Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
File:                     W-zw2-0mB946Penmhf1udPvli5Q.mft (raw, json)
Hash identifier:          Lixz8rQinXhhnHjN/BYH/MNQIMC221ltnHGZdHtQj8E=
Subject key identifier:   83:BB:C2:51:0E:A4:D2:CD:EC:81:30:6D:E2:62:1F:81:8A:EA:F7:82
Authority key identifier: 5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94
Certificate issuer:       /CN=5becf0dbed2607de3a3de9e685fd6e74fbe58b94
Certificate serial:       01909501E70E9FCCD9A0CE5E4CD507EEC8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-zw2-0mB946Penmhf1udPvli5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
Manifest number:          08F7
Signing time:             Tue 09 Jul 2024 01:00:47 +0000
Manifest this update:     Tue 09 Jul 2024 01:00:47 +0000
Manifest next update:     Wed 10 Jul 2024 01:00:47 +0000
Files and hashes:         1: W-zw2-0mB946Penmhf1udPvli5Q.crl (hash: qzSgKSO4mkb4EvUocgYugd0pNBcOGGubr/XaeVJdWiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-zw2-0mB946Penmhf1udPvli5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:01:e7:0e:9f:cc:d9:a0:ce:5e:4c:d5:07:ee:c8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5becf0dbed2607de3a3de9e685fd6e74fbe58b94
        Validity
            Not Before: Jul  9 01:00:47 2024 GMT
            Not After : Jul 10 01:00:47 2024 GMT
        Subject: CN=83bbc2510ea4d2cdec81306de2621f818aeaf782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:ad:62:fd:06:06:0e:37:7c:41:83:a3:53:
                    d8:ad:a9:00:8c:c5:95:40:94:41:41:43:f3:1b:3d:
                    88:3f:3b:f3:41:26:2b:e6:df:b3:ec:89:2d:3a:0d:
                    b4:45:63:92:cf:85:d5:4b:b6:c5:eb:42:20:34:a0:
                    0a:01:36:94:dd:cb:a5:da:f4:06:92:fb:fb:74:f4:
                    0e:a4:68:ad:65:2f:b3:b5:5e:95:ab:af:2b:b7:44:
                    f0:cb:5b:2d:59:1c:df:77:d3:5a:6d:d5:f1:7a:a3:
                    e2:27:f2:fb:af:ab:9e:d6:1b:cc:1a:ff:0b:fb:a1:
                    15:38:06:aa:74:13:59:52:45:e9:ce:51:84:68:12:
                    8b:2c:8a:8d:e3:d5:54:40:51:2a:c8:48:d2:58:90:
                    bd:9e:9e:64:3b:41:aa:0f:92:1e:73:a1:a0:68:21:
                    35:70:6c:87:a3:7f:0e:b0:f6:69:01:d1:f6:87:ed:
                    be:ee:cc:66:c5:a1:fb:49:66:02:dd:04:02:e3:15:
                    ff:b3:87:07:23:07:83:fa:10:bd:74:02:e3:38:86:
                    6b:de:70:4d:3e:5b:65:9b:0d:5b:8d:fb:35:e5:bf:
                    15:2e:12:52:3e:7d:d0:e1:c8:d6:0b:25:4f:97:45:
                    14:a6:4b:d1:a8:f1:9b:02:bb:16:15:cb:eb:62:92:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:C2:51:0E:A4:D2:CD:EC:81:30:6D:E2:62:1F:81:8A:EA:F7:82
            X509v3 Authority Key Identifier:
                keyid:5B:EC:F0:DB:ED:26:07:DE:3A:3D:E9:E6:85:FD:6E:74:FB:E5:8B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-zw2-0mB946Penmhf1udPvli5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fcd977-fd41-4b71-b26f-8077816d304f/1/W-zw2-0mB946Penmhf1udPvli5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:46:dd:1b:bf:ef:1e:ed:db:be:18:3a:46:46:c7:51:f7:
         b8:df:1e:9c:9e:a0:b6:33:44:a5:a5:a0:00:97:ec:7a:fa:de:
         a7:0b:0f:e4:fa:19:99:54:8d:7e:43:95:88:49:01:f7:b3:26:
         0c:2a:70:2c:89:35:42:3d:d9:79:1d:17:26:43:3e:c9:a0:c7:
         78:72:b4:6c:53:06:a6:ee:1c:41:1e:35:e2:74:5f:a9:e2:4c:
         06:b7:e5:8b:8c:97:56:36:be:1f:7e:bb:a1:60:7b:99:bb:7d:
         6f:3d:32:87:ab:cd:47:24:67:15:ce:cb:77:8a:b3:70:76:da:
         38:90:bd:d7:e7:6d:1c:8d:20:64:8b:ed:bc:fd:b2:b0:4c:de:
         67:89:3b:5c:db:2a:f9:76:f5:69:e8:dd:06:a8:49:3a:95:4a:
         4d:47:47:27:c8:1d:93:6a:b8:9b:ac:b3:d2:f3:64:ad:d2:e0:
         5b:ed:d2:ca:cf:61:02:d0:67:c3:39:bc:a2:c9:35:e3:61:22:
         5e:90:a4:44:ca:5a:a1:a5:1b:c5:bb:cb:72:f3:54:fc:29:29:
         05:f6:37:8b:c5:27:32:34:50:02:84:60:68:29:31:60:28:96:
         40:04:fa:c5:0b:05:d5:8f:df:41:ca:6d:66:f5:34:ac:98:1a:
         b4:ed:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:34:26 2024 by rpki-client on console.sobornost.net