Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          BWrQZo51jqmHsInMLgSu4CcFB50+2pvzfJYmrPrkFeQ=
Subject key identifier:   36:A4:99:F6:79:4A:C4:6E:21:A5:86:15:32:2C:F6:B8:F1:B0:39:D2
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       019645C53366963936F8F7773A7FDD678C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          1341
Signing time:             Thu 17 Apr 2025 22:01:13 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:13 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:13 +0000
Files and hashes:         1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: pwNoX9oWbcOR3vwu5HbhSQjq9QJvXO14dmVQfTDkRxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:33:66:96:39:36:f8:f7:77:3a:7f:dd:67:8c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Apr 17 22:01:13 2025 GMT
            Not After : Apr 18 22:01:13 2025 GMT
        Subject: CN=36a499f6794ac46e21a58615322cf6b8f1b039d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:b4:06:e7:5c:7e:29:01:8a:5a:da:81:a8:
                    2c:0e:ca:2a:de:a1:a8:3c:28:0d:cd:62:e9:8b:d3:
                    93:2c:3c:b3:68:0e:f6:18:4f:e2:96:08:f9:06:83:
                    e0:28:6a:fe:f9:25:0a:62:b7:17:64:ba:d8:cb:3b:
                    d2:09:28:c2:49:53:41:8b:78:2f:b0:35:e2:ac:85:
                    67:bd:23:2e:74:c4:a1:e7:d1:bb:6a:7a:dc:e1:79:
                    e8:19:3a:1f:ee:32:17:ff:89:f7:55:25:11:18:90:
                    e9:78:8a:8d:e6:eb:24:a7:24:af:11:3a:65:5a:b6:
                    82:58:14:ce:e0:66:86:1c:fd:b1:8d:e7:a5:83:d7:
                    6c:02:1c:7f:4c:a8:f9:2e:77:bb:f2:1d:ab:cf:ab:
                    74:58:eb:15:58:e7:47:9d:f1:ba:fa:2e:2a:77:dd:
                    c0:db:f2:1b:66:4d:63:ac:95:3c:32:7b:2a:4f:e3:
                    dc:7a:73:98:35:9f:87:71:9d:0d:48:59:78:6d:39:
                    15:be:3a:51:90:17:98:67:c5:c3:3b:a3:cc:a6:30:
                    77:5f:95:d7:c1:d6:82:3a:44:54:f6:66:63:85:03:
                    d8:37:9a:0f:05:f6:8b:d4:0a:b6:3b:44:85:0d:af:
                    43:88:d5:71:d1:ce:67:a6:c2:17:91:7b:88:da:db:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:99:F6:79:4A:C4:6E:21:A5:86:15:32:2C:F6:B8:F1:B0:39:D2
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:23:52:51:35:9a:24:4f:7f:67:6c:5b:22:a4:40:23:7d:
         7c:f3:5b:70:39:0b:4b:1f:e3:fb:4e:06:03:1f:e0:30:81:1b:
         07:f9:f1:ad:9e:27:2a:a3:9d:c0:85:f6:a0:10:f9:51:dd:44:
         8f:a8:4b:56:a5:39:b2:38:12:d1:43:a0:70:ac:5f:76:25:3e:
         2d:4b:d2:79:84:e6:ed:02:e4:86:4b:46:c9:d5:f0:5e:1e:7a:
         84:94:66:1c:fc:6f:65:8e:ac:eb:68:83:ec:b1:db:58:c5:64:
         11:95:2e:23:c6:e1:1c:dd:e3:d1:d6:15:55:d9:45:84:4e:ec:
         a8:eb:d5:8f:4a:2f:ea:0f:81:4c:f1:61:76:4f:41:34:c6:f0:
         69:f7:09:e3:49:25:fe:64:67:21:7c:f3:25:5d:38:b1:f4:ad:
         3e:39:ff:e6:4a:ca:5b:47:f0:bf:70:19:8e:18:2f:b5:04:81:
         cf:6b:06:2a:1e:06:c2:a8:1a:3b:78:c6:75:03:bf:87:0f:6c:
         52:f7:d6:87:af:d0:08:1e:30:0b:21:dd:65:bd:2a:72:a7:9d:
         9a:6e:97:44:f0:a0:4b:f9:99:35:1f:5c:1c:2e:df:34:fa:53:
         39:fc:9e:6a:e0:60:f5:ce:48:a4:70:fe:66:54:dc:1c:cc:04:
         67:27:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:20 2025 by rpki-client