Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          VJEuiRliJqbnF7Qjq8GBcUdLFXZaTErvTxvfDSbZVuE=
Subject key identifier:   47:F3:7C:6B:B8:49:5E:F4:4B:13:11:E4:5D:B8:A3:C5:11:FD:9A:1C
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       0196550064F5EAC4AA7932392774B0C67442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          01AB
Signing time:             Sun 20 Apr 2025 21:00:11 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:11 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:11 +0000
Files and hashes:         1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
                          2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: B55Beom6HY92f2b3edqrRqxUqwQASqDxr4E82Y3ljYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:64:f5:ea:c4:aa:79:32:39:27:74:b0:c6:74:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Apr 20 21:00:11 2025 GMT
            Not After : Apr 21 21:00:11 2025 GMT
        Subject: CN=47f37c6bb8495ef44b1311e45db8a3c511fd9a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:df:15:6e:73:50:a4:9c:86:52:2d:1f:56:
                    99:47:4d:f2:6f:d5:d8:90:0d:96:30:0a:8d:fd:83:
                    aa:5a:2e:a3:b0:ca:ca:e2:f3:53:95:b7:33:e2:ad:
                    08:a9:f5:a3:32:a4:83:f6:c1:ef:fb:bb:e8:f1:eb:
                    66:aa:74:40:b7:02:2d:ce:dc:6c:f9:14:c6:02:5b:
                    61:0c:1e:9e:6d:c9:2b:b8:1a:46:32:5d:1d:4e:d1:
                    0d:96:c9:52:dd:a7:30:9b:87:90:ef:76:10:56:8b:
                    cb:bb:f8:4a:0f:df:58:7a:c9:62:f8:f7:c9:66:d5:
                    4a:6c:c5:e5:32:2d:3a:ce:9f:43:bc:56:c7:fa:24:
                    e8:ba:ef:5a:26:34:da:35:d8:98:ec:63:6c:46:37:
                    a4:d6:f5:9b:26:ca:d1:8e:b5:86:f2:71:f4:54:b7:
                    83:3b:ad:fb:81:8b:97:4c:e7:77:43:07:4b:10:48:
                    5c:0d:77:b1:ee:74:25:7f:0e:25:d5:e3:75:ac:63:
                    87:69:1d:40:88:43:50:3f:06:6f:40:78:7c:ca:1c:
                    04:e9:0c:97:a3:77:a1:ed:27:9e:b1:c2:81:37:6f:
                    8a:51:e5:a1:36:3b:75:c2:1e:36:aa:9c:5b:07:cf:
                    69:88:4f:21:b1:af:a9:b9:27:4e:f8:b7:92:91:40:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:7C:6B:B8:49:5E:F4:4B:13:11:E4:5D:B8:A3:C5:11:FD:9A:1C
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:5b:1b:94:73:e4:4f:5c:f7:24:8b:b8:4e:b2:ab:94:09:
         13:38:c2:9f:fd:90:1b:59:a4:63:68:fc:71:85:aa:dd:ed:11:
         4d:ff:c7:47:b3:8b:ce:fb:a4:19:25:eb:03:7b:bd:48:d8:7b:
         88:c5:e6:86:25:f0:cd:9e:6c:85:41:68:6e:a1:1b:43:d6:c0:
         4d:ef:fc:64:11:c7:ff:fa:ff:d2:b0:5b:6f:32:38:df:02:e7:
         54:a7:41:23:bf:62:04:ed:73:12:d4:5d:dc:7c:c7:ad:9b:f6:
         7e:3a:17:c6:4f:7d:6d:46:9c:5d:c3:aa:d2:c1:8e:35:85:dc:
         5f:1c:ee:b8:e9:01:6d:d9:9f:76:6b:08:fa:92:dd:ea:03:fd:
         9d:bc:9e:81:2c:67:af:96:28:5a:39:d3:9f:ac:22:34:25:81:
         b3:8f:d7:48:a9:21:63:4f:ae:11:d9:c2:0c:54:d4:05:4b:37:
         c8:37:e9:65:3e:7d:a1:6e:e1:ce:34:8e:82:ec:d7:b5:1f:7f:
         5b:c8:e7:90:54:85:37:fc:30:7a:81:6f:99:93:72:86:77:ec:
         f2:f3:b5:30:c2:41:58:a1:3d:15:97:41:ef:08:34:d1:a6:c1:
         ca:a5:9a:ec:d5:01:1b:93:dd:dc:9e:4d:a7:13:54:44:a5:c1:
         48:15:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:38 2025 by rpki-client