Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          FllrwQQQqDaDKlVLr4hgpaaz5QMCRkVggahaHGu8w9E=
Subject key identifier:   A4:B0:45:B1:57:7C:87:45:90:48:EE:E6:77:61:BC:ED:FB:0E:AB:F1
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       01964F6D2DB731A590FE7822045EE7ECE991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          0C9C
Signing time:             Sat 19 Apr 2025 19:01:17 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:17 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:17 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: BfkON2S/JOHVDA9oIFKNa7b/V8zinSrHYkraPov8/zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:2d:b7:31:a5:90:fe:78:22:04:5e:e7:ec:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Apr 19 19:01:17 2025 GMT
            Not After : Apr 20 19:01:17 2025 GMT
        Subject: CN=a4b045b1577c87459048eee67761bcedfb0eabf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:d7:1b:b6:da:e3:91:e3:ea:01:c1:48:91:
                    a8:30:44:71:7f:62:ef:e6:88:c9:8c:77:cc:6e:9b:
                    aa:a1:1f:c7:a7:45:70:1a:54:58:eb:64:58:b9:27:
                    49:f9:18:ab:05:28:2c:42:bd:4a:b1:2a:40:cf:1c:
                    bc:61:f4:40:42:f2:82:a1:a7:32:81:47:27:22:63:
                    b2:bf:10:c5:14:6c:94:c4:1d:29:d8:4d:56:45:46:
                    b4:72:f1:42:15:c3:3a:e6:1f:fd:08:0b:b2:02:ba:
                    1e:45:a9:f3:44:32:54:00:36:47:8c:82:3b:24:1a:
                    31:67:c6:15:5f:e4:a4:52:81:5d:bf:49:4e:19:97:
                    c2:5d:f2:db:34:88:31:82:f0:c3:0e:e4:0d:a2:78:
                    82:2b:3e:57:02:c9:7e:44:76:b2:3a:70:bb:59:15:
                    a2:34:d9:4d:41:ae:26:48:23:06:df:60:36:cc:ba:
                    0d:c8:55:05:5e:5d:a1:10:cc:6c:79:51:78:94:c0:
                    74:dc:1f:c8:30:4a:fa:0f:af:f8:16:3b:76:9c:b0:
                    6b:c5:b0:0b:1d:68:fb:81:4d:ff:56:30:2c:b0:0d:
                    9e:28:5e:40:23:50:8e:b9:ce:15:53:ca:0a:d6:2a:
                    ca:63:ee:2d:52:2e:3f:60:39:20:6a:a5:ee:69:36:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B0:45:B1:57:7C:87:45:90:48:EE:E6:77:61:BC:ED:FB:0E:AB:F1
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:59:25:ea:e8:39:d9:87:78:18:b8:c0:c9:90:88:a2:28:
         01:e7:de:19:2a:00:9f:a6:e2:cc:76:46:90:d3:4d:5e:29:65:
         1f:bb:49:54:d9:07:e5:f0:f7:8f:0e:93:73:67:26:7b:b9:9b:
         f6:14:8b:d8:f8:de:50:0a:43:f6:59:ca:a8:83:21:7d:43:a5:
         84:0d:c1:f0:c3:f4:a4:84:70:9f:6e:3e:4d:6b:d1:3b:e6:0c:
         fe:c6:77:7e:69:13:74:f2:b9:1e:42:03:61:ef:93:1b:0f:d0:
         6e:f6:2e:46:c5:b0:76:c5:45:ed:f7:7d:b1:8f:cb:ca:68:cd:
         84:fd:30:5e:1e:c9:cd:b4:f9:47:e1:89:7c:f4:89:e1:7b:d1:
         33:13:c0:3c:3f:be:85:6d:c4:64:0f:fd:2a:da:df:91:5b:b1:
         39:79:07:11:20:46:6f:20:04:d8:fb:4f:9c:46:68:b2:4f:6c:
         2c:3b:be:c1:2b:e0:41:e5:90:b7:82:7b:8c:35:a9:6f:78:40:
         55:31:33:49:d3:89:02:e6:ee:ae:05:3d:46:03:67:9b:17:58:
         90:36:05:6f:69:ca:4e:98:9c:0a:1c:cc:1d:6f:c0:3b:2f:fb:
         5c:1a:6c:92:ee:2e:90:f4:fb:81:db:3c:8e:f9:e0:9a:7a:c3:
         71:c1:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:09 2025 by rpki-client