Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
File:                     WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft (raw, json)
Hash identifier:          ccls7pxb6WW1wQvVblIJLXnd1PBK2yjS9L7jR8Pbpso=
Subject key identifier:   EC:6F:D1:D9:ED:55:CC:11:4A:82:83:64:2E:87:BC:84:DF:C7:83:FB
Authority key identifier: 59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
Certificate issuer:       /CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
Certificate serial:       01964DEBB1281B96B42F86BCE397BDF15FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
Manifest number:          01F1
Signing time:             Sat 19 Apr 2025 12:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:13 +0000
Files and hashes:         1: WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl (hash: XpDHVq6EFz7GmcNcp65Wt7qgfyI3v0Ii20VU4+AHPUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:eb:b1:28:1b:96:b4:2f:86:bc:e3:97:bd:f1:5f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
        Validity
            Not Before: Apr 19 12:00:13 2025 GMT
            Not After : Apr 20 12:00:13 2025 GMT
        Subject: CN=ec6fd1d9ed55cc114a8283642e87bc84dfc783fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:7c:e3:ee:ce:53:14:2a:23:28:e2:5c:81:
                    76:cf:89:82:32:77:90:d6:9d:da:f9:c4:60:3d:9b:
                    cf:0a:e0:be:70:5c:d3:36:dc:3f:a8:c3:95:0e:82:
                    96:b6:96:7c:34:28:4a:76:98:9d:77:08:79:35:fc:
                    28:f1:6a:7f:c4:61:de:f3:a3:ee:dd:b0:ff:8b:da:
                    05:bc:5d:7e:86:43:4f:8f:81:79:0b:a6:99:05:05:
                    da:3b:58:28:85:18:f5:4a:db:f7:c3:36:51:8c:d2:
                    0d:7b:c7:77:f5:2e:ef:f1:82:8e:8e:bd:87:af:58:
                    80:89:68:59:e3:9a:4e:e1:6a:6c:de:ad:3d:02:9b:
                    e5:c6:a2:43:10:52:42:6c:a5:7d:fb:92:06:15:3f:
                    ff:c7:b3:a6:4d:4d:c4:5e:ea:84:59:68:b6:b4:1b:
                    7b:98:2a:b0:dd:5a:7b:35:7d:c1:9f:5d:2f:ba:98:
                    c1:4f:fe:89:29:23:3f:02:d2:1c:69:b4:91:89:9e:
                    3a:90:29:b5:93:ef:fc:ec:a8:f8:a9:ed:18:11:73:
                    56:02:c9:06:66:f3:ec:b1:81:10:15:23:c3:cd:e8:
                    90:87:db:e4:7c:dd:b8:87:46:9d:06:d7:2c:de:78:
                    2e:fc:63:f6:b9:d3:1e:52:8c:3d:31:7e:bf:91:28:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:D1:D9:ED:55:CC:11:4A:82:83:64:2E:87:BC:84:DF:C7:83:FB
            X509v3 Authority Key Identifier:
                keyid:59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:0f:45:56:da:96:41:c8:36:bd:05:21:12:33:7d:09:e2:
         ea:81:72:25:1a:28:4c:1a:f1:60:4b:f0:11:d9:11:29:dc:48:
         c7:f7:49:f0:b8:aa:57:f5:b9:16:77:28:19:44:81:3c:c6:1a:
         10:3c:14:59:b7:77:c8:40:40:48:60:0f:57:f8:04:f7:cd:eb:
         02:2d:89:72:00:28:56:4d:f4:c4:61:1c:59:8d:a0:a5:5b:7f:
         52:1b:ea:6c:74:40:57:74:b4:87:b8:d7:70:9a:c2:89:e6:d6:
         92:4d:e4:7a:b8:4e:07:c0:eb:33:57:62:ef:73:a7:7a:89:a1:
         b7:86:58:e0:be:f6:87:ea:be:47:7e:26:61:e5:d4:70:c8:af:
         e2:81:21:03:c0:5a:6e:69:bf:4d:00:ff:e6:2e:34:74:1c:f6:
         b3:00:a6:b0:ae:de:ae:65:18:df:ef:f7:8c:bc:d5:79:8b:65:
         5f:8d:3a:9e:48:57:3e:b7:39:3c:f5:8c:78:6f:1b:34:43:6c:
         df:db:c0:fc:71:ff:73:df:7d:d1:3a:d6:c0:9c:c7:dc:2d:ec:
         88:9b:69:27:bd:1a:81:f1:9e:7f:c3:71:92:38:8a:1d:4e:29:
         56:01:0d:43:fb:5b:86:83:8d:17:77:cb:25:5d:20:38:58:f4:
         ec:b0:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:49 2025 by rpki-client