Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File:                     WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier:          mMTWzPWZet7P72W243zKan6eelgC9T009UHyuVz9a/k=
Subject key identifier:   4D:13:BE:63:9A:36:D5:67:A4:C5:7B:CD:B2:20:C0:7A:39:CF:D9:54
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer:       /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial:       019511349297A7FC56131302E30D5167058B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number:          07B2
Signing time:             Mon 17 Feb 2025 00:00:12 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:12 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:12 +0000
Files and hashes:         1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: s1yL2+EB30xhAgl9fZOkQn2UBvhh4AgLt0kLLsBRz58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:92:97:a7:fc:56:13:13:02:e3:0d:51:67:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
        Validity
            Not Before: Feb 17 00:00:12 2025 GMT
            Not After : Feb 18 00:00:12 2025 GMT
        Subject: CN=4d13be639a36d567a4c57bcdb220c07a39cfd954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:42:58:f9:7e:43:ad:7a:b2:bf:22:dd:e8:
                    aa:a1:03:51:43:61:67:2c:3d:74:89:9b:dd:2b:30:
                    f6:f6:6d:7c:f7:75:41:9b:27:4c:ac:2d:73:5a:f1:
                    37:25:b6:7d:6c:9a:98:95:24:61:ca:ed:07:29:65:
                    c1:b1:63:75:9b:b6:bd:7f:e9:82:8f:8c:99:97:ba:
                    68:21:82:e7:60:07:b5:e2:40:1a:68:84:d5:97:83:
                    0c:01:42:f2:8e:00:c0:f8:2c:98:6e:67:20:31:46:
                    74:1c:4e:90:50:05:03:af:4e:3b:8e:ca:91:e3:a2:
                    8c:33:ba:cd:23:b3:99:11:b7:f3:62:80:85:71:ec:
                    37:bd:ac:1c:b4:10:91:4f:02:1d:fb:f1:6b:68:00:
                    60:ca:62:77:4f:ad:e5:09:7a:13:e3:a3:be:bb:35:
                    6d:7e:53:02:f7:e2:d7:db:e4:d7:28:85:7a:5d:e5:
                    79:1c:c6:99:a3:96:89:a2:61:b1:3d:d7:33:ea:ed:
                    5a:68:ca:ce:42:84:7a:98:90:5c:e5:46:e7:e5:c0:
                    8a:b1:8d:77:2a:c5:71:78:83:b0:a3:76:19:61:56:
                    b2:c1:63:8f:97:1f:85:82:ca:48:69:e2:d2:42:36:
                    94:2c:d6:7a:e1:a6:9c:09:25:49:89:25:b9:3c:3b:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:BE:63:9A:36:D5:67:A4:C5:7B:CD:B2:20:C0:7A:39:CF:D9:54
            X509v3 Authority Key Identifier:
                keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:13:19:cb:54:d3:01:0b:25:a4:e4:a2:9c:45:57:32:ff:52:
         cb:6d:0f:29:d5:58:d6:a4:df:a4:02:4b:23:7f:c8:1f:00:20:
         07:e3:7c:4a:2c:88:a6:fe:55:5e:fb:93:eb:ea:68:96:fb:41:
         1f:b5:c3:67:80:c1:48:26:4e:e4:b3:0f:9d:97:be:f8:28:e1:
         e7:6b:c8:b4:a2:15:62:64:30:95:03:ee:58:26:30:56:97:08:
         96:8a:10:5c:6e:eb:b8:2e:1b:69:06:ba:b2:d5:77:23:b4:b5:
         2d:1c:dc:1b:1d:e1:59:a9:db:3c:6d:2a:eb:02:73:5d:d4:c0:
         58:af:b1:ef:ad:a6:25:f0:db:d2:5b:98:43:39:f1:b8:9f:5c:
         d2:af:c2:b6:e7:29:a2:e6:94:b9:b9:70:a1:49:3e:80:78:a3:
         22:fe:06:93:fd:2a:12:a3:e6:73:e9:ac:56:7f:64:5f:df:ba:
         c0:7c:52:66:3b:09:50:65:6c:8d:00:cc:aa:24:d9:d7:3d:04:
         01:40:68:35:d6:20:57:1e:aa:d4:ef:f0:fb:1a:4b:80:e6:6a:
         eb:9a:71:ad:a0:79:c8:c9:92:b7:e5:b6:68:2f:ce:97:4e:7f:
         bd:b4:a0:db:71:40:4f:89:e9:c3:d9:6d:dc:65:b1:ef:4b:a5:
         71:96:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:35 2025 by rpki-client