Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          9HVA297oU9Fa5o7GvRHixn7MbzZpZ+2lIyRSfb1ZKeY=
Subject key identifier:   32:06:B3:E8:8D:ED:65:17:C4:01:F6:AD:C8:B6:28:45:34:DD:0A:58
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       0196545BA1CF1C78CE875D081CFB20B2413E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          090C
Signing time:             Sun 20 Apr 2025 18:00:13 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:13 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:13 +0000
Files and hashes:         1: HVZZgTt0qImB-OIxZYe0LV_oR4c.roa (hash: CxMOuogiyPkbYMbQPW67m4ttU2r00+UG5PTmwlkEZ0c=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: nj52OpIwxNnDegQ7ScYUHkqPWY0eMyYqs6GRkkIos6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5b:a1:cf:1c:78:ce:87:5d:08:1c:fb:20:b2:41:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: Apr 20 18:00:13 2025 GMT
            Not After : Apr 21 18:00:13 2025 GMT
        Subject: CN=3206b3e88ded6517c401f6adc8b6284534dd0a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:da:fb:0c:1d:b9:4e:ea:9d:df:57:e0:8c:
                    79:a2:a8:f9:67:b1:94:4e:1b:3f:3c:93:59:86:1b:
                    7f:b5:2d:07:31:da:c4:dd:cc:1f:7c:cf:46:f8:6f:
                    4d:97:2f:5d:76:84:b0:a9:88:73:3d:c1:a9:f1:73:
                    30:6e:a6:ef:d1:9d:28:99:6d:64:12:8c:af:cb:45:
                    a4:e9:eb:03:68:db:59:77:c4:4e:67:ad:f8:33:cc:
                    0e:2b:e5:ad:fa:78:da:65:10:c6:24:75:d7:29:f3:
                    2c:91:c5:89:36:59:15:92:67:2f:b4:fe:b7:50:ca:
                    fd:12:d2:0f:51:91:87:34:01:f8:f9:50:99:0e:7b:
                    6f:19:8d:82:f3:1c:77:58:e0:e5:7f:b7:82:01:fa:
                    96:a1:bf:d1:cc:1a:1b:0c:9b:23:31:1f:84:fc:92:
                    ef:27:6b:a5:94:69:27:f9:eb:fa:21:8f:b3:32:39:
                    5b:06:ef:db:08:1c:5f:c2:b5:2b:93:6f:22:eb:f2:
                    7b:ec:2c:52:fb:38:4d:6e:a6:5e:53:8e:35:2c:33:
                    c8:fe:2b:41:c7:b5:62:99:52:4a:5c:1a:68:05:a5:
                    8b:28:cf:72:84:8b:55:6c:1f:af:62:44:80:3d:b6:
                    fd:96:57:26:07:37:32:1b:ee:f7:ba:7d:61:7a:9f:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:06:B3:E8:8D:ED:65:17:C4:01:F6:AD:C8:B6:28:45:34:DD:0A:58
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:51:ab:ba:0e:a4:32:04:49:81:7a:a6:e6:f7:57:18:8e:5c:
         30:58:37:99:47:b1:dd:3d:40:0d:63:16:ba:89:cb:c9:39:d5:
         e3:b5:43:9c:54:06:92:2f:84:0b:3a:2b:b3:ac:a1:25:0c:2a:
         48:72:f8:f6:b8:cd:4a:3d:ad:99:0b:e6:9f:b1:b3:ce:79:ee:
         64:47:d7:69:99:2d:b1:74:b7:13:db:74:a8:58:ae:15:e8:cc:
         82:7d:90:0c:c9:c4:ba:30:2f:0d:1d:1a:92:cb:d1:75:d0:ec:
         14:78:64:d3:1e:cc:00:09:c4:8e:27:db:ce:2c:71:7d:b3:c1:
         45:3f:e7:70:f2:e7:58:0f:e1:5a:fb:c5:a1:82:56:c9:21:9c:
         4e:1e:00:0b:9a:48:b3:1d:99:9d:d9:b6:18:75:57:f1:d5:71:
         c6:1c:82:c3:b1:1e:bb:b2:e9:dd:b7:ec:52:e9:c0:31:df:58:
         1c:0e:cc:57:8e:6d:42:5e:17:28:df:d2:c7:8e:a0:0d:3e:64:
         ea:bc:cc:7b:60:23:c7:93:65:17:c2:46:ee:0b:53:00:64:1a:
         c0:75:2b:18:3c:a9:78:00:7c:3b:a1:79:50:63:bd:8a:1c:51:
         d5:d1:bb:ed:5b:63:d5:bb:c9:68:2c:40:92:bb:e6:d1:89:86:
         64:dd:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:04 2025 by rpki-client