Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          jDLoXCBdTVF2Lcbg8XD8peI731/RzBLnEU131eVxPUo=
Subject key identifier:   FF:EF:B7:A2:D7:BE:91:2A:64:E4:67:97:C0:C8:E5:7C:41:85:5B:87
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       01964C6B5973507D392A3F3B4D60EC57E743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          03D9
Signing time:             Sat 19 Apr 2025 05:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:25 +0000
Files and hashes:         1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: qokq4KgX4HZnuguzq/8dJilbdk0aLd7YNgjfFRhqtfQ=)
                          2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:59:73:50:7d:39:2a:3f:3b:4d:60:ec:57:e7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Apr 19 05:00:25 2025 GMT
            Not After : Apr 20 05:00:25 2025 GMT
        Subject: CN=ffefb7a2d7be912a64e46797c0c8e57c41855b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:50:01:58:f7:d3:8c:28:0a:68:9e:53:7e:
                    61:96:69:dd:ea:0f:76:cf:69:88:40:5c:2a:6c:cb:
                    a6:c9:fc:65:77:fb:0e:5b:10:f1:f5:ea:9a:38:52:
                    20:a6:48:94:f1:cc:1f:dd:0b:0d:a3:c2:b6:f9:5a:
                    c7:f0:96:2f:ef:09:6f:96:58:51:6f:50:f8:38:50:
                    1f:ab:50:ae:9a:ef:b5:6b:06:96:a9:fd:48:86:99:
                    18:f4:9d:11:a7:38:08:10:7f:ca:4a:3c:53:a8:50:
                    9c:4e:05:f2:86:c3:d5:e5:36:e3:59:a4:e3:4e:c1:
                    75:11:e4:d5:75:c7:25:25:8f:cb:ee:f5:bd:5d:5e:
                    a0:be:1a:4d:1f:9e:45:67:20:43:b6:9e:4a:cc:ad:
                    d8:fb:13:a2:ef:98:4b:cf:9a:f8:21:d2:d4:93:23:
                    da:c7:2f:7b:be:fd:73:a2:52:ef:bf:5e:c1:7b:8e:
                    fe:52:e8:b0:39:14:48:30:3f:ad:05:be:65:21:4d:
                    1a:12:fd:76:e9:77:d4:a6:d1:66:63:8b:1e:11:af:
                    33:1a:75:c5:41:51:ae:89:d1:3b:99:69:ec:e6:82:
                    ea:3d:9f:aa:5f:2e:c8:18:db:04:56:9d:03:15:ef:
                    96:bf:6d:6e:a2:fc:93:91:21:16:65:64:b9:c0:8d:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:B7:A2:D7:BE:91:2A:64:E4:67:97:C0:C8:E5:7C:41:85:5B:87
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:76:64:44:1e:04:2e:73:84:aa:7d:24:64:b0:16:2f:6b:31:
         74:5f:7d:d3:27:f0:ae:70:93:10:92:21:a5:7a:cf:7d:f4:30:
         c1:3c:42:ca:09:c4:1a:90:81:1e:3a:74:cc:ff:53:a5:6a:ff:
         20:78:67:d2:59:82:42:76:61:2a:37:d8:b6:f3:92:7a:c9:e4:
         e4:fd:34:eb:17:0b:51:3f:dd:eb:ca:d2:37:c8:70:76:70:ee:
         a9:82:fb:ca:e9:34:05:23:e4:9e:96:24:15:47:55:78:f2:74:
         92:f1:35:bd:0c:0f:26:b4:ee:54:98:52:fb:d5:0d:46:25:4b:
         44:54:77:c4:7d:67:e0:e2:1b:c1:d2:68:a9:15:f4:b0:bc:13:
         b7:99:64:a9:61:84:89:40:d2:7c:a7:8d:f9:c7:c6:78:62:34:
         a5:76:4a:5e:43:78:e4:f0:ce:dc:f9:75:c5:2d:22:14:cd:73:
         fc:e6:31:c3:a7:b0:79:50:76:39:a2:9a:77:52:43:fc:60:e4:
         80:b0:ed:90:13:45:f9:98:8f:74:4b:0a:3a:72:2e:62:65:6f:
         d3:d1:32:22:06:b5:f6:5c:3e:9e:f1:2c:1f:1b:24:f3:84:f4:
         db:e4:0c:4c:e7:6d:8c:72:c4:e8:7a:c7:82:ea:50:d4:f9:32:
         1a:ea:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:10 2025 by rpki-client