Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File:                     wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier:          YTUys+uY+muHVJ3g/+8szm/gOIx9nOw0kdOMxXYudoE=
Subject key identifier:   C2:F8:5A:92:F4:24:57:05:4E:3D:0D:40:5E:5D:9A:FF:4C:51:14:96
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer:       /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial:       019610FC14AB64A34BC1521623AF9307C530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number:          0F73
Signing time:             Mon 07 Apr 2025 16:01:17 +0000
Manifest this update:     Mon 07 Apr 2025 16:01:17 +0000
Manifest next update:     Tue 08 Apr 2025 16:01:17 +0000
Files and hashes:         1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: c1WZJJVMcwgpxgbXv7eoRvQ0MA4nOvHRDYxQGjWWD2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:fc:14:ab:64:a3:4b:c1:52:16:23:af:93:07:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
        Validity
            Not Before: Apr  7 16:01:17 2025 GMT
            Not After : Apr  8 16:01:17 2025 GMT
        Subject: CN=c2f85a92f42457054e3d0d405e5d9aff4c511496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:aa:65:36:90:4b:07:bf:15:40:3d:df:48:
                    3d:7e:80:20:d8:33:a4:1c:38:0a:25:b5:65:cd:b7:
                    57:33:33:ef:53:63:20:92:c3:19:60:75:6b:33:2e:
                    a3:72:68:67:7f:7e:8e:34:c6:65:46:88:2d:2f:12:
                    ff:8b:da:6b:cb:a7:12:6f:cd:68:eb:4d:65:67:d6:
                    f9:d2:a5:5e:77:3a:eb:37:3a:0e:51:e9:cc:d4:7d:
                    3f:96:09:a5:63:14:1a:13:96:8a:fe:58:59:29:51:
                    bc:06:74:eb:7e:a9:3e:6e:98:84:c1:67:65:b7:3b:
                    18:a3:9f:11:1b:a4:e1:d7:bd:91:8d:22:81:9d:00:
                    71:1c:98:65:68:0b:aa:cf:ee:86:41:90:df:1a:c0:
                    f3:a0:4f:37:57:23:49:77:21:eb:d0:26:6f:b0:93:
                    9a:38:08:2e:23:12:b0:9e:7e:55:d3:b2:ed:b2:2f:
                    7b:21:db:e7:fe:95:c2:4d:12:41:25:f4:b9:a0:87:
                    98:72:cb:8b:fc:e9:d4:a1:0b:2b:60:68:bb:74:7e:
                    9e:f2:90:67:de:d1:75:e3:b3:28:18:46:7d:c6:07:
                    ce:03:9a:42:49:91:df:ae:cc:0f:55:82:10:e8:2e:
                    a5:26:e7:1e:cd:20:81:0a:22:f5:3e:1b:38:d5:1c:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F8:5A:92:F4:24:57:05:4E:3D:0D:40:5E:5D:9A:FF:4C:51:14:96
            X509v3 Authority Key Identifier:
                keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:c8:fa:c5:22:65:02:3c:54:54:16:28:f8:88:75:9f:a4:
         2d:4d:b7:15:83:6d:1b:81:47:a1:80:8b:37:97:56:82:19:95:
         16:45:4c:4a:c2:36:2c:51:c2:65:06:c3:c8:af:07:d9:a5:1b:
         19:45:fe:95:59:4d:83:d7:04:80:c1:29:7a:96:bd:9a:69:9d:
         ad:de:f6:45:62:a8:81:94:62:7b:e3:b4:b1:05:15:05:88:e9:
         76:1c:42:27:60:03:cb:a5:ea:74:77:b4:51:54:b5:43:d4:2c:
         b8:2f:87:cc:84:60:6b:6a:07:87:ab:77:e5:86:1e:3b:4a:eb:
         e9:7b:1e:a3:04:4c:8f:2d:92:4c:63:86:f1:06:13:b5:46:51:
         68:71:1e:4b:30:ad:15:bc:9f:21:38:1f:36:86:3a:64:b3:31:
         96:4d:ef:e3:d8:07:58:93:78:aa:bf:1a:79:ea:1e:e0:0b:6e:
         82:55:32:ff:f0:5d:19:a4:41:27:49:ba:46:cf:d4:3f:d6:0e:
         9a:46:28:26:23:d5:8e:1f:75:79:00:4a:99:14:84:39:e0:05:
         83:4a:21:4f:f9:4e:a0:78:e3:93:73:99:d4:22:87:7d:4c:74:
         25:32:bd:69:52:f5:e9:1b:78:1a:a1:d2:13:c0:a8:64:56:3e:
         43:4d:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:22 2025 by rpki-client