Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          +lecBOHUmQ9cgHmRIDS7/+r+s7vHS5s83WnLPsRq360=
Subject key identifier:   4C:0C:5D:40:2D:A2:DD:3C:01:6A:F8:0C:82:57:C8:9D:BC:E9:E1:DD
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       01963EE74DB0886ADC4B9A33C135C9777FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          14F9
Signing time:             Wed 16 Apr 2025 14:01:08 +0000
Manifest this update:     Wed 16 Apr 2025 14:01:08 +0000
Manifest next update:     Thu 17 Apr 2025 14:01:08 +0000
Files and hashes:         1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: EWGQipr8nt+mjYb5x2K3KuSbIFKGetp6ix0azN0Ba9s=)
                          2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:4d:b0:88:6a:dc:4b:9a:33:c1:35:c9:77:7f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: Apr 16 14:01:08 2025 GMT
            Not After : Apr 17 14:01:08 2025 GMT
        Subject: CN=4c0c5d402da2dd3c016af80c8257c89dbce9e1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:7c:d3:e8:b2:17:a6:92:fe:78:f3:23:66:
                    c4:9f:32:3d:80:aa:d2:01:bd:1f:bb:3f:c7:2c:c8:
                    8d:ce:b9:97:cc:52:bf:06:be:e6:3c:01:81:dc:cd:
                    f3:40:92:ae:fd:ef:1d:3c:96:5a:f7:30:70:a2:ce:
                    2a:05:55:0d:f3:85:ae:a2:36:c1:f0:b6:36:d9:c3:
                    be:66:44:32:be:78:be:f1:20:63:fb:de:50:88:17:
                    15:6c:7c:d1:4e:db:05:31:1c:96:57:9d:9b:7d:7a:
                    c6:a0:f8:5c:f6:0b:2c:2f:4a:5f:cc:9e:29:7a:99:
                    79:b9:7d:da:49:c3:d8:2b:40:8a:5e:2f:78:ec:63:
                    b0:3d:7c:00:26:2e:22:93:b8:0c:e3:ce:16:cf:cc:
                    d5:ce:43:ad:ea:f6:b1:f5:be:10:37:d2:b3:cb:b0:
                    a3:b5:13:05:1c:8b:66:7b:b8:95:93:8c:c7:ca:11:
                    9c:43:34:0f:97:94:98:02:7f:58:cc:f3:83:21:c9:
                    d4:01:59:16:df:74:64:18:62:ec:fc:78:65:f4:2f:
                    25:ba:64:59:a9:38:e4:45:fc:3c:31:46:f2:8c:fb:
                    10:7a:20:81:18:ce:30:65:81:32:03:b1:3f:68:16:
                    3e:41:33:01:3c:c9:a3:ec:53:a2:c2:f8:07:d3:3b:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:5D:40:2D:A2:DD:3C:01:6A:F8:0C:82:57:C8:9D:BC:E9:E1:DD
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:62:8a:5c:c1:a6:74:99:98:87:bd:c0:6d:b2:3e:bb:55:
         1d:37:39:7c:0c:3c:fe:58:36:67:59:5a:2a:22:f2:4d:31:e5:
         24:ad:27:10:64:a6:bb:1a:9d:21:39:56:bf:57:04:1a:d9:98:
         37:de:ab:fe:0e:3b:db:e3:ad:c9:7e:cb:c4:85:55:99:b8:c3:
         97:93:26:13:61:9e:ce:b9:62:b3:7b:2e:38:90:81:43:fd:e0:
         6f:8a:61:41:f2:5d:98:20:b7:30:22:36:33:e7:3b:64:d5:8a:
         c9:b4:7d:f7:9c:a5:79:88:58:73:b6:ce:42:e1:b0:2b:66:31:
         d4:e3:61:8f:5b:ef:6f:27:a8:24:51:e4:3e:d9:e6:de:e4:5d:
         b5:ca:9a:58:03:0e:b1:b3:fd:c5:9e:2d:f6:90:90:88:de:c3:
         49:a1:21:0d:85:91:da:3b:14:09:f6:d4:c3:a8:50:47:4a:f2:
         8d:b7:70:61:e1:9d:3b:14:81:2a:d5:0b:62:c6:87:2b:df:44:
         01:d4:45:34:6f:df:f5:ab:ca:f0:b2:f6:ff:b4:0c:24:c7:c7:
         d4:8b:2c:42:9f:b6:8a:0c:94:ef:72:59:04:a0:4f:c1:42:3c:
         4c:2e:53:20:90:f6:06:20:bc:7f:26:26:06:7f:ca:4e:ad:a2:
         b0:96:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:49 2025 by rpki-client