Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          t9wZ30+qPcEXbgxWzQiltnK3QDjPJu+ip+xFiFHhkKc=
Subject key identifier:   35:29:89:06:4C:24:E5:FA:6D:B2:7A:59:43:D7:E8:EC:D2:A8:64:D8
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       0194C38820858C2DC501AE967ECDB5927336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          142A
Signing time:             Sat 01 Feb 2025 22:01:05 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:05 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:05 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: vzuJNzQR/amWe0ca6QeAHyv+P2hdzB8/pG/OEwoDhyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:20:85:8c:2d:c5:01:ae:96:7e:cd:b5:92:73:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: Feb  1 22:01:05 2025 GMT
            Not After : Feb  2 22:01:05 2025 GMT
        Subject: CN=352989064c24e5fa6db27a5943d7e8ecd2a864d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:13:76:b3:50:ca:f7:c7:9b:bb:bd:05:17:
                    4e:d1:83:e0:ba:c6:92:8f:36:65:b5:83:93:59:4f:
                    35:e1:48:d3:28:06:11:cd:8c:3b:0b:55:d9:87:f5:
                    cf:2e:36:d5:1a:ab:74:2f:2d:7f:d6:75:07:db:48:
                    a0:30:18:89:00:b8:31:c9:65:21:76:79:4c:d0:6e:
                    f3:00:98:5f:6d:f4:3f:b6:7c:34:39:88:f7:50:5d:
                    35:a9:28:2e:79:42:2b:70:ae:c7:36:66:07:7e:7d:
                    bb:0d:01:41:61:90:e8:f3:11:b4:73:d0:1c:dc:3c:
                    ea:a2:c6:02:23:c2:8b:9a:2e:45:d9:14:af:5e:de:
                    99:62:4b:c2:0c:10:52:77:6b:99:1d:22:f9:45:c9:
                    76:60:c0:09:8e:8d:60:cd:53:dd:6d:a3:39:f7:45:
                    f5:93:e6:5b:b6:f4:bc:5e:ff:aa:49:d6:0f:fb:26:
                    76:85:97:e2:ce:9e:b7:08:23:97:9e:9c:e2:85:e5:
                    eb:12:f0:00:e3:2f:b1:f4:4c:f5:37:46:20:a6:8e:
                    9e:27:7f:23:52:f9:e8:9d:48:41:9c:01:0e:6d:65:
                    89:5b:dd:7d:38:5c:52:63:2b:fa:d8:ff:b5:75:51:
                    c1:f8:cc:14:e3:00:e3:ea:bb:2d:2b:f9:42:29:8a:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:89:06:4C:24:E5:FA:6D:B2:7A:59:43:D7:E8:EC:D2:A8:64:D8
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:92:1a:1c:39:63:60:3d:9d:87:61:29:3c:75:83:ff:81:
         a9:61:6f:22:bf:ed:79:c6:a0:5c:a4:df:a7:9e:aa:dd:d7:e2:
         fb:f6:c3:26:5f:98:63:52:72:a0:3f:93:34:c1:4d:d1:7c:fe:
         a1:06:ab:ac:21:62:ce:ed:04:11:37:6b:cc:c5:69:4f:1f:3c:
         6d:b1:a8:e8:89:eb:68:04:08:31:21:96:cc:31:66:3b:68:a3:
         f7:09:5f:b5:d0:eb:dd:39:4f:31:33:56:4a:0a:ad:7e:67:02:
         98:34:49:11:85:6e:a4:24:93:e1:9b:99:6d:1b:d2:f8:58:4a:
         d2:56:47:81:a9:71:89:19:df:21:2d:e0:8a:0f:55:8b:3f:a2:
         d3:3e:e2:3c:b8:0d:8c:89:5f:c6:5a:cc:a6:b6:b0:14:61:66:
         eb:5a:5f:9b:78:29:b1:06:82:c6:73:2b:8a:33:ce:89:f7:a8:
         cd:70:33:b6:a1:27:a2:ba:41:8a:bd:f8:51:69:1f:3b:70:a3:
         97:91:e3:0d:4d:9a:c2:da:d2:0d:c9:c0:bf:0f:8e:86:e2:06:
         be:dd:69:c3:89:c4:82:15:d6:4f:48:ef:b1:1a:d7:2b:3c:23:
         05:5f:a6:57:c8:01:01:78:ec:94:34:27:55:4d:73:dd:b8:d1:
         ba:49:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:31 2025 by rpki-client