Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
File:                     wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json)
Hash identifier:          oTGjM3U6Ir4UOsF2pkG+DyFPXAqffB7zERyObw+65Io=
Subject key identifier:   E7:F5:91:95:11:D2:4C:FE:35:81:A9:94:D0:A1:63:64:78:94:61:C5
Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
Certificate issuer:       /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Certificate serial:       0194BA841D9FB36761D46B19315433056DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
Manifest number:          0EDF
Signing time:             Fri 31 Jan 2025 04:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:07 +0000
Files and hashes:         1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: FrEg179ReE/P5Twbx3/oTpRD/qxFJ5gxWc2S3HNFoJU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:1d:9f:b3:67:61:d4:6b:19:31:54:33:05:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
        Validity
            Not Before: Jan 31 04:00:07 2025 GMT
            Not After : Feb  1 04:00:07 2025 GMT
        Subject: CN=e7f5919511d24cfe3581a994d0a16364789461c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:f6:54:c5:ef:c3:29:08:73:81:df:11:b4:
                    2f:b5:f6:4c:cd:18:cc:da:b6:c8:3f:aa:8a:00:39:
                    80:b6:55:0e:24:12:e4:56:4f:84:c3:2d:cc:61:33:
                    9a:d9:ac:53:a8:07:2a:26:31:9c:93:96:81:09:89:
                    63:7a:00:40:c0:3d:08:b7:ea:34:8c:89:4f:6a:15:
                    cd:a3:80:79:d9:75:33:2e:53:0e:25:da:97:8d:c8:
                    12:5e:ad:9a:e6:54:cb:0a:c0:15:3e:61:9c:08:9a:
                    f7:c3:bd:92:16:0e:3f:88:ac:d0:7c:5a:8a:3b:b9:
                    38:c3:f7:7c:8a:a6:bb:28:df:a8:e5:e3:15:4c:97:
                    28:d1:58:02:e9:86:3f:79:b1:30:c7:c5:25:0f:b9:
                    89:89:7f:22:9f:d0:29:7e:96:a3:6e:61:9f:01:fe:
                    22:f6:dd:f7:ac:fa:6a:22:b5:ef:21:a0:26:23:fd:
                    0f:1a:21:c2:df:c2:9a:38:ae:c7:1e:91:10:f4:90:
                    fd:1d:76:ac:76:b0:e9:a9:15:87:45:32:0f:72:7b:
                    31:db:2b:5a:00:49:40:16:e4:0b:ca:68:8d:39:49:
                    8c:3d:f4:a1:d5:2a:2d:81:45:e7:34:88:73:88:5c:
                    3f:20:fe:e4:fa:5d:c7:c0:8e:4d:50:e9:11:c1:3d:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:91:95:11:D2:4C:FE:35:81:A9:94:D0:A1:63:64:78:94:61:C5
            X509v3 Authority Key Identifier:
                keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:0a:19:11:bb:22:52:9e:37:e0:bd:81:37:c0:ac:6b:77:
         9f:81:d6:ce:75:9a:a9:19:b6:0b:83:dd:dc:3c:85:89:fd:44:
         2f:b1:c0:9a:16:45:d0:58:d7:b4:b0:bc:86:7f:7a:7d:02:1e:
         90:c8:e2:dc:fd:0a:5c:45:b4:18:29:b6:b2:58:f5:b1:df:19:
         79:6e:6e:c7:a1:bd:1d:b4:8d:54:6c:2f:0a:e8:30:69:a7:c0:
         80:af:0c:36:c6:30:b7:fa:5e:0c:24:73:da:32:83:06:7b:f6:
         c8:95:b1:e1:cf:e3:59:ab:21:03:49:79:2f:5d:4d:5d:d5:56:
         c8:48:e8:e4:86:0b:8b:00:e9:f8:b1:52:91:97:f2:6c:ff:fd:
         4b:0b:e3:96:e3:f1:2c:a7:52:39:93:23:42:a8:75:6a:34:a9:
         d1:58:e3:21:53:6a:d8:c0:d8:dd:70:d8:c5:c5:04:67:0c:31:
         3f:6a:e6:b7:6d:58:6a:da:d8:10:ce:db:1e:1e:f1:da:ba:f6:
         55:05:05:87:53:46:8b:5e:4c:48:55:ed:89:ef:20:f1:61:b9:
         0f:2c:6e:57:ff:ea:2d:78:91:21:aa:36:3c:91:70:02:63:3d:
         04:39:c9:46:1e:c6:8e:27:62:21:45:d6:49:f9:a8:0b:1d:b8:
         cc:5c:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:45 2025 by rpki-client on console-fra.rpki-client.org