Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          vxTApJRpi0oU7aPfQFTnbCyUnARBKmD6tVDu0HoOFkA=
Subject key identifier:   7E:0E:35:5F:83:4F:CA:2B:59:DE:E7:E5:8B:8B:26:A2:39:50:D5:4E
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       01958CCDFDA66DA39B7E3296EB450E1F6019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0915
Signing time:             Thu 13 Mar 2025 00:01:04 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:04 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:04 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: 9cic8UxLNkTydOh7q5RVLibYWx+91WC1T8aun/4Y7rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:cd:fd:a6:6d:a3:9b:7e:32:96:eb:45:0e:1f:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Mar 13 00:01:04 2025 GMT
            Not After : Mar 14 00:01:04 2025 GMT
        Subject: CN=7e0e355f834fca2b59dee7e58b8b26a23950d54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:42:e5:24:aa:59:b4:b0:d2:df:89:71:72:
                    55:9e:5d:cc:17:d2:e7:fd:b2:19:4b:4a:6b:42:91:
                    0f:3d:e9:59:47:73:dd:78:53:88:fc:37:09:29:7d:
                    cf:7a:72:b7:b7:0a:c2:3c:36:a1:a5:6b:a1:24:a3:
                    d0:de:a1:ae:72:72:5b:60:02:09:4e:31:6f:02:38:
                    6a:f8:b7:f7:08:a1:90:db:16:e5:ad:1a:06:02:4c:
                    64:ce:46:f2:c7:d6:56:b3:22:f2:d3:5a:7e:af:6c:
                    3c:87:16:69:cd:b5:8d:db:ed:f5:2f:95:0d:3a:56:
                    a3:84:2c:fd:97:be:35:c4:c5:15:01:d5:67:6f:23:
                    2a:8e:ea:28:ef:76:27:45:f3:fc:3d:81:d3:c0:c1:
                    07:14:23:bb:e3:89:74:d8:9f:19:77:64:e5:95:e3:
                    86:21:cd:e6:5a:3d:7f:4f:8d:f6:a2:0c:e8:6d:97:
                    9c:bf:a7:f3:55:0e:1c:89:b7:08:d7:cb:3a:69:a7:
                    0c:21:8e:fb:5e:f6:5f:27:ac:49:fd:3b:4a:bf:bc:
                    22:0e:41:83:a7:c8:05:94:98:bc:ad:37:2b:5e:98:
                    ec:49:45:a6:9b:6c:3d:4a:aa:84:01:36:cd:05:4d:
                    b6:ff:44:80:d1:d2:ee:53:d6:7b:f8:15:3e:30:9e:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:35:5F:83:4F:CA:2B:59:DE:E7:E5:8B:8B:26:A2:39:50:D5:4E
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:58:e7:d4:51:65:80:0d:79:d5:40:8f:2b:64:f0:7d:8e:4e:
         f2:50:63:8d:82:fd:18:d4:ea:3b:ff:17:00:8c:24:10:06:89:
         c8:88:4d:7c:d6:17:37:3f:79:3d:84:f3:a6:d0:70:99:5d:78:
         13:0d:1c:8a:e4:05:db:b7:19:f3:a0:2b:b6:97:11:02:f0:68:
         b5:72:e5:74:b3:3d:cf:93:53:72:07:dc:b3:72:8c:e4:fc:87:
         19:24:09:4c:ff:3d:6f:fe:5a:3a:89:b0:67:84:54:31:48:23:
         b9:0b:be:b8:ed:21:87:59:39:b8:9c:34:37:43:cc:88:4c:88:
         53:f6:0a:3c:ed:90:0a:bc:4c:50:49:ac:c1:37:5e:b2:5a:b5:
         f4:5a:15:2e:2b:e6:e9:9b:81:2e:02:d5:16:22:fc:8b:bd:b9:
         3b:be:54:10:3d:9e:96:62:00:af:92:c8:b1:d4:1d:29:09:af:
         af:95:f4:97:31:91:6d:80:c0:b3:9a:a7:80:8e:4b:e3:83:c7:
         e9:eb:95:22:8d:38:5c:7c:a2:76:25:3b:df:52:40:f4:be:d9:
         a1:95:e2:27:4f:c0:69:26:d0:91:60:d8:83:db:6b:03:65:b5:
         12:8d:f1:e5:68:35:eb:3c:20:4e:7b:51:51:65:d0:36:1e:00:
         ee:d9:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:34 2025 by rpki-client