Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
File:                     WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft (raw, json)
Hash identifier:          sGx7jAohksTPalUOiEZfe7g3nCye2qCYHwwz22Cy7ZM=
Subject key identifier:   0F:73:06:39:F0:57:A1:5A:83:4D:F4:0C:25:D5:B7:DF:2F:ED:4F:9F
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Certificate issuer:       /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial:       01965123E94514CD6A8FEAC39516F1835F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
Manifest number:          12DD
Signing time:             Sun 20 Apr 2025 03:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:29 +0000
Files and hashes:         1: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl (hash: KngaI3OB6ow3egqJbR3K4zVzTBQhegiYL00bbMByWsI=)
                          2: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (hash: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:23:e9:45:14:cd:6a:8f:ea:c3:95:16:f1:83:5f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
        Validity
            Not Before: Apr 20 03:00:29 2025 GMT
            Not After : Apr 21 03:00:29 2025 GMT
        Subject: CN=0f730639f057a15a834df40c25d5b7df2fed4f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:59:52:51:08:20:6c:81:81:45:ee:e7:26:
                    81:67:10:9e:64:f0:c2:4f:a1:9f:ab:8c:a9:57:35:
                    09:db:47:9f:c2:cb:f7:50:fe:df:50:cb:de:e9:e5:
                    e7:79:2c:55:25:79:ae:01:b0:bb:14:ca:23:50:4a:
                    05:48:a5:63:89:f3:b5:d6:e5:9f:32:bf:8d:8a:b5:
                    78:36:92:8c:33:3d:0b:48:8f:09:bc:ae:c9:05:de:
                    40:fb:ac:b2:52:2d:ba:38:71:7c:24:1a:f5:6e:de:
                    c9:6d:1f:76:cc:e4:45:a7:96:52:fd:42:8f:33:a9:
                    9a:28:a3:91:7c:52:fc:e8:d8:63:6e:ea:5a:7e:8e:
                    5a:7b:cd:5e:fd:39:e9:18:93:39:a9:03:39:8e:93:
                    b9:11:ea:23:09:2d:71:4d:60:84:3d:74:f6:cb:f2:
                    21:aa:ef:22:d2:85:74:cc:6f:41:69:94:d5:cc:7d:
                    f9:ea:d1:0d:db:8f:46:fa:f3:a3:7e:45:3d:87:e0:
                    69:25:55:64:25:16:1c:1c:29:b8:a2:39:92:5c:68:
                    d3:bb:b7:68:77:0f:af:4a:04:02:21:6b:d0:14:35:
                    72:14:3e:ff:34:78:c3:df:aa:71:26:02:46:b0:95:
                    c7:53:70:d2:39:e4:c3:01:32:e8:a8:e2:7c:37:21:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:06:39:F0:57:A1:5A:83:4D:F4:0C:25:D5:B7:DF:2F:ED:4F:9F
            X509v3 Authority Key Identifier:
                keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:69:2f:18:73:6d:0d:f3:0f:ec:72:bd:b3:32:76:0c:d2:
         25:1e:e0:36:59:60:34:f5:10:a0:7f:09:8b:02:08:31:72:f6:
         0c:46:11:0e:4f:7e:e1:72:9c:90:de:92:2b:49:6c:e6:e2:ec:
         51:6e:17:40:df:ae:38:71:17:fa:10:cf:7f:4e:af:3d:a3:bb:
         97:c8:ff:04:1a:8a:2d:19:26:00:0c:29:33:78:90:6b:e0:b6:
         d4:66:b1:bf:fa:b7:a2:07:9d:cf:24:3e:94:62:dd:92:60:e1:
         0d:57:55:50:b2:a3:8f:c1:6f:ba:8b:76:dc:93:28:f3:3f:e0:
         62:6b:02:41:63:56:74:5c:31:b9:a1:72:26:49:31:7b:6e:30:
         65:ce:8b:94:34:95:58:16:05:a9:65:bc:4f:67:88:60:30:21:
         bc:14:fb:9a:36:c7:8f:f9:6f:80:e2:0d:12:14:cd:55:a1:7d:
         34:b3:a7:10:91:ce:c8:65:13:4a:10:91:30:bd:8a:1c:73:f2:
         42:f3:9a:88:c3:94:9a:b8:96:b9:5e:57:dc:77:bf:4f:03:cb:
         7b:0f:df:68:60:f4:b7:93:17:71:e4:55:7a:97:0f:05:72:3d:
         85:5c:15:e0:f2:05:f3:db:53:e3:11:5e:9d:2f:12:9e:6c:1f:
         5b:d4:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:50:41 2025 by rpki-client