Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier:          jKopVce8tMu53PIjNEle0HtUuwUcDrzeElFdLUNBZXU=
Subject key identifier:   B9:E1:8F:B1:C6:30:83:3D:C0:6B:2A:13:35:4D:2F:8D:78:30:FF:51
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer:       /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial:       019644E8FA7A2E45EF0072C4050F3E9831CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number:          14FA
Signing time:             Thu 17 Apr 2025 18:00:41 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:41 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:41 +0000
Files and hashes:         1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: bQPIRhPuCwdu53OHml9GdHsMnZdbEeDRGp1vovjh5cg=)
                          2: b-H1HafvFZHqAREOClh3E9AccmU.roa (hash: MvASKCNf0q7mbKy4jwGmZ3TcUV1oDH8tUiKsCWNFvAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:fa:7a:2e:45:ef:00:72:c4:05:0f:3e:98:31:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
        Validity
            Not Before: Apr 17 18:00:41 2025 GMT
            Not After : Apr 18 18:00:41 2025 GMT
        Subject: CN=b9e18fb1c630833dc06b2a13354d2f8d7830ff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:98:79:5c:02:78:29:5f:df:b0:8e:9d:ac:
                    d6:39:72:8b:1a:b7:31:24:7d:f4:b7:67:89:7a:4a:
                    04:ad:cd:ef:75:ee:18:ee:94:d9:fb:82:cd:4b:d2:
                    89:a5:92:11:4e:67:81:97:ff:51:92:e8:51:c0:3f:
                    c3:f1:ab:01:f8:57:e8:93:04:27:f4:a9:bc:39:69:
                    d6:12:ae:30:ba:5a:ab:25:74:19:30:ae:75:64:f0:
                    e7:c4:a1:b4:88:73:b1:ce:29:67:f3:5b:b5:e5:f3:
                    9d:56:66:63:f6:db:53:01:41:3d:9b:0c:a4:b5:21:
                    e0:a7:ff:22:e7:19:ef:2c:15:1f:81:e0:d0:d9:4b:
                    d5:f7:f1:4b:f1:8f:05:63:ec:34:5d:47:2b:9a:5a:
                    b3:17:ef:c5:d0:a5:c2:51:cf:15:e1:e6:89:62:e5:
                    c8:f9:2d:8a:70:11:55:9c:2a:1e:05:df:77:38:5a:
                    40:0b:2c:61:a7:44:fa:bc:c5:f3:c7:6d:c8:63:0d:
                    93:9e:c7:76:5e:5d:6e:b1:1d:6c:83:d4:d9:78:8c:
                    7e:25:1b:bd:bf:94:ad:e2:de:74:83:b1:99:72:28:
                    ea:2a:76:5a:0a:d7:da:bf:0b:d4:0e:ab:82:fd:d6:
                    e8:76:3b:ea:cf:22:4f:bc:dc:79:d4:79:92:4c:f6:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:8F:B1:C6:30:83:3D:C0:6B:2A:13:35:4D:2F:8D:78:30:FF:51
            X509v3 Authority Key Identifier:
                keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:ba:c7:06:cb:6b:bc:7f:fa:a5:c0:b9:76:a5:85:81:ac:
         bc:95:5e:19:8f:71:3b:66:7f:4a:18:6d:f4:a5:58:ec:d3:07:
         b1:0e:29:93:fa:9c:c8:c4:26:dc:1b:74:60:fe:3b:65:72:25:
         d1:ff:ea:82:81:53:55:b1:39:17:02:7a:fc:14:69:a8:d5:1a:
         bb:b5:bb:25:82:fa:04:ab:9e:ae:a6:8b:ab:2c:cd:40:7a:8d:
         65:cf:f6:c0:6b:84:d7:6c:3e:47:c9:5a:5e:47:93:59:1f:42:
         8a:c3:0c:98:ae:89:04:f1:59:81:fb:b7:48:53:8f:63:1c:ae:
         00:0b:06:37:ea:28:a9:98:f0:dd:94:5b:49:42:fc:f2:5e:ad:
         ad:68:36:80:80:b0:05:54:6b:1b:98:9f:23:27:eb:14:73:20:
         af:fd:f9:43:2b:ac:70:5d:a7:2d:23:5c:98:6d:0a:25:3a:0a:
         49:68:9c:f5:1c:5f:89:c5:47:e4:fe:9c:28:54:7c:4d:60:f5:
         4b:3d:e1:be:34:79:88:04:c9:1d:4f:3e:6f:40:fa:9a:ea:40:
         c6:72:01:19:fa:5b:23:c3:30:b4:44:e7:ba:2a:8c:97:30:e5:
         f0:65:61:7b:ce:26:b4:5a:08:59:98:75:b8:e4:15:57:fc:77:
         d9:c6:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:41 2025 by rpki-client