Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier:          4zGMBs4aM5k5Hd/XclV/Go4AQJS46rasMbevr5dqUFo=
Subject key identifier:   E6:6A:5A:BE:D7:69:90:39:B0:1A:EB:81:E2:8C:F6:79:73:A0:52:6C
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer:       /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial:       01964D7E3501E76A4F740323FD3B41EB5844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number:          0906
Signing time:             Sat 19 Apr 2025 10:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:38 +0000
Files and hashes:         1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: HycWVmeWnEOOGnZpc40Wa8SV6ZnuckF46Ag+FEQWdVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:35:01:e7:6a:4f:74:03:23:fd:3b:41:eb:58:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Validity
            Not Before: Apr 19 10:00:38 2025 GMT
            Not After : Apr 20 10:00:38 2025 GMT
        Subject: CN=e66a5abed7699039b01aeb81e28cf67973a0526c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:d0:5a:a5:1d:16:09:48:31:98:a4:61:ba:
                    03:4a:fb:e6:21:78:55:9d:22:13:68:71:e8:9c:f1:
                    e1:fc:57:77:42:d5:20:1d:78:25:8b:ac:9d:ee:5d:
                    57:88:4f:e4:d7:91:08:d4:e4:fe:b2:59:b7:88:3c:
                    3f:b3:7d:10:c0:5c:91:51:55:8e:cd:0d:f9:7c:77:
                    c9:41:1a:14:a5:b2:11:14:14:0c:5c:44:db:6e:15:
                    56:a1:0b:ee:49:a4:5c:25:b6:80:69:88:28:b4:c6:
                    45:a2:4d:af:55:7b:19:4c:2e:a9:1d:1e:9b:fe:6b:
                    26:c1:06:0b:f4:ae:e8:0d:6c:3f:77:2c:38:02:ec:
                    c7:2a:b3:69:b3:93:4f:c7:41:b0:89:0b:d9:f7:66:
                    86:8b:45:7d:a1:df:cc:8e:a0:8d:15:df:9f:e0:4d:
                    2b:86:cd:3a:fa:cd:d9:5b:87:b3:b2:f4:4f:69:9e:
                    dc:b3:3a:0b:31:40:fe:ea:3d:16:d2:27:5e:1d:01:
                    df:d0:19:74:34:e1:8c:fd:9d:dd:41:da:32:c2:53:
                    82:1f:dd:bf:42:26:86:cc:6d:92:ba:a8:75:da:a9:
                    ec:00:ef:4d:81:14:6d:bd:21:d8:5e:09:14:02:fb:
                    f2:d8:c0:82:3a:bf:c3:ae:e8:64:97:7e:a1:d8:af:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:5A:BE:D7:69:90:39:B0:1A:EB:81:E2:8C:F6:79:73:A0:52:6C
            X509v3 Authority Key Identifier:
                keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:69:34:e8:db:d7:65:99:69:3d:58:cc:af:81:e8:ba:56:3e:
         1f:76:02:3d:d6:76:e0:4a:b1:29:52:72:ba:c9:c0:3c:33:e0:
         26:aa:f1:6b:ef:29:59:18:37:50:77:ab:21:7a:b9:fb:bb:bb:
         9a:fa:a5:09:f1:7c:50:28:39:10:ce:b7:80:ab:64:bd:8b:0e:
         06:3f:69:3d:cb:24:6a:b3:aa:f5:f0:13:10:c2:5d:7f:78:20:
         af:ab:f7:49:f2:0e:06:63:20:67:0c:e0:28:e5:96:5c:03:90:
         0b:d5:09:0c:d7:0c:c0:0c:02:65:a8:06:70:6f:88:4c:4b:0f:
         16:10:3a:2f:e6:1e:74:ae:15:19:4e:a2:e9:93:68:da:2a:75:
         5a:d2:cb:d3:8d:22:29:38:7a:58:64:4f:8d:a5:cb:eb:b4:23:
         7b:64:82:59:33:d6:31:b1:04:f3:8e:29:d2:96:fa:2c:a5:ac:
         85:90:71:80:46:9f:13:2b:d3:32:f5:e5:13:ef:4b:59:bb:1e:
         25:76:6a:ef:7d:73:d2:60:27:fb:19:6e:00:e4:8a:08:96:fd:
         0a:8b:af:e1:48:b6:ad:a8:44:29:9b:40:d3:f1:c6:33:f5:2b:
         aa:15:1a:03:e2:52:c2:8a:92:b6:8d:2f:89:72:ed:ed:51:b6:
         b7:4b:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:34:48 2025 by rpki-client