Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft
File:                     WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft (raw, json)
Hash identifier:          oCiICvHckv5Nd5PlLOwHqvKrYMi1uzg2oUFSPS7HlXI=
Subject key identifier:   80:DF:C2:09:23:78:93:2F:5E:08:1C:5C:C1:9E:AA:E8:18:5B:DD:E3
Authority key identifier: 58:FC:1A:5E:65:E9:23:90:BB:FC:FD:89:7F:C5:CB:A6:D8:CE:1D:31
Certificate issuer:       /CN=58fc1a5e65e92390bbfcfd897fc5cba6d8ce1d31
Certificate serial:       0191FAED593FD96AF10C7ADDBF4E99C9B631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPwaXmXpI5C7_P2Jf8XLptjOHTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft
Manifest number:          012C
Signing time:             Mon 16 Sep 2024 13:02:24 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:24 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:24 +0000
Files and hashes:         1: WPwaXmXpI5C7_P2Jf8XLptjOHTE.crl (hash: jyFnpL3STQgBvmEEmnudCo/8PDyeEE5vWUD9POQUUEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPwaXmXpI5C7_P2Jf8XLptjOHTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:59:3f:d9:6a:f1:0c:7a:dd:bf:4e:99:c9:b6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fc1a5e65e92390bbfcfd897fc5cba6d8ce1d31
        Validity
            Not Before: Sep 16 13:02:24 2024 GMT
            Not After : Sep 17 13:02:24 2024 GMT
        Subject: CN=80dfc2092378932f5e081c5cc19eaae8185bdde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:01:a7:9f:40:0a:70:0c:9c:be:8f:da:4e:
                    1e:df:12:02:f6:ef:1a:16:0a:e0:5e:17:9a:f5:9f:
                    a3:a1:f7:11:19:e1:99:d1:42:5f:a1:da:af:f0:c6:
                    60:37:d9:48:72:bb:04:e3:47:52:20:a0:12:26:a4:
                    94:5d:19:4b:5d:52:af:47:d8:0f:79:f7:e9:d1:f5:
                    50:f8:6c:b5:c7:f1:5a:c1:d4:15:f9:74:a7:4a:80:
                    bd:00:90:2b:42:19:69:67:a2:b0:01:c5:5f:2d:07:
                    9c:ce:42:b5:88:d9:82:18:ff:97:60:5d:71:69:94:
                    96:cd:3b:55:4f:55:59:85:60:74:ae:a9:34:ff:e4:
                    ee:9f:90:22:a1:af:0b:ee:6e:c7:f4:83:fa:17:7c:
                    27:3a:59:57:1c:b7:a8:e6:7f:a0:38:b5:d0:c5:12:
                    fa:a1:c6:cc:3b:44:51:63:e2:29:e1:93:3c:f8:62:
                    13:6a:c9:c0:06:b1:2b:95:41:fa:46:e1:8f:cf:b6:
                    19:2e:60:be:54:18:7e:60:56:dd:b5:a4:16:ce:0b:
                    b7:1e:a6:78:d9:e7:be:f6:ab:01:e5:52:45:a7:48:
                    9d:cb:00:be:1e:f2:7e:ae:3d:3d:7d:42:c6:ed:22:
                    2e:57:b6:7b:76:31:1c:fd:37:26:83:47:9b:f3:bd:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:C2:09:23:78:93:2F:5E:08:1C:5C:C1:9E:AA:E8:18:5B:DD:E3
            X509v3 Authority Key Identifier:
                keyid:58:FC:1A:5E:65:E9:23:90:BB:FC:FD:89:7F:C5:CB:A6:D8:CE:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPwaXmXpI5C7_P2Jf8XLptjOHTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a933fd-74b9-46f8-9e5d-abe1696bf06c/1/WPwaXmXpI5C7_P2Jf8XLptjOHTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:ec:c7:f9:a8:b8:71:52:3f:3b:75:13:0b:2b:fb:44:dc:
         32:ef:37:14:02:42:57:15:21:e3:3a:dc:22:39:b3:ae:9e:ad:
         f5:d5:84:a0:10:a0:6e:fc:12:33:ca:e8:68:ba:79:3c:ef:f5:
         f8:8a:0d:b4:65:9c:04:ef:80:35:5a:7a:92:43:1a:e2:39:a2:
         6a:74:bc:b4:2d:61:54:91:9f:a9:e4:07:85:d2:97:25:f3:15:
         82:e2:07:f5:86:b1:9c:45:96:83:9b:35:4a:16:35:48:80:e4:
         ba:b2:a0:c0:61:25:87:a1:17:47:21:27:a3:8e:70:87:51:34:
         50:1d:20:49:ad:bc:06:16:78:c2:23:59:20:cf:5f:2c:94:3d:
         21:24:86:01:3d:43:d7:ca:05:59:cd:ae:89:20:f5:24:d1:54:
         a6:6d:36:f5:f7:98:4e:5e:49:0e:dc:10:77:1e:1b:13:d5:28:
         df:ef:26:8d:59:63:05:d7:1a:68:19:13:33:45:ea:b1:f1:d1:
         96:bf:02:f3:e7:ad:7a:07:e4:1a:91:48:fb:66:8a:2a:5a:5b:
         f3:97:9d:d2:6d:ef:86:f2:c9:b0:b7:c7:aa:bc:9f:a5:9c:da:
         43:d2:cb:bd:e2:7e:8b:11:ac:53:2c:34:65:6d:46:28:89:50:
         f9:41:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----