Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File:                     wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier:          j0a6xuAj3QCma6c3KWJRH1dV8Deuk/Ze3FjthBUZYKo=
Subject key identifier:   D1:DA:E2:28:EE:32:AA:8E:90:4F:FA:B9:87:69:40:3D:F5:65:80:1E
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer:       /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial:       01975158DD3A7A5FC60CFA8C631AF3B45CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number:          02B8
Signing time:             Sun 08 Jun 2025 21:01:07 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:07 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:07 +0000
Files and hashes:         1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: JUtU7QknRCNN25nPKNFiYWI8xlBVMojBLMX9nGjfEPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:dd:3a:7a:5f:c6:0c:fa:8c:63:1a:f3:b4:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
        Validity
            Not Before: Jun  8 21:01:07 2025 GMT
            Not After : Jun  9 21:01:07 2025 GMT
        Subject: CN=d1dae228ee32aa8e904ffab98769403df565801e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:e6:6f:73:31:3b:9b:aa:37:05:22:e1:a8:
                    be:88:f1:32:70:f8:7c:f8:93:e3:21:8f:b5:bf:7b:
                    d9:c9:1f:18:c1:e1:39:4f:3d:0c:4a:d6:15:7a:ba:
                    6e:75:78:01:f4:87:ef:9c:31:16:7f:b7:98:a9:5a:
                    8d:62:d2:87:3b:48:b1:a1:8b:20:b2:8d:29:ea:11:
                    09:46:bd:12:5c:4f:c7:ad:8c:43:5e:73:04:5f:46:
                    6d:17:0f:35:50:ee:b3:b8:0f:0b:07:8f:6c:8f:9c:
                    d7:5b:f3:75:8c:62:10:23:3d:cb:a5:81:9a:89:d0:
                    b3:35:c5:11:e3:8d:2f:be:5d:2b:89:7d:4e:e5:85:
                    7d:ad:78:35:31:52:49:f4:74:19:36:b5:d4:bd:a0:
                    3d:d4:14:e8:bc:38:16:6f:12:81:a5:77:a7:d5:9c:
                    87:75:a3:ee:df:9f:7d:33:77:c9:e3:25:62:3e:9d:
                    9d:f9:e6:a0:27:60:27:ed:aa:1c:b6:c5:08:89:ee:
                    36:43:2b:96:07:1e:3a:5b:6b:4e:a2:a5:eb:9e:e4:
                    c5:7d:94:be:23:ca:52:fc:3a:9f:d2:43:7e:97:b8:
                    18:74:09:97:b8:73:09:f9:7f:03:2e:f8:45:13:be:
                    fb:9b:d9:2a:7d:51:ab:ff:8a:3a:40:8b:ab:e1:25:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:E2:28:EE:32:AA:8E:90:4F:FA:B9:87:69:40:3D:F5:65:80:1E
            X509v3 Authority Key Identifier:
                keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:b8:b7:bf:47:b0:3e:11:c7:1e:e5:e1:1b:96:e9:86:05:
         c2:52:23:6d:d2:51:73:e8:bb:2a:bb:94:47:79:89:14:9e:e0:
         cd:3f:83:d3:8d:0e:dd:cc:e7:49:b8:aa:82:38:63:dd:d8:90:
         0a:a1:65:57:13:ec:b4:5a:c6:05:96:a8:4f:5a:e5:98:79:47:
         22:64:95:f1:de:2c:c8:c7:6b:c6:6f:b7:51:80:ce:10:0e:c3:
         66:a5:90:bf:6b:cf:c6:b5:7e:15:63:24:fe:3f:f0:f8:d1:95:
         f6:72:64:65:85:ed:32:aa:51:55:58:62:5d:85:5b:e8:13:90:
         71:93:25:59:45:0f:00:5c:3c:e3:ee:37:65:a8:e2:b8:b6:f8:
         0f:ed:df:f3:a7:a2:40:33:de:39:d1:02:97:60:53:56:86:4d:
         e5:92:a4:66:d4:bb:7d:89:15:ab:97:bb:b8:39:6a:11:e1:b2:
         32:8a:d3:07:56:24:9b:8d:6c:36:76:5e:e5:7b:ed:8e:cd:4c:
         f4:a1:52:99:5f:93:8e:75:d8:f8:a9:55:95:a6:b7:ea:9d:ee:
         f4:84:e2:65:79:a4:bf:29:8c:97:b6:1c:db:9b:89:69:9b:7b:
         c2:dd:c9:6c:65:4d:b2:97:18:85:7c:b5:29:bc:09:89:0e:1b:
         b4:b2:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:56 2025 by rpki-client