Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          qTwauLk3tMSVv4KTULmB23JRbyF5Brl8uDwWUqAoHT4=
Subject key identifier:   08:3D:6A:D3:AE:1B:4C:C6:75:50:05:8E:B6:F1:C4:59:55:37:36:C6
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       01964CA27227379F7FA208D121676F64687A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          1192
Signing time:             Sat 19 Apr 2025 06:00:36 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:36 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:36 +0000
Files and hashes:         1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: +WEXQIFYFxhzs/1kDZ4/MiWmOVKCRC7uspkZJR7cKz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:72:27:37:9f:7f:a2:08:d1:21:67:6f:64:68:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Apr 19 06:00:36 2025 GMT
            Not After : Apr 20 06:00:36 2025 GMT
        Subject: CN=083d6ad3ae1b4cc67550058eb6f1c459553736c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:8f:ef:db:38:03:ed:17:7c:69:d3:6a:45:
                    e1:b6:12:3e:40:ac:c1:1d:91:0c:ed:32:94:10:2e:
                    9f:e0:ba:df:ac:6c:54:71:0a:ed:73:34:45:9e:c1:
                    4b:05:c4:9d:29:37:9e:c3:c4:c6:58:13:cd:a2:0d:
                    28:6a:23:61:2b:b2:ed:ba:a8:1e:b9:84:8a:e5:72:
                    03:1c:3f:c9:48:9c:8b:82:d6:8a:5d:5b:0a:7f:46:
                    16:d9:04:53:90:1b:2d:b5:83:08:20:bf:1c:ba:cc:
                    84:bf:bd:f0:86:97:a5:9a:f0:47:4f:b5:bb:39:1b:
                    8a:fb:9e:78:43:29:06:9b:3f:32:12:f8:20:24:f4:
                    69:88:1f:98:fd:40:d2:ac:df:0d:61:b2:9f:e3:e3:
                    e4:1d:4b:2a:5d:a5:80:e6:35:e2:2a:48:c0:b4:2a:
                    24:29:b9:ee:4b:6e:96:c8:01:00:9a:6d:35:a5:05:
                    9a:50:30:a7:29:15:b7:0f:1f:e5:98:a9:a0:21:f8:
                    cd:2c:ce:58:bf:94:d9:f5:fd:b2:f4:cf:ce:fe:5d:
                    77:8f:eb:e1:94:4b:3a:a0:35:e2:4f:eb:f0:82:ba:
                    7c:44:e8:41:09:99:6e:11:f0:94:fa:38:2f:b1:94:
                    04:6a:a6:22:26:c1:b8:0a:f2:35:9a:06:c1:36:a1:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3D:6A:D3:AE:1B:4C:C6:75:50:05:8E:B6:F1:C4:59:55:37:36:C6
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:f7:51:5f:c2:0f:87:83:c9:45:51:78:8d:a9:33:70:86:
         6d:70:e5:91:c2:f5:8c:e7:7a:06:b3:b9:83:59:24:57:18:ef:
         ca:48:ae:05:10:08:5a:5d:fb:06:f6:3f:01:c4:ba:90:70:50:
         38:4c:a2:ed:df:a1:af:bc:5d:8e:0b:68:ea:45:22:2f:b3:e4:
         4f:5d:d3:0c:bb:4e:65:01:22:4a:30:41:09:54:26:4a:e5:18:
         35:ca:eb:c8:dd:a6:6a:57:4b:d2:84:c1:ec:2d:7f:7e:4a:a6:
         b4:7e:53:54:0c:66:32:6e:87:7f:39:9f:36:2f:7a:12:bd:f4:
         b7:0e:75:2d:61:a4:cc:f9:56:df:b1:8f:4e:f2:6e:be:74:3f:
         a9:a0:ac:c2:c3:cd:82:32:49:49:83:92:6a:56:61:86:5e:a4:
         de:cc:03:f1:aa:49:8e:77:ef:1b:6d:73:12:d2:e5:0b:39:33:
         44:04:7b:26:08:a7:37:52:aa:10:45:92:21:c7:d0:31:3b:e0:
         75:68:c2:87:84:d5:9b:3c:23:76:6c:72:db:81:e2:bd:62:a5:
         ca:4b:ba:10:a1:72:45:4c:30:6d:63:95:eb:43:18:aa:c9:6f:
         7a:86:69:99:db:f0:06:27:26:62:c1:60:ff:b8:4c:45:35:4f:
         28:ce:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:01 2025 by rpki-client