Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File:                     W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier:          QbWbmPF9Vwf9Ag5haFFLF5VXhPXn4AG//4Erl0ew6Vc=
Subject key identifier:   0D:95:CC:CE:61:93:D3:DC:6B:E8:6A:C2:85:A5:9F:41:0B:D8:60:E8
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer:       /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial:       0194C4D18D5BA2CBB633D71FB24B00B68441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number:          26
Signing time:             Sun 02 Feb 2025 04:00:55 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:55 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:55 +0000
Files and hashes:         1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: e2eBxQplV0CDSqMkajaT8Np2qELbvf7K6qajrK5Rp60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:8d:5b:a2:cb:b6:33:d7:1f:b2:4b:00:b6:84:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
        Validity
            Not Before: Feb  2 04:00:55 2025 GMT
            Not After : Feb  3 04:00:55 2025 GMT
        Subject: CN=0d95ccce6193d3dc6be86ac285a59f410bd860e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:ff:bd:09:40:27:bb:f6:a8:db:3b:41:f7:
                    96:15:e2:f5:6d:84:b4:58:b0:c6:ab:6e:35:9f:65:
                    d4:82:96:64:d9:c9:54:44:59:50:f5:2c:df:ad:10:
                    e2:f1:e1:39:56:43:99:08:df:bd:b6:eb:55:e8:b9:
                    ef:53:10:c4:93:16:ed:dd:34:44:6b:09:36:ca:6a:
                    d6:a3:46:37:d4:7e:db:54:15:e8:1e:89:28:76:7d:
                    37:19:34:9e:93:52:0a:a0:4b:e5:c6:32:16:66:d7:
                    b9:43:8b:be:a0:f0:88:2c:91:15:a6:df:24:e0:ba:
                    3b:67:98:df:f6:f1:36:cd:c9:7e:ab:e5:8d:32:4b:
                    94:ec:56:d8:a6:f1:f6:f0:65:ad:e6:81:d3:7c:7c:
                    68:b6:71:c8:83:e4:70:9f:10:5a:22:83:c6:3c:75:
                    63:42:e8:0f:cf:6b:c9:16:09:64:05:07:77:6b:35:
                    63:dd:93:2c:7b:5e:67:1c:f0:46:e3:e7:d7:06:fd:
                    c7:97:9a:db:78:cf:46:a2:7d:ac:29:e3:f2:ec:5c:
                    f5:21:48:88:63:b8:c4:6a:09:1b:7d:6e:c0:f2:27:
                    e1:e7:65:93:ec:9a:45:cb:bc:a0:e2:46:01:a1:8f:
                    aa:98:d3:13:f7:70:fe:32:56:16:f9:5e:83:be:20:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:95:CC:CE:61:93:D3:DC:6B:E8:6A:C2:85:A5:9F:41:0B:D8:60:E8
            X509v3 Authority Key Identifier:
                keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:66:2e:af:68:3b:c6:4f:56:4e:21:2b:d4:f5:46:48:25:be:
         cb:aa:51:83:6b:24:0f:e8:34:63:7f:6d:34:54:e0:f2:e1:be:
         9b:77:4f:22:9d:15:92:75:c9:00:5e:4f:fa:40:05:98:5b:fa:
         08:f0:2f:ea:cc:d2:38:64:64:e2:33:bd:0c:e3:d3:82:07:0d:
         68:26:2e:02:71:8d:18:26:44:ef:9c:d1:72:73:21:5e:c6:17:
         9b:cb:68:ca:5c:7c:d8:eb:4b:82:dd:35:e8:55:e9:0e:ed:59:
         46:95:f5:fb:c1:b0:98:85:7e:34:78:a0:f3:e8:50:a5:97:1f:
         58:80:75:9c:b5:25:68:3b:9a:20:a9:8e:d5:6e:81:44:c1:1c:
         72:1d:20:ac:2b:0e:fd:60:53:eb:5f:61:13:b1:8c:05:c0:3e:
         fe:79:b8:6f:12:33:35:12:51:8b:54:8e:fe:e8:03:3a:08:78:
         70:74:5c:74:f0:0c:a4:b4:80:20:11:be:e6:93:a9:80:6e:d3:
         fa:0d:56:c7:2b:80:07:f1:4d:d5:fd:12:db:fb:19:5e:1c:dd:
         be:ad:89:7a:f5:22:b1:b7:0f:15:50:88:41:93:ae:2a:2f:42:
         12:f6:3f:4a:73:42:7a:48:f2:2a:b1:f0:70:68:09:a9:78:8e:
         7c:e0:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:00 2025 by rpki-client