Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
File:                     W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json)
Hash identifier:          /gbNwpo8zJq/ogarRVaab5OJHTQzRyeFDCaxs5rBi3Y=
Subject key identifier:   3B:F1:B3:B8:24:15:96:B7:52:07:91:DB:37:53:C1:9C:CC:E1:10:B7
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Certificate issuer:       /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial:       019654C99285ADB9B9E86E8DEC07B0563796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 20:00:18 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:18 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:18 +0000
Files and hashes:         1: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: 5RVtyC+boe0cLDMEIVHQ8z1joWv7uogEV2FTwR6vrGg=)
                          2: ijhA7sBU_edCq9uT5tmZaZEbP3I.roa (hash: NR4CPSWiqCTjGhtLGBhv5LnWOgMPNqeAkbuxpb5OI8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:92:85:ad:b9:b9:e8:6e:8d:ec:07:b0:56:37:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
        Validity
            Not Before: Apr 20 20:00:18 2025 GMT
            Not After : Apr 21 20:00:18 2025 GMT
        Subject: CN=3bf1b3b8241596b7520791db3753c19ccce110b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:2d:6b:34:f6:13:f0:a7:cb:c3:54:00:a7:
                    5c:23:4a:2a:1a:09:38:e8:61:c2:22:75:dc:11:0c:
                    f9:d0:a2:1e:4f:7c:e6:49:7d:a4:f7:e8:9e:b4:67:
                    66:c3:97:aa:f9:e9:0c:1f:a6:78:b6:cb:ea:1a:42:
                    98:e7:0f:3d:c9:ce:10:a1:9f:6b:0d:76:b7:1e:9a:
                    e4:b6:31:c2:a0:d7:e5:52:d2:93:99:41:d9:1a:fb:
                    9f:e4:c5:42:82:c2:a5:7b:0e:d3:ba:89:2c:8e:36:
                    ac:7c:b4:d9:54:e3:36:60:77:61:20:03:17:36:ab:
                    d3:a4:71:75:f0:0b:7f:35:16:89:1d:23:5d:6d:dc:
                    ca:ba:2e:1c:65:7a:61:a4:41:fc:95:b4:34:2e:0c:
                    ab:4e:3e:0f:fc:1c:2e:99:fc:31:e5:34:c2:53:06:
                    cf:86:90:42:81:53:86:3f:b0:c1:43:fd:21:5d:f8:
                    5a:88:48:fd:5d:db:b5:bc:e5:70:ce:b7:18:9e:3c:
                    15:3c:3e:da:7a:b3:88:99:15:d2:57:2e:48:87:b2:
                    bc:1f:4b:5a:e2:3f:bd:ba:fa:7e:63:4c:5d:71:81:
                    1e:b8:56:d5:77:e9:34:57:65:b3:53:72:b1:71:a2:
                    75:02:9a:47:f6:7a:0a:17:de:64:fe:ec:b1:8e:7f:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:B3:B8:24:15:96:B7:52:07:91:DB:37:53:C1:9C:CC:E1:10:B7
            X509v3 Authority Key Identifier:
                keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:6f:d7:3f:c0:83:70:d6:da:a3:e7:4e:2d:ac:2c:ee:76:
         f6:bb:48:1d:a5:02:69:c6:d3:bc:bd:14:4b:0f:7d:f1:96:53:
         1b:9b:19:a1:f2:77:a8:be:97:b0:95:b6:e5:0a:a0:3d:98:2c:
         8d:4d:28:ad:61:27:8a:fb:39:1c:e7:18:a2:2d:d5:af:e3:b8:
         76:28:28:fa:d4:0c:c9:11:7c:3b:30:d9:65:bd:fc:ca:e8:6e:
         00:be:22:f2:f2:29:11:e6:0a:c2:fb:d9:d7:a3:56:64:47:98:
         61:dc:fd:49:49:ee:dc:d5:5b:26:49:9d:51:7c:04:d1:af:5d:
         db:5b:ec:8c:dc:d6:18:6b:1a:28:49:0a:a5:93:45:f2:28:a4:
         47:65:5b:35:a7:66:ed:f0:bc:4c:bb:b6:64:d3:ab:44:bd:de:
         64:3a:a7:38:cb:d6:00:dd:98:46:92:9e:80:60:28:ba:3a:95:
         68:25:3e:1e:9a:4c:38:d7:21:9b:ff:4b:b6:df:b8:dd:e5:00:
         e6:a1:8c:61:cf:71:da:c3:c4:cf:88:6b:ca:77:0f:04:2a:4e:
         15:43:25:fa:7b:94:0e:8e:03:e0:b0:2a:a7:5b:36:4c:31:df:
         f9:2f:22:32:73:7b:3e:74:a7:61:37:e6:1f:05:f7:cd:d4:68:
         c2:40:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:45 2025 by rpki-client