Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File:                     wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier:          ZfEJUEzasUk8heqNTxgyxuBnJk0MM8DXBWGBiaiWx7Q=
Subject key identifier:   5F:C3:7D:1B:D2:C2:62:2D:B9:94:0D:9E:CA:FF:4E:54:8F:7A:D4:6E
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer:       /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial:       0194BABB5065CBF965D5F8421E41704D8208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 05:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:25 +0000
Files and hashes:         1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: fHwSZ9Btz8pJVvXGNq/uhS7vguTl9LiJvLcYGrLKK6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:50:65:cb:f9:65:d5:f8:42:1e:41:70:4d:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
        Validity
            Not Before: Jan 31 05:00:25 2025 GMT
            Not After : Feb  1 05:00:25 2025 GMT
        Subject: CN=5fc37d1bd2c2622db9940d9ecaff4e548f7ad46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:01:df:2e:59:fc:79:30:d8:24:11:e8:a6:
                    43:3c:e1:71:f7:43:fc:2a:96:03:df:74:4e:e6:5d:
                    7e:75:ea:6f:91:c6:7c:7c:77:77:51:5b:c9:30:7c:
                    60:a4:0c:5b:6e:9b:e2:10:e2:d3:5b:e8:e3:33:1b:
                    28:66:88:cf:2a:16:d5:b9:60:78:72:d8:ec:25:54:
                    31:72:84:56:88:3e:29:1c:8e:cc:81:46:fc:c2:5e:
                    63:16:91:b2:ac:ac:4b:19:87:2a:47:4f:a3:83:40:
                    46:3b:f6:06:83:d9:04:87:02:9c:f9:c4:fe:f8:93:
                    b7:70:c1:c6:59:b5:4e:b7:39:d2:42:03:a7:7a:6f:
                    02:fe:06:61:48:dd:44:a1:a0:c7:f1:5c:d6:a1:b6:
                    01:3c:f4:41:6a:78:6d:4b:bf:2d:64:e7:55:05:66:
                    38:65:cd:85:e9:14:b4:06:07:5d:7c:0c:0e:50:a5:
                    d0:89:08:99:f5:dd:4f:9e:ad:62:f4:56:41:39:03:
                    b0:bd:97:ca:93:91:de:22:83:55:16:cb:44:6e:fd:
                    59:f7:9d:8d:0f:62:45:a2:b1:92:48:0b:f7:fc:84:
                    5d:0e:25:19:73:9c:81:33:55:03:3b:9d:38:ec:c8:
                    38:89:c5:d1:3d:b5:8e:0d:dc:26:94:f2:82:cd:28:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:7D:1B:D2:C2:62:2D:B9:94:0D:9E:CA:FF:4E:54:8F:7A:D4:6E
            X509v3 Authority Key Identifier:
                keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:0e:3d:2f:b6:82:66:45:7b:e6:df:db:8e:61:59:aa:64:
         4f:ef:ef:5b:df:02:bf:f3:8f:85:2e:55:58:bc:9c:b6:16:4b:
         c6:f4:b5:00:1a:a6:f9:cb:31:0a:fe:58:fe:01:1a:05:eb:e8:
         e8:71:4e:54:0d:1f:bc:17:91:4f:f3:85:46:fd:57:19:ac:b4:
         a6:cd:6c:7d:75:1d:9f:c9:77:ec:09:88:a7:e9:f5:23:b1:5b:
         2f:f5:bd:fb:2e:33:ea:89:14:49:f4:f8:f6:2e:95:e6:50:0a:
         d9:ed:a6:7c:85:f4:51:5a:eb:50:14:87:03:ad:3c:b9:27:f9:
         e7:4d:fd:ee:fb:f0:d2:37:5e:3b:1e:ce:e4:c8:0c:53:15:f7:
         bf:e4:dd:61:06:48:52:49:19:48:2b:f9:54:c0:fb:ae:ff:cd:
         74:8f:a6:a1:47:66:20:82:8d:6f:a0:42:4b:9e:c7:10:e8:9e:
         7c:73:9f:e0:cc:13:32:d8:40:74:58:93:26:9b:40:78:3d:f1:
         de:ca:97:11:d2:8a:02:9a:7a:84:ec:a7:a6:2e:74:19:24:fc:
         a1:04:e9:0f:04:97:18:64:dc:56:34:15:62:9f:dc:24:58:20:
         2c:52:9f:a6:ea:64:13:3a:96:f4:48:c0:f3:f8:12:3a:f8:c0:
         41:d3:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:44 2025 by rpki-client on console-fra.rpki-client.org