Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File:                     wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier:          wD8VD+IIL6VdUhkTxCBJC4ldbsICY3Ispqn6POIXcL0=
Subject key identifier:   65:37:94:94:F0:CE:8B:D0:5F:D2:28:57:2E:09:C7:03:47:33:3A:84
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer:       /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial:       0194C49A574264B1FB27DEE5BB4828A4D1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number:          0166
Signing time:             Sun 02 Feb 2025 03:00:36 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:36 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:36 +0000
Files and hashes:         1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: EXrdJweyRaOxRP/r/+7IMNfuduCEgnHfscy0C0PXeyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:57:42:64:b1:fb:27:de:e5:bb:48:28:a4:d1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
        Validity
            Not Before: Feb  2 03:00:36 2025 GMT
            Not After : Feb  3 03:00:36 2025 GMT
        Subject: CN=65379494f0ce8bd05fd228572e09c70347333a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:8d:01:d0:a8:5f:9d:93:22:b1:99:84:9e:
                    66:8a:fb:62:14:20:6d:8b:4c:03:5c:7b:1b:c7:fa:
                    8d:2f:8e:77:0e:c0:d7:10:d6:eb:2d:00:2c:3b:94:
                    65:e5:c6:93:51:5d:64:fa:b8:37:d0:cf:b6:01:c4:
                    62:66:d2:57:83:08:6c:55:86:5c:6d:be:d7:e7:67:
                    b8:e8:13:d7:17:f8:e0:71:17:c5:e9:6d:50:36:b0:
                    9a:20:ec:45:6c:d5:04:98:c3:14:54:dc:14:6d:cf:
                    14:a4:2b:02:86:a7:7c:e6:76:6a:59:1e:eb:1f:54:
                    b2:f7:e7:d6:cf:7a:6b:1e:e9:6c:59:6b:cc:ae:18:
                    f2:de:99:da:a7:e5:e4:ca:2d:62:ee:a1:f5:60:db:
                    df:37:d4:e9:8d:9a:00:0a:21:f5:bf:19:15:d9:4e:
                    ef:13:5e:d9:d0:78:5f:10:43:50:1c:22:93:1a:80:
                    3f:29:4a:0b:f1:95:8d:e9:54:c0:82:a4:11:89:e4:
                    e9:51:5c:0e:3d:0b:26:07:f7:42:be:70:ba:7f:01:
                    30:50:cd:e5:cb:ac:b9:88:92:92:c2:79:a1:dd:0a:
                    35:36:80:05:87:22:f6:89:06:fe:45:05:26:21:51:
                    22:46:b9:39:08:d6:a7:01:66:c1:0f:a3:ba:98:ed:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:37:94:94:F0:CE:8B:D0:5F:D2:28:57:2E:09:C7:03:47:33:3A:84
            X509v3 Authority Key Identifier:
                keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:69:06:4f:37:68:22:3c:08:8b:b5:78:a7:2e:bf:5b:29:
         68:2a:f2:16:8f:91:14:d4:e1:b3:3b:38:fb:5f:79:b4:d8:20:
         a7:3e:4c:34:35:3e:9e:d2:b4:d0:e7:5b:74:df:82:91:95:49:
         f7:2a:0a:5e:0a:15:dd:e9:89:28:e6:58:64:e5:cf:e4:4e:ce:
         9b:cb:bb:00:fc:d4:22:fb:55:88:f5:67:2b:4f:ca:f5:9d:4a:
         17:92:7e:8b:81:eb:3e:b2:2d:51:68:1f:9e:4b:43:0a:4a:0b:
         c4:b8:b9:1b:4e:19:ad:4c:0f:fe:71:3b:06:ae:69:f3:7e:62:
         4f:74:49:13:cc:99:8d:8c:ad:5b:1c:4a:bc:4f:06:b7:06:b6:
         20:84:b2:c2:07:8e:0e:cd:95:a1:23:69:26:e0:a3:fd:98:6b:
         1c:40:10:c9:2f:50:78:61:69:c9:46:b0:02:5d:eb:7d:f6:13:
         73:3e:57:55:a4:41:fa:d8:93:1e:9a:72:2a:5d:13:ca:f3:19:
         8d:3f:24:da:be:d1:64:ca:d8:f3:81:80:8b:2c:a8:23:d0:1a:
         07:42:1e:80:7e:36:fc:bd:06:07:bb:1b:5c:9a:4a:e5:0c:1a:
         d8:78:34:92:ad:e0:48:fd:07:d0:cf:3f:9e:26:96:9a:e0:d8:
         7a:1e:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:55 2025 by rpki-client