Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
File:                     wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft (raw, json)
Hash identifier:          niX3Hb6HygED20rwJ683KRVEsNvA9YofYGiKfGs9xxU=
Subject key identifier:   C9:E3:2F:1A:16:8D:0C:F8:2C:C8:2B:AC:08:64:BE:D8:0A:3A:CA:91
Authority key identifier: C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86
Certificate issuer:       /CN=c022d3d506c8feb4936854b13a7bb97f9b1c9786
Certificate serial:       018F885B519E12E8E54F35B27DCD0B4A514E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
Manifest number:          0190
Signing time:             Fri 17 May 2024 21:00:37 +0000
Manifest this update:     Fri 17 May 2024 21:00:37 +0000
Manifest next update:     Sat 18 May 2024 21:00:37 +0000
Files and hashes:         1: wCLT1QbI_rSTaFSxOnu5f5scl4Y.crl (hash: 60RSj24iT29TvItbSJofLRsfSSyzhABUTSc9EUQl4iQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:51:9e:12:e8:e5:4f:35:b2:7d:cd:0b:4a:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c022d3d506c8feb4936854b13a7bb97f9b1c9786
        Validity
            Not Before: May 17 21:00:37 2024 GMT
            Not After : May 18 21:00:37 2024 GMT
        Subject: CN=c9e32f1a168d0cf82cc82bac0864bed80a3aca91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:e7:10:61:ff:6f:aa:1c:64:6a:bf:d0:47:
                    c6:d2:f5:82:23:1a:5d:15:c1:0d:7c:5e:c0:16:27:
                    0d:3e:3a:db:11:97:ee:c4:ff:af:d5:7c:1c:7a:e3:
                    f7:5d:20:15:a4:9e:17:de:f1:e8:d4:35:9a:9f:25:
                    6f:66:f9:0e:d4:94:af:ad:d9:24:61:73:85:d3:e4:
                    f9:08:c8:08:32:6f:81:18:31:3b:a3:82:b4:79:bc:
                    93:3d:24:06:06:62:bf:83:65:ba:a8:c8:97:22:57:
                    d2:19:35:5d:39:19:bc:e4:a5:8a:eb:88:c7:cd:cc:
                    ad:a2:c2:16:81:5a:fa:20:4b:fd:c2:53:2c:69:3e:
                    eb:2f:5a:57:cb:dd:cc:0f:aa:2a:b9:ba:49:29:5c:
                    2f:b2:a5:09:1d:3b:1e:b7:c8:77:19:66:2d:41:c9:
                    95:54:61:7c:ac:55:98:a8:f2:24:c2:f4:ab:fd:b2:
                    6d:d6:a7:b2:5c:d2:c0:3d:be:a4:4d:48:d3:26:0c:
                    16:ab:cd:cd:12:b2:d9:65:b7:23:40:cc:3e:5c:fc:
                    66:0b:cc:3c:8d:e3:e4:f6:fb:72:31:72:ec:ae:87:
                    7c:2b:b9:5e:0a:15:27:f3:d6:eb:10:e9:84:0f:69:
                    62:25:23:a0:7b:7b:1d:3d:5f:7f:3e:ce:fa:5c:bf:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E3:2F:1A:16:8D:0C:F8:2C:C8:2B:AC:08:64:BE:D8:0A:3A:CA:91
            X509v3 Authority Key Identifier:
                keyid:C0:22:D3:D5:06:C8:FE:B4:93:68:54:B1:3A:7B:B9:7F:9B:1C:97:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCLT1QbI_rSTaFSxOnu5f5scl4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/80d52f-92d5-4750-a56f-c05b34ee8996/1/wCLT1QbI_rSTaFSxOnu5f5scl4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:10:0a:f3:20:c0:b6:36:a4:e3:15:1d:33:b1:6e:3a:74:0b:
         eb:5b:73:07:39:15:cc:b2:6e:36:2c:c6:bc:3c:91:9b:cc:78:
         1d:84:00:30:10:0a:ca:6b:5f:07:26:c0:84:f3:f1:0f:03:9b:
         56:64:28:9a:46:92:97:6b:66:2d:99:eb:10:c3:9b:e6:f1:7b:
         5a:8b:8f:b6:2c:95:f3:f1:bc:25:c0:c1:0f:86:88:55:06:c9:
         3b:ee:59:fb:67:03:4e:e3:22:fd:d1:91:77:89:26:28:e1:bf:
         b5:f2:f7:e4:61:01:a2:64:33:ce:54:94:cd:1c:46:43:65:da:
         ab:5d:fc:9b:57:f4:04:29:8a:4b:c8:06:1b:53:35:9f:c3:32:
         5f:24:d9:a6:cd:16:a5:8b:bd:db:86:25:44:bc:c6:51:24:ac:
         f2:50:7b:e3:0c:c8:7e:7e:4d:4e:56:53:a1:a3:82:5a:50:24:
         21:ae:04:d3:7d:35:18:db:8c:e1:2c:9b:fa:c7:45:97:bd:0f:
         5f:55:47:68:7e:e5:69:1b:bb:67:31:cf:5a:48:fb:af:70:2e:
         c7:81:e4:a4:d3:fa:49:b3:aa:b8:35:10:b7:57:62:6e:83:83:
         82:0b:b3:ba:fd:6c:b6:7f:e3:14:97:02:86:35:9e:c1:3a:00:
         dc:07:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:50 2024 by rpki-client on console-fra.rpki-client.org