Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          LoK96/wMFFp6/Sb5Q5dfEJEWyQhPBnOtwVCpKxPy0lE=
Subject key identifier:   41:FF:9D:8E:88:1F:A1:62:A3:ED:93:D2:5C:B7:7D:24:81:B4:27:1E
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       018F874A8767435FCD0BC1720B03BB43BBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          0247
Signing time:             Fri 17 May 2024 16:02:39 +0000
Manifest this update:     Fri 17 May 2024 16:02:39 +0000
Manifest next update:     Sat 18 May 2024 16:02:39 +0000
Files and hashes:         1: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: cJM8R7uB/I0xshpYb5XURRFzF2Z39ljpN6p2Kho1yQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:87:67:43:5f:cd:0b:c1:72:0b:03:bb:43:bb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: May 17 16:02:39 2024 GMT
            Not After : May 18 16:02:39 2024 GMT
        Subject: CN=41ff9d8e881fa162a3ed93d25cb77d2481b4271e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:29:50:4b:f7:97:1e:f3:57:07:c5:d0:86:
                    a9:63:11:d7:9a:8f:e8:2f:d1:3d:6a:33:69:3b:a8:
                    b2:0e:f5:fa:49:69:d5:ed:20:11:64:93:6f:fc:85:
                    ce:d2:29:bb:28:4c:66:16:ef:94:1d:b8:4f:ef:3c:
                    2a:86:75:99:06:a2:7a:5c:f0:2a:ac:fa:ae:da:35:
                    d9:ea:59:aa:38:16:50:76:11:4c:c5:de:e0:36:56:
                    c1:36:6a:d4:cc:b0:98:31:0e:63:2a:3e:52:6f:19:
                    ca:4a:a2:ef:02:21:de:fd:35:d2:ce:f1:f0:96:1c:
                    2a:7f:87:7e:fc:de:7d:7f:b2:32:5e:6f:eb:be:06:
                    19:8d:e5:12:e9:48:da:fc:a5:27:ac:a3:8f:86:37:
                    39:84:c6:d0:9e:30:ef:77:94:aa:53:95:63:68:fd:
                    92:d5:94:c2:ea:ae:b8:78:66:a8:47:80:71:6f:60:
                    13:50:b2:88:9e:5f:72:6c:22:78:5f:f7:84:82:0d:
                    7b:f2:6c:a0:ee:fd:a1:f2:2d:d7:35:fc:92:ce:84:
                    5a:ff:2d:27:e1:02:09:0b:80:9c:32:b5:6a:78:81:
                    ad:f7:0c:69:54:ce:38:1b:93:1f:50:75:3d:f6:8d:
                    85:12:22:7f:80:00:9d:c7:08:d6:72:a8:94:1c:4b:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:9D:8E:88:1F:A1:62:A3:ED:93:D2:5C:B7:7D:24:81:B4:27:1E
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:87:8b:b1:16:66:48:6e:e8:85:b7:25:7f:0e:67:c8:b5:5a:
         0d:1a:54:07:85:7f:ea:fc:dc:8c:1f:70:0e:2f:93:01:af:1e:
         36:2f:1a:a7:6e:ef:03:fb:b9:3e:9e:8a:03:b1:d0:79:e7:17:
         0e:5b:f5:1d:09:ac:3d:fc:fe:75:e6:62:36:be:55:34:db:9c:
         55:05:5f:e7:bf:e2:97:00:85:c1:20:67:8c:c1:0d:2b:00:56:
         af:a6:bb:b0:63:b6:62:fb:0d:d9:f7:00:9c:94:b9:a7:a0:9a:
         26:81:6b:ec:a9:65:00:cb:53:41:c4:52:b8:5b:9d:b4:60:8d:
         4a:33:a0:1d:24:a3:61:11:88:4a:31:3b:cf:17:c1:01:a1:61:
         80:8b:c4:83:4f:cd:ad:a6:b8:ed:a3:44:68:51:f9:c0:53:35:
         71:49:78:3e:51:ea:2b:c4:b2:f6:02:4f:99:63:9d:f6:0c:3f:
         42:e6:21:b0:13:f6:e9:f1:51:ad:c7:8b:48:d2:3b:a0:c2:6e:
         73:e6:f3:bc:49:55:da:41:b1:4d:b4:c6:e5:cb:33:00:74:d6:
         e6:04:63:63:20:c4:a9:b5:e8:0a:6b:8d:fb:0c:8d:7d:3b:4d:
         8d:88:65:bb:5b:87:ab:86:b4:8d:f0:8a:ca:62:a3:a7:21:ff:
         55:67:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:17 2024 by rpki-client on console-ams.rpki-client.org