Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File:                     wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier:          Ci88nWtlzQEvSQ+OKaA1YDjzH1ANFP/WUim7CAoMnas=
Subject key identifier:   55:88:B7:B0:41:2C:36:D8:86:29:4A:12:12:37:82:9D:56:ED:75:4A
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer:       /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial:       018F86A3895B67D2AE73166F44DE879FA48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 13:00:15 +0000
Manifest this update:     Fri 17 May 2024 13:00:15 +0000
Manifest next update:     Sat 18 May 2024 13:00:15 +0000
Files and hashes:         1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 2PcRA/M99ufWng9NMVooNj4NtouAlb1nK0YpvuMURf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:89:5b:67:d2:ae:73:16:6f:44:de:87:9f:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
        Validity
            Not Before: May 17 13:00:15 2024 GMT
            Not After : May 18 13:00:15 2024 GMT
        Subject: CN=5588b7b0412c36d886294a121237829d56ed754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:7a:a0:7f:c6:71:af:2a:0f:b9:8e:20:2b:
                    5d:fc:46:a8:22:3b:68:d1:e2:5c:fb:74:92:54:05:
                    d0:b7:aa:0c:bb:4f:f9:7b:fc:38:49:c3:90:c1:58:
                    e2:c6:f2:ee:30:c9:b3:cf:37:ee:3e:4c:3e:89:d6:
                    1e:67:d2:60:95:a6:56:15:8e:61:e2:4f:97:b6:56:
                    83:34:aa:2a:14:5e:4b:a4:9a:5f:21:6b:66:99:3a:
                    c5:d6:ab:42:6a:9d:96:20:8e:ef:64:f9:f5:cc:94:
                    62:c0:fb:73:4d:19:f6:c8:0b:19:6f:78:c3:0d:39:
                    a1:76:dd:d6:59:c7:e6:cb:e3:1a:67:b1:55:e4:05:
                    dd:29:37:1d:c1:f9:d6:18:b8:6a:15:2e:2c:19:2d:
                    68:c3:8f:0a:d7:c6:f6:85:45:ac:7a:19:b0:1e:1d:
                    eb:8e:f0:2e:72:d1:a9:97:a2:64:aa:1b:21:4f:da:
                    ae:3d:e4:89:75:ed:62:b0:96:25:50:2a:d3:52:7f:
                    d2:72:00:46:d6:3a:b1:5f:3a:94:e1:a5:3e:89:a9:
                    01:89:3a:49:e4:29:da:35:08:86:e4:1f:7d:90:43:
                    f8:1c:a2:87:92:7e:81:1a:ab:cf:de:1b:39:06:47:
                    3d:49:72:9f:ca:65:2d:8d:7c:f7:df:70:3c:56:d6:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:B7:B0:41:2C:36:D8:86:29:4A:12:12:37:82:9D:56:ED:75:4A
            X509v3 Authority Key Identifier:
                keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:51:5e:8a:0b:ee:72:f2:84:5a:c6:73:6c:cc:5d:c2:64:
         b3:6f:79:ed:6a:24:bd:0c:df:ba:cf:fb:99:28:b5:46:16:70:
         c9:d6:71:90:4f:af:13:32:93:d9:97:ad:2c:b4:34:cc:7d:fc:
         0e:bf:d6:f4:87:04:b1:6c:bb:9c:86:b1:6c:5f:bb:60:cd:19:
         1f:5f:2b:11:af:49:d6:ab:a3:fe:25:f6:59:f4:3d:7a:fa:b1:
         4f:5e:5d:43:9c:c1:fa:9c:e8:c7:b9:42:b9:b4:a5:2a:4e:48:
         11:ed:d4:97:07:ac:d7:8d:78:75:ec:e5:01:bf:cd:e7:34:bf:
         d5:fe:78:a3:e3:0e:0c:cc:f9:37:80:16:c4:07:dc:62:4d:e2:
         20:af:5b:b1:ac:4b:4f:d9:00:c6:80:e6:f6:c0:a5:57:1f:a5:
         2d:b7:4a:23:0b:df:86:20:86:6b:c6:21:1c:df:0d:d2:1b:3e:
         40:c7:02:e1:03:74:4a:71:e5:78:bf:dd:2c:94:b9:bd:de:07:
         2f:1e:87:9c:bc:e0:6e:1c:ce:c5:a9:5e:28:43:f3:7f:4e:eb:
         46:c0:5e:e1:ef:ca:a6:2a:f5:0f:67:43:b3:01:c4:8d:a9:70:
         01:c7:0c:f4:36:0d:2f:ae:d1:47:f5:6a:bd:d1:19:1d:fa:f5:
         20:a3:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:32 2024 by rpki-client on console-fra.rpki-client.org