Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          ecNAC/vSV6Y/znW3IdgRlkonWmrrNWNZ7zOn9PaDu5w=
Subject key identifier:   BA:05:33:78:AB:BE:3D:2D:C3:B4:F6:56:BA:11:91:09:CE:8B:2C:4A
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       018F874AE87A5A26BDE4D65EF209DC93BD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          0FC8
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: BWmKnfZ8FkQk5KnmkMrI00bKYwn8K/NBVCcXKrJ9rMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e8:7a:5a:26:bd:e4:d6:5e:f2:09:dc:93:bd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=ba053378abbe3d2dc3b4f656ba119109ce8b2c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:2b:25:ea:e9:70:b0:97:90:e3:50:29:7e:
                    62:49:88:02:8a:41:2e:6b:c6:2c:41:9a:3c:02:b6:
                    68:d6:b1:e2:7c:77:32:14:56:91:52:3c:e5:93:05:
                    cf:ae:47:7f:fb:6c:2a:ab:01:08:91:db:d8:af:f1:
                    7c:df:8a:88:39:68:fc:82:88:28:06:1c:6e:d2:41:
                    e8:2d:22:a8:28:59:f8:c7:66:ad:ce:1d:49:0c:1b:
                    3f:24:b6:5a:0a:26:6d:5e:4e:18:3c:18:83:64:f1:
                    4d:2d:4c:c9:a6:aa:93:e8:64:7e:db:d0:4e:5f:46:
                    6d:fd:49:ba:79:12:57:78:05:aa:66:69:2a:c5:26:
                    4a:66:62:3d:24:09:ed:c5:b3:95:d9:5f:c1:aa:85:
                    38:ed:f9:d0:23:c6:54:c1:17:ea:fc:92:da:db:fc:
                    4d:7d:b9:c3:8a:82:32:94:b4:7d:78:fc:d4:00:58:
                    02:67:c5:d0:45:75:a2:dc:27:15:7d:67:45:fe:1b:
                    7f:2a:eb:df:9d:f2:e1:a1:e2:21:19:0e:da:03:48:
                    a2:be:dc:4d:f1:98:00:0b:06:25:2d:27:a6:f1:a0:
                    57:a8:e2:6d:00:bf:ad:01:ed:61:88:b0:6f:5d:78:
                    d8:6b:94:01:c5:11:d9:51:97:04:de:7d:04:65:dd:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:33:78:AB:BE:3D:2D:C3:B4:F6:56:BA:11:91:09:CE:8B:2C:4A
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:93:53:85:74:da:bb:b1:0e:43:98:2d:d0:22:8a:16:ff:
         ad:8a:e7:2d:a8:1f:0c:e5:b0:3c:45:42:bf:a7:89:8c:4c:8c:
         e6:64:a2:a4:45:b4:c7:39:28:2a:e4:c4:3e:a2:21:64:65:97:
         75:03:67:26:92:98:4e:98:31:f3:17:5c:67:08:d0:83:67:01:
         6e:c6:11:ac:e2:20:87:b3:0b:f6:4a:50:52:e8:39:d8:32:82:
         97:da:aa:bb:ca:3e:dc:90:e1:11:df:b2:ac:b5:3e:60:39:5e:
         21:66:05:de:8c:59:6e:17:19:1f:02:98:e0:ab:cc:35:66:bd:
         cf:8a:d8:36:0a:b7:81:7f:e1:c2:43:c1:5e:6a:89:72:c6:68:
         9b:6e:83:31:73:eb:9b:e6:58:1b:60:d7:11:8e:0d:b3:0e:14:
         1b:e6:63:ac:60:3a:e4:af:93:83:4c:47:0a:af:a9:e4:90:df:
         21:24:b8:c2:a5:7a:35:f8:64:4a:09:ac:98:74:a7:bf:82:0e:
         08:30:2b:74:ef:a4:85:1c:64:63:53:74:4a:f7:24:7f:0b:cf:
         6c:2b:01:c0:09:c3:49:8c:2c:20:5b:2e:14:c8:4b:8a:48:a0:
         e9:58:28:8b:89:23:d7:ad:32:ef:6e:86:2e:2d:ae:e1:61:7c:
         3c:7a:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:36 2024 by rpki-client on console-fra.rpki-client.org