Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          5NlbMiLY3c2AQyyDkgeXGvLs0hergtQ1izKTf4UZQDM=
Subject key identifier:   9F:C1:3D:A6:5C:8A:04:93:BF:DE:CD:BD:AB:69:6A:3C:D2:22:C0:1E
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019638E50092DFB385095B8FE969DBD36933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          0DE8
Signing time:             Tue 15 Apr 2025 10:00:53 +0000
Manifest this update:     Tue 15 Apr 2025 10:00:53 +0000
Manifest next update:     Wed 16 Apr 2025 10:00:53 +0000
Files and hashes:         1: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: qJieQsP1Ffb46CnH4F1VSspV154qf2WnhpC9TCFNnG0=)
                          2: c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa (hash: mqb+D/ntHZJvZ/z36Bl1ItrdLaA25yJOk+uY5NUbN8E=)
                          3: drB_utEqsKc4z5PbBF4oQlwpNic.roa (hash: +qqaWAsn3JKkCTtvn1DoJ0vO5IXLkuYLLjzTvofkaTk=)
                          4: h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa (hash: 6G/ihHpZFbWryvRuqI72FYSOZMMwREr3wb5GAXO7F4Q=)
                          5: slyK1DAB4dbXemNXvoMVu6ZnABY.roa (hash: Rc7vQ1K5O9MgP86008BcYYEvvo1tQ62QMOGFXd3ulqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:e5:00:92:df:b3:85:09:5b:8f:e9:69:db:d3:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Apr 15 10:00:53 2025 GMT
            Not After : Apr 16 10:00:53 2025 GMT
        Subject: CN=9fc13da65c8a0493bfdecdbdab696a3cd222c01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:51:36:8d:8c:6f:40:cd:f9:26:9f:1a:3b:
                    51:34:7e:5c:4e:70:51:21:c5:c9:bc:fe:bf:63:0d:
                    17:37:bb:d5:8b:e5:df:8d:d0:5c:36:a3:36:79:62:
                    c2:3c:d7:80:1e:5a:25:60:a9:72:6c:8b:c1:89:60:
                    5d:20:5c:41:83:8c:1e:20:a6:38:ac:47:e4:3c:dd:
                    df:72:01:0c:15:92:47:c6:f6:bf:94:ac:70:f1:05:
                    ea:39:25:b2:15:6c:9f:f7:18:a3:58:59:f4:15:e7:
                    37:ac:c8:26:d3:06:8c:38:94:24:85:bd:17:9f:ac:
                    54:87:70:81:b7:ce:fa:94:0d:50:a2:b7:98:0d:ad:
                    e2:71:37:9c:21:0a:3b:c5:ea:5a:95:62:fa:5d:6e:
                    e8:ed:09:f3:4e:4c:68:5b:6a:b4:ad:ae:79:01:98:
                    28:dd:23:c5:20:2d:86:42:e2:46:1a:1e:e7:9f:20:
                    b7:8d:1b:44:c5:e9:33:1d:e0:c4:c8:72:01:91:b4:
                    d7:01:c8:b7:d6:74:1e:2b:c0:3b:62:0d:bc:18:a7:
                    ec:33:da:0b:f7:cb:57:16:db:c6:11:4c:7e:6e:54:
                    72:7a:c5:a0:b8:2c:b7:16:7c:05:1f:f4:af:cb:97:
                    08:b4:f5:fd:09:90:47:98:b7:0a:9e:b8:b7:ae:76:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:3D:A6:5C:8A:04:93:BF:DE:CD:BD:AB:69:6A:3C:D2:22:C0:1E
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:1e:95:c8:ac:39:c0:81:7e:6e:5d:cc:68:58:2f:9b:a5:
         9a:cd:da:4e:49:aa:c7:2e:ab:a9:33:02:a0:db:a3:84:69:35:
         a8:9d:2a:8a:49:94:7f:a0:15:4a:a5:0a:e8:1b:74:fe:e7:51:
         75:d4:fe:9c:9e:ed:d0:6e:78:23:97:1a:47:d3:c8:29:b1:d7:
         2d:58:23:06:45:b4:82:73:fd:86:98:7a:db:ea:45:6f:16:15:
         1c:7e:de:67:8e:a0:f7:0e:88:ef:99:c7:f3:eb:cd:40:f8:cc:
         c6:97:ed:c0:d2:93:cc:a0:c8:26:1e:8e:df:85:f7:83:c5:b3:
         82:e0:54:4f:f7:7d:7a:b5:06:ec:e1:f6:a0:01:cc:00:8e:1c:
         39:cc:a6:07:82:df:28:1a:be:6f:fd:e6:25:c8:c5:b8:b0:28:
         82:7b:a7:76:a8:16:f9:f8:79:b8:b9:ec:86:bc:3b:0d:e3:f2:
         39:04:e7:59:8f:33:4d:2e:0f:a9:2e:a6:4f:d7:35:e1:a1:e1:
         43:2e:cd:e0:ae:12:2c:8a:c3:27:24:37:8a:8a:bd:16:5c:fd:
         b9:d7:08:6f:86:c2:66:13:41:f3:db:9d:82:77:0f:54:14:9f:
         45:99:f7:82:f0:d3:1d:47:19:b7:08:4d:b9:c4:6a:68:89:f8:
         b9:a2:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:43:50 2025 by rpki-client