Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
File:                     WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json)
Hash identifier:          ISZWf5TlXEUzOUU6pOr5FHCopxXFYjEeB4D7SJxz1Ns=
Subject key identifier:   3A:AC:E3:E7:FE:88:99:90:45:06:6D:9E:13:B8:C8:7D:C0:16:ED:B4
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Certificate issuer:       /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial:       0196515B62E37BF01A27E2F158B97908EF4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
Manifest number:          0F49
Signing time:             Sun 20 Apr 2025 04:01:05 +0000
Manifest this update:     Sun 20 Apr 2025 04:01:05 +0000
Manifest next update:     Mon 21 Apr 2025 04:01:05 +0000
Files and hashes:         1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: fpG8/o9B8p+2kWoGb6xttI9D2sJCXJigJg6rAPumMAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:62:e3:7b:f0:1a:27:e2:f1:58:b9:79:08:ef:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
        Validity
            Not Before: Apr 20 04:01:05 2025 GMT
            Not After : Apr 21 04:01:05 2025 GMT
        Subject: CN=3aace3e7fe88999045066d9e13b8c87dc016edb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:a4:ef:84:86:69:f6:84:2d:51:10:b9:c7:
                    b0:ac:d1:0f:86:a2:e2:cf:63:ba:c6:d2:0d:25:13:
                    8f:b3:5b:66:9c:7d:f0:25:bb:07:41:a9:34:af:ed:
                    2b:e9:0c:7b:86:97:c8:98:b1:c3:86:80:00:97:03:
                    63:3c:18:74:ab:9a:5f:a8:23:a7:dc:58:ce:ab:a6:
                    5e:fe:43:78:7b:84:68:58:9b:9c:de:dc:2a:0d:1f:
                    48:f1:df:07:d2:bc:40:dc:3c:cf:02:d9:ae:b1:ae:
                    09:8e:95:12:0e:84:d3:8b:85:f9:8f:d4:9f:a6:d7:
                    96:ce:fb:b7:2f:2f:7b:e3:bf:40:8c:ec:57:4e:11:
                    ef:3c:6b:52:32:e0:b7:f9:a8:63:67:94:cd:a0:7d:
                    06:30:3a:3c:2d:59:fb:49:6c:03:5c:5a:ca:81:55:
                    c2:d2:10:47:f1:96:ab:88:ea:d8:a0:5f:bd:b6:82:
                    86:a2:6b:42:04:b5:17:9c:fd:74:17:ad:6a:56:46:
                    3b:74:f9:86:46:39:ea:e5:8b:9f:e1:b5:bc:8a:26:
                    f1:20:e3:d5:7f:76:20:d9:55:ef:5a:d2:d0:69:1a:
                    46:6b:9d:fd:e8:e0:18:b1:e7:98:33:e8:fe:35:5b:
                    4d:c5:d2:a0:5b:31:df:e4:e7:cc:c4:32:1b:39:46:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:E3:E7:FE:88:99:90:45:06:6D:9E:13:B8:C8:7D:C0:16:ED:B4
            X509v3 Authority Key Identifier:
                keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:37:a7:ec:0a:4f:ab:a5:f7:a2:07:6e:ee:0a:aa:ef:01:
         06:5e:92:f1:89:9a:ef:2b:b4:49:60:f6:73:31:bf:23:f5:09:
         48:f9:03:c8:1b:61:73:66:5c:30:41:6c:19:97:6e:cd:98:0c:
         13:b2:8f:6a:09:d9:a7:22:b9:ed:4c:00:ff:be:49:82:5a:33:
         ef:4e:8e:68:64:13:cb:1e:0a:1c:6d:a6:2a:96:63:d9:5e:4f:
         53:60:d1:24:88:04:b6:46:fd:aa:4b:a3:d1:4d:ed:62:50:a9:
         dc:03:56:77:78:1b:29:23:20:84:85:0e:d4:9b:d6:60:97:68:
         65:42:f3:e2:f8:42:de:c8:8b:a1:d9:b3:e2:c1:ca:25:01:f1:
         96:19:14:28:36:7a:12:ab:80:1a:f2:a6:77:b7:ab:d7:4c:81:
         eb:7e:d6:55:99:61:87:fb:2d:cc:ad:94:06:31:11:63:cb:a6:
         77:2d:95:cc:2c:d8:8f:61:bb:6b:85:6e:ac:13:32:f8:6c:51:
         47:ac:cd:da:30:ab:c9:a7:17:12:01:24:52:03:51:2a:14:7f:
         f7:b8:25:2b:2d:34:8a:ba:44:ce:93:55:fc:9f:13:d1:67:6f:
         c3:3e:3b:ee:b6:be:cf:67:eb:6d:39:f5:5e:a4:39:aa:d2:00:
         17:6a:58:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW2Lje/AaJ+LxWLl5CO9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2RhOTAyNTFjMjJiNWJhNThjMGJhMjhiYTA0OTBiOWQ2
ZDQyMDUwHhcNMjUwNDIwMDQwMTA1WhcNMjUwNDIxMDQwMTA1WjAzMTEwLwYDVQQD
EygzYWFjZTNlN2ZlODg5OTkwNDUwNjZkOWUxM2I4Yzg3ZGMwMTZlZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ik74SGafaELVEQucewrNEPhqLi
z2O6xtINJROPs1tmnH3wJbsHQak0r+0r6Qx7hpfImLHDhoAAlwNjPBh0q5pfqCOn
3FjOq6Ze/kN4e4RoWJuc3twqDR9I8d8H0rxA3DzPAtmusa4JjpUSDoTTi4X5j9Sf
pteWzvu3Ly97479AjOxXThHvPGtSMuC3+ahjZ5TNoH0GMDo8LVn7SWwDXFrKgVXC
0hBH8ZariOrYoF+9toKGomtCBLUXnP10F61qVkY7dPmGRjnq5Yuf4bW8iibxIOPV
f3Yg2VXvWtLQaRpGa5396OAYseeYM+j+NVtNxdKgWzHf5OfMxDIbOUYVgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqs4+f+iJmQRQZtnhO4yH3AFu20MB8GA1UdIwQY
MBaAFFl9qQJRwitbpYwLoougSQudbUIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMt
ZTE3YmU4MmY0M2NjLzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMtZTE3YmU4MmY0M2Nj
LzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKY3p+wK
T6ul96IHbu4Kqu8BBl6S8Yma7yu0SWD2czG/I/UJSPkDyBthc2ZcMEFsGZduzZgM
E7KPagnZpyK57UwA/75Jgloz706OaGQTyx4KHG2mKpZj2V5PU2DRJIgEtkb9qkuj
0U3tYlCp3ANWd3gbKSMghIUO1JvWYJdoZULz4vhC3siLodmz4sHKJQHxlhkUKDZ6
EquAGvKmd7er10yB637WVZlhh/stzK2UBjERY8umdy2VzCzYj2G7a4VurBMy+GxR
R6zN2jCryacXEgEkUgNRKhR/97glKy00irpEzpNV/J8T0Wdvwz477ra+z2frbTn1
XqQ5qtIAF2pYQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:58 2025 by rpki-client