Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File:                     wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier:          6eHH5gqnl3IrnUI7gf19HJFgO0amxyOWNU79hp6sHIQ=
Subject key identifier:   12:36:59:AD:5C:05:5C:A3:05:38:14:2C:27:87:5A:3F:88:6A:93:C6
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer:       /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial:       019653EE2486CD5DB4F57078569DD6EEB700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number:          124D
Signing time:             Sun 20 Apr 2025 16:00:37 +0000
Manifest this update:     Sun 20 Apr 2025 16:00:37 +0000
Manifest next update:     Mon 21 Apr 2025 16:00:37 +0000
Files and hashes:         1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: E89U3UZNmdaSQzWsLKCoHLjXzmlVljuCGNIgaW74fy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:ee:24:86:cd:5d:b4:f5:70:78:56:9d:d6:ee:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
        Validity
            Not Before: Apr 20 16:00:37 2025 GMT
            Not After : Apr 21 16:00:37 2025 GMT
        Subject: CN=123659ad5c055ca30538142c27875a3f886a93c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:63:91:1f:ec:39:05:64:ed:a1:e5:59:f4:
                    a1:51:0e:a4:fd:30:ca:62:e2:46:cc:cf:3e:11:42:
                    1e:3b:75:6c:1a:88:df:6e:97:29:12:c9:8e:71:01:
                    4b:ce:3c:d6:ad:ae:13:22:de:19:fd:95:08:05:b4:
                    5a:f2:d2:f4:41:40:3f:52:9a:5d:e2:5f:91:46:ec:
                    7a:ec:dc:78:09:97:d0:8c:bf:bd:b7:cd:41:c5:10:
                    36:f6:b3:a7:0b:ea:97:7c:59:8a:04:a5:a9:49:03:
                    4f:88:d0:6b:92:ed:54:e3:fb:6b:67:c9:aa:73:40:
                    a0:b8:a1:c8:ca:a3:4f:25:82:3e:95:f8:0d:53:b9:
                    de:74:d9:f8:d4:92:40:e6:3c:62:93:46:17:34:74:
                    e7:58:18:65:d2:94:5c:dc:a2:a7:6c:17:26:fe:b4:
                    90:b7:a3:e4:32:9f:a9:37:21:d4:81:69:5e:f5:72:
                    34:23:be:49:98:99:f7:ab:93:54:e0:42:e2:e8:5b:
                    8c:6e:bd:f4:34:f6:32:b9:69:04:80:72:a0:36:00:
                    5d:e1:c1:3c:60:2c:11:6f:f6:f0:9f:9d:06:3c:a3:
                    8a:c7:be:e7:89:0e:7e:b2:da:b0:df:fb:96:bb:ec:
                    a2:f0:ee:2f:e9:be:e2:e3:5d:9f:42:6c:c4:ea:d7:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:36:59:AD:5C:05:5C:A3:05:38:14:2C:27:87:5A:3F:88:6A:93:C6
            X509v3 Authority Key Identifier:
                keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cf:48:e3:67:15:98:3f:32:a0:0a:b8:70:74:28:00:83:f7:
         bf:8a:e6:01:34:2d:87:8f:89:da:cc:f4:d3:04:40:37:5b:0a:
         37:78:a1:d0:e0:9d:22:73:8f:94:0d:12:af:27:f6:4c:4c:fb:
         57:75:32:87:13:a3:64:a8:78:6f:3d:b2:d6:79:08:01:99:16:
         a0:4b:2e:f2:bd:66:75:73:45:94:c1:cb:98:29:07:b1:0b:73:
         85:e4:a7:ee:0b:b7:8a:d3:3b:a3:d2:c7:1b:1b:79:cf:a2:56:
         f1:66:6e:ab:cf:d1:bc:2d:5b:ca:d1:a0:19:9c:90:17:a5:ec:
         54:3c:2e:f7:5f:a2:b4:44:fe:5a:85:10:49:b3:66:87:13:ba:
         eb:1a:59:2f:80:9a:5e:8c:de:2c:12:d7:f0:b5:1b:82:ec:a9:
         50:a1:e3:1a:12:84:3c:99:f2:4f:fb:8e:c4:33:5b:f2:ed:f1:
         4c:07:38:d5:bd:17:a4:46:d9:9c:3c:67:d3:6b:9b:dd:f6:5b:
         25:3d:2b:95:3d:44:0f:27:40:00:1c:41:52:3a:bd:c2:c1:c4:
         ee:22:20:99:8b:8c:6e:65:bc:0c:80:3e:f7:ad:ff:8f:bc:c1:
         8e:fc:48:93:74:35:52:36:89:d9:f7:ab:2c:8a:6e:00:b8:c8:
         fd:22:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:21 2025 by rpki-client