Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
File:                     wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json)
Hash identifier:          77EPgZmR8gOc80j51teNKHLRLaR+JCJxVTklD5yXSrc=
Subject key identifier:   6B:FD:27:A6:36:C6:D2:B4:8E:CB:63:F0:06:1A:C3:B9:A6:72:81:84
Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A
Certificate issuer:       /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
Certificate serial:       019636BF680C6AD53BBAA89ABDA5203D9DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
Manifest number:          04C4
Signing time:             Tue 15 Apr 2025 00:00:35 +0000
Manifest this update:     Tue 15 Apr 2025 00:00:35 +0000
Manifest next update:     Wed 16 Apr 2025 00:00:35 +0000
Files and hashes:         1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: a1oNu+360p/HZefYW7ZsuXTSvpNcOsiROH7KXKJvr0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:36:bf:68:0c:6a:d5:3b:ba:a8:9a:bd:a5:20:3d:9d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
        Validity
            Not Before: Apr 15 00:00:35 2025 GMT
            Not After : Apr 16 00:00:35 2025 GMT
        Subject: CN=6bfd27a636c6d2b48ecb63f0061ac3b9a6728184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:56:6f:ef:ef:c0:a4:64:47:6f:79:e8:25:
                    52:27:35:3c:be:bf:7f:51:10:00:cb:60:6c:ae:e8:
                    bf:de:da:c5:7c:fc:6a:d8:bc:96:9a:9c:19:9a:6d:
                    68:72:57:97:f2:99:4f:ba:88:d5:2f:4d:ff:69:b9:
                    37:7b:96:9d:6a:92:ec:0c:71:3e:ae:7c:6a:44:cf:
                    25:99:52:92:f2:84:78:f8:08:98:56:85:5d:0d:2e:
                    08:cf:b0:7a:47:3c:33:6d:03:51:6a:50:82:45:f0:
                    10:5c:c1:af:b7:e8:af:47:de:e6:cf:ec:0a:0f:b2:
                    1d:5f:e4:b7:83:d2:c0:87:e4:fc:cf:17:e1:9e:ba:
                    d6:a0:7c:3b:1f:04:1d:58:63:75:9c:e2:18:ff:b1:
                    c1:28:c7:d6:c0:89:c9:28:d5:5b:0b:59:d6:23:7e:
                    69:bb:10:03:84:e3:32:d3:47:09:5d:72:ea:7b:6f:
                    00:89:38:f3:c8:0a:77:23:62:e3:e6:d7:07:23:c8:
                    82:a6:43:f1:c6:50:50:17:3d:a3:ea:39:f2:a2:f4:
                    dc:4d:7f:84:09:bb:3b:12:a4:5f:9e:2d:92:74:68:
                    50:12:1e:bb:16:7c:e3:af:f1:0c:67:c3:aa:c0:a5:
                    69:0a:99:9c:09:2b:12:9b:94:a4:2f:14:43:40:c3:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:27:A6:36:C6:D2:B4:8E:CB:63:F0:06:1A:C3:B9:A6:72:81:84
            X509v3 Authority Key Identifier:
                keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b4:4f:1e:64:84:b5:c0:5f:70:11:61:fe:1a:23:0e:bc:eb:
         1c:c2:cb:a4:a4:5c:e7:cc:63:57:14:0a:7d:24:5b:02:7f:bd:
         5c:fa:6a:a8:5a:7e:91:da:ac:c5:c8:46:a3:ee:19:a4:f8:a7:
         96:14:51:d1:c6:aa:83:db:dd:a7:f3:17:7e:cd:78:93:c6:27:
         df:eb:6b:6b:81:3a:88:ab:06:b0:6c:ac:d4:54:9f:01:7c:0d:
         e6:7b:45:4c:03:ea:49:18:d0:ef:bc:14:f3:64:6e:f8:ff:c3:
         18:83:29:d5:59:5b:6c:02:c6:2c:1a:d7:5c:38:f1:7f:f5:3c:
         39:ea:0c:fc:eb:da:32:18:6c:6d:5d:4c:72:ef:97:8e:00:3d:
         5f:cd:4b:15:59:fc:d9:e1:c6:12:2a:51:43:34:c2:0f:81:db:
         69:05:9b:44:e7:0c:2f:e8:58:b2:6e:d9:79:1e:bc:49:c9:78:
         80:c7:04:6c:98:b6:87:fb:47:a3:08:e9:74:72:98:4f:6f:73:
         e3:0a:ed:5f:0b:83:53:18:b3:5b:8c:94:25:31:00:b5:c7:02:
         57:95:f5:71:ab:0a:04:3e:cc:93:9c:97:a8:14:89:62:b5:d1:
         da:ad:ea:99:7f:b3:71:39:8d:13:4b:82:35:0f:88:0c:f9:1a:
         80:37:82:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY2v2gMatU7uqiavaUgPZ2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNmEyYmM1YjI2ZWQyMGFjNWQyZmRlYTlkYWM4NjdkZjky
MzIwNWEwHhcNMjUwNDE1MDAwMDM1WhcNMjUwNDE2MDAwMDM1WjAzMTEwLwYDVQQD
Eyg2YmZkMjdhNjM2YzZkMmI0OGVjYjYzZjAwNjFhYzNiOWE2NzI4MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyNWb+/vwKRkR2956CVSJzU8vr9/
URAAy2Bsrui/3trFfPxq2LyWmpwZmm1ocleX8plPuojVL03/abk3e5adapLsDHE+
rnxqRM8lmVKS8oR4+AiYVoVdDS4Iz7B6RzwzbQNRalCCRfAQXMGvt+ivR97mz+wK
D7IdX+S3g9LAh+T8zxfhnrrWoHw7HwQdWGN1nOIY/7HBKMfWwInJKNVbC1nWI35p
uxADhOMy00cJXXLqe28AiTjzyAp3I2Lj5tcHI8iCpkPxxlBQFz2j6jnyovTcTX+E
Cbs7EqRfni2SdGhQEh67Fnzjr/EMZ8OqwKVpCpmcCSsSm5SkLxRDQMNzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv9J6Y2xtK0jstj8AYaw7mmcoGEMB8GA1UdIwQY
MBaAFMFqK8WybtIKxdL96p2shn35IyBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUt
OTU3N2ZmNWRkMzM4LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUtOTU3N2ZmNWRkMzM4
LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7RPHmSE
tcBfcBFh/hojDrzrHMLLpKRc58xjVxQKfSRbAn+9XPpqqFp+kdqsxchGo+4ZpPin
lhRR0caqg9vdp/MXfs14k8Yn3+tra4E6iKsGsGys1FSfAXwN5ntFTAPqSRjQ77wU
82Ru+P/DGIMp1VlbbALGLBrXXDjxf/U8OeoM/OvaMhhsbV1Mcu+XjgA9X81LFVn8
2eHGEipRQzTCD4HbaQWbROcML+hYsm7ZeR68Scl4gMcEbJi2h/tHowjpdHKYT29z
4wrtXwuDUxizW4yUJTEAtccCV5X1casKBD7Mk5yXqBSJYrXR2q3qmX+zcTmNE0uC
NQ+IDPkagDeCIQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 03:38:27 2025 by rpki-client