Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File:                     WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier:          7VhylZMryqQfi4hQPYixzK8brRHPKWMzdO1OHap5XyI=
Subject key identifier:   3B:50:21:3D:89:D5:59:7A:9D:AA:6B:23:AF:10:B1:FB:63:5D:80:A3
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer:       /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial:       018F9A982FFFF1116586C95935E50A12204F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number:          109A
Signing time:             Tue 21 May 2024 10:00:16 +0000
Manifest this update:     Tue 21 May 2024 10:00:16 +0000
Manifest next update:     Wed 22 May 2024 10:00:16 +0000
Files and hashes:         1: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: hCU94/ex1DYbLZsazAet+4jDyJWVagZib/jlJ2VKheQ=)
                          2: vey_ONkZ3aVOyxco4MAJ-NX9Ceo.roa (hash: CqBK9firX/o3pGHCgxpxx2dTRc+ylzfx5XNlHdDEdjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:98:2f:ff:f1:11:65:86:c9:59:35:e5:0a:12:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
        Validity
            Not Before: May 21 10:00:16 2024 GMT
            Not After : May 22 10:00:16 2024 GMT
        Subject: CN=3b50213d89d5597a9daa6b23af10b1fb635d80a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:ae:fd:52:4b:79:87:f6:4a:f1:51:97:13:
                    27:7a:7d:c7:f5:e6:72:6f:40:6b:67:f0:ed:11:84:
                    34:1a:fd:ad:07:89:6b:8a:a2:30:79:d8:15:70:06:
                    62:71:15:2b:c7:2e:ac:ea:fb:5c:88:fa:c1:a7:9a:
                    31:7a:f5:8c:e2:62:22:a7:1c:98:bb:5e:b5:27:a9:
                    44:da:a6:ac:1b:75:44:20:1a:28:c7:26:71:42:c3:
                    c7:92:32:50:ab:5d:03:b4:2b:16:2c:68:fd:ef:bd:
                    12:41:b9:25:39:0b:12:30:ad:90:31:42:77:d6:b4:
                    d8:67:ce:fa:31:25:a9:46:ff:3e:ba:50:2a:c9:bd:
                    9b:fa:38:0a:34:91:68:4d:79:a5:be:92:03:06:41:
                    48:2b:34:68:b8:60:f2:67:64:6e:26:b0:e4:31:05:
                    25:41:a8:1a:61:65:d8:c6:eb:7c:e4:e6:d5:b9:23:
                    09:d4:b2:8b:09:84:b1:3c:9f:3d:64:c4:cb:d6:95:
                    cf:dc:86:21:fe:c9:d1:6e:9e:0c:d5:0a:5d:3a:15:
                    e1:ea:4d:75:13:97:6f:57:1d:15:25:44:e5:aa:1f:
                    71:fc:e6:4a:1c:67:11:77:6b:55:4c:ac:16:f9:f4:
                    e0:39:b5:00:73:b9:c6:d4:2a:af:20:b2:a4:9e:50:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:50:21:3D:89:D5:59:7A:9D:AA:6B:23:AF:10:B1:FB:63:5D:80:A3
            X509v3 Authority Key Identifier:
                keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:a0:9d:1c:f4:02:e1:71:ea:47:4c:77:b2:7e:fe:fb:7b:
         7e:80:84:38:fa:8a:6a:05:58:b0:ee:eb:25:13:3d:7b:fe:02:
         a9:b9:1d:c3:99:8a:b0:c0:36:97:d4:b4:ac:aa:4b:3b:fb:6b:
         cf:ae:40:5e:ec:c5:35:fe:ab:8a:31:21:af:95:b8:cb:2c:ca:
         09:57:a6:07:cb:b7:2b:3c:9b:7d:e2:5a:e4:b8:60:e6:3a:d0:
         bb:d2:3d:2d:04:e6:53:f9:2f:05:ee:44:eb:22:d4:c5:bb:cf:
         8f:9c:71:e4:c6:37:44:0b:38:03:b6:bb:cd:c4:af:05:a0:56:
         98:40:2a:84:58:9a:5f:ba:e8:ea:56:84:31:7d:40:54:5d:cf:
         e7:48:58:78:3d:99:76:40:d2:dc:08:41:5d:e4:37:36:c2:38:
         5c:c5:df:d9:56:a2:8d:52:63:65:95:bc:46:a8:e2:d4:b4:42:
         8d:d0:2f:c1:97:90:91:a6:56:16:8c:72:8d:25:cb:6c:6b:3f:
         0d:dd:e1:21:07:3a:cc:de:84:83:c4:14:27:35:8d:97:6f:96:
         a3:45:ab:63:75:10:1f:30:49:7a:57:19:b5:8a:01:ba:9c:10:
         9d:09:6c:b8:de:58:5f:07:65:cd:73:43:3c:20:fc:66:5b:43:
         92:6d:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:52:23 2024 by rpki-client on console-ams.rpki-client.org