91:F5:28:78:A4:1F:84:FD
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer:       /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial:       0191FAB5257DA0A9E556E58C9C4C260FC71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number:          D1
Signing time:             Mon 16 Sep 2024 12:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 12:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 12:01:01 +0000
Files and hashes:         1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: tJjpjNb1x2LqM+BGHKe17SrAeHznsscOvmE9ynX3EUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:25:7d:a0:a9:e5:56:e5:8c:9c:4c:26:0f:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
        Validity
            Not Before: Sep 16 12:01:01 2024 GMT
            Not After : Sep 17 12:01:01 2024 GMT
        Subject: CN=5715b04bb38db7dc1a60e2d991f52878a41f84fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:bf:86:58:7a:a3:be:64:00:f6:60:b6:c1:
                    cd:21:d0:c9:68:63:3b:ae:01:55:14:e2:4d:b6:0b:
                    73:36:57:f9:ee:58:3d:47:3d:38:6e:5a:34:ca:f3:
                    a3:77:36:c4:7c:6c:32:bb:51:23:f3:19:18:7b:2d:
                    41:c6:1d:9f:26:d1:7a:6d:4d:29:7e:3b:97:46:e9:
                    b8:1b:6b:ca:58:ab:c6:25:2b:4c:6f:03:93:a9:da:
                    10:19:88:1c:2a:8e:3f:a3:81:24:5e:b2:e9:80:15:
                    e7:c2:b8:d9:47:37:9e:8f:b5:cb:ae:b4:dd:3e:96:
                    57:4e:4a:1c:8a:78:fc:ff:bc:d2:95:f7:e6:9e:eb:
                    52:34:8d:3f:ec:26:90:ef:bd:ca:65:da:ff:a1:6c:
                    3e:07:06:ae:fe:3b:ca:79:db:b1:10:b0:29:65:08:
                    71:50:4f:3d:03:a4:04:a7:4e:21:23:d9:67:87:4c:
                    fd:f0:dd:bc:51:2d:65:b7:ff:30:9a:ac:54:2f:5a:
                    c4:b9:cf:c0:0f:6e:74:7b:ec:1c:d7:b5:c4:d8:c4:
                    0b:d3:bb:ce:da:45:84:83:99:df:28:03:eb:91:ca:
                    76:58:95:ed:70:97:96:89:fb:d2:00:d4:db:43:a3:
                    ef:48:ef:67:a9:fb:bc:50:c3:aa:09:99:8f:b7:59:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:15:B0:4B:B3:8D:B7:DC:1A:60:E2:D9:91:F5:28:78:A4:1F:84:FD
            X509v3 Authority Key Identifier:
                keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:19:c8:32:b4:9b:67:5a:a2:93:0e:f3:e4:0f:02:16:e5:
         cd:18:33:03:79:e8:71:73:f9:94:54:6c:19:3f:a8:04:7f:f6:
         55:5d:c4:2a:fd:7d:c2:1e:f7:31:90:38:b8:d8:c8:24:83:a1:
         07:de:2d:4f:ee:03:a3:5c:07:40:82:70:b4:23:0f:75:66:71:
         bd:72:9c:02:85:22:58:96:50:6a:e6:d5:07:61:24:c2:8d:d9:
         cc:a8:31:e3:43:b1:1d:18:00:a4:0b:b2:8d:be:3f:af:83:ef:
         88:88:43:2c:6f:e5:47:6e:c6:7d:b2:36:28:c4:a2:f9:db:af:
         99:d1:15:f0:4f:31:b3:e9:61:ec:8a:52:4f:60:22:25:d8:a4:
         1e:e0:aa:1e:9f:32:1c:b8:c1:e2:2c:aa:66:e8:7c:7f:e4:fa:
         0c:9c:59:64:b2:06:e5:ad:e9:1d:fa:67:4d:ae:e0:70:db:81:
         d5:51:78:50:ac:53:83:27:85:d9:0b:a2:35:e8:61:3c:48:6c:
         c0:cb:70:2a:1f:33:7a:9a:d2:47:19:1b:cf:b6:c8:48:05:fc:
         d7:c9:fe:6e:2f:02:79:f2:ce:88:c7:69:56:3b:2d:89:8f:f7:
         83:66:f0:8e:f0:91:a0:c2:53:8d:41:95:76:74:d2:46:0f:c6:
         54:25:a1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6tSV9oKnlVuWMnEwmD8ceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjQwOTE2MTIwMTAxWhcNMjQwOTE3MTIwMTAxWjAzMTEwLwYDVQQD
Eyg1NzE1YjA0YmIzOGRiN2RjMWE2MGUyZDk5MWY1Mjg3OGE0MWY4NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveC/hlh6o75kAPZgtsHNIdDJaGM7
rgFVFOJNtgtzNlf57lg9Rz04blo0yvOjdzbEfGwyu1Ej8xkYey1Bxh2fJtF6bU0p
fjuXRum4G2vKWKvGJStMbwOTqdoQGYgcKo4/o4EkXrLpgBXnwrjZRzeej7XLrrTd
PpZXTkocinj8/7zSlffmnutSNI0/7CaQ773KZdr/oWw+Bwau/jvKeduxELApZQhx
UE89A6QEp04hI9lnh0z98N28US1lt/8wmqxUL1rEuc/AD250e+wc17XE2MQL07vO
2kWEg5nfKAPrkcp2WJXtcJeWifvSANTbQ6PvSO9nqfu8UMOqCZmPt1lV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcVsEuzjbfcGmDi2ZH1KHikH4T9MB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi0ZyDK0
m2daopMO8+QPAhblzRgzA3nocXP5lFRsGT+oBH/2VV3EKv19wh73MZA4uNjIJIOh
B94tT+4Do1wHQIJwtCMPdWZxvXKcAoUiWJZQaubVB2Ekwo3ZzKgx40OxHRgApAuy
jb4/r4PviIhDLG/lR27GfbI2KMSi+duvmdEV8E8xs+lh7IpST2AiJdikHuCqHp8y
HLjB4iyqZuh8f+T6DJxZZLIG5a3pHfpnTa7gcNuB1VF4UKxTgyeF2QuiNehhPEhs
wMtwKh8zeprSRxkbz7bISAX818n+bi8CefLOiMdpVjstiY/3g2bwjvCRoMJTjUGV
dnTSRg/GVCWhvg==
-----END CERTIFICATE-----