Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          Ggm2s9qAEwmL0n9dRKfC+gukoK1Jpz4fCfmexWaokwM=
Subject key identifier:   76:9A:F3:0C:35:94:B0:E6:17:3E:9A:42:85:39:2C:81:BB:EF:E6:FF
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       019611A1A39C9651436BD2CDCB2AAF37D31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          08CB
Signing time:             Mon 07 Apr 2025 19:02:07 +0000
Manifest this update:     Mon 07 Apr 2025 19:02:07 +0000
Manifest next update:     Tue 08 Apr 2025 19:02:07 +0000
Files and hashes:         1: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: epgk+G9AYj8RCvas+B6n46U5GVMn2XzlHh6F6DCAiyY=)
                          2: g8ik8LhTpez36WlLRS_uriZTLH8.roa (hash: YLceWIfaqnl3VHFv/2hpFigz+RqKWgu9tOc3uAbYAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a1:a3:9c:96:51:43:6b:d2:cd:cb:2a:af:37:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: Apr  7 19:02:07 2025 GMT
            Not After : Apr  8 19:02:07 2025 GMT
        Subject: CN=769af30c3594b0e6173e9a4285392c81bbefe6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:bf:2c:9a:c7:04:59:fa:9d:90:de:a1:b6:
                    c6:1b:a5:c2:09:22:6a:e4:4d:7e:a3:fe:c3:76:27:
                    10:61:c8:9d:ca:92:47:46:e5:ec:b5:8d:89:0f:49:
                    4d:19:31:06:5b:e9:e9:2b:fd:41:29:f4:97:63:f9:
                    c3:10:ef:31:1a:9f:66:07:f0:82:a1:9b:1e:5f:d4:
                    3f:ef:d4:90:7c:cb:f5:4b:51:e1:92:63:0a:a9:57:
                    3f:69:da:2e:3e:31:98:a7:69:53:dc:c2:09:e7:02:
                    0e:f6:56:68:db:77:0e:13:dd:fe:63:97:ec:e2:45:
                    46:02:3f:a0:79:2d:7c:d7:0e:6a:9c:24:64:e1:19:
                    50:02:0e:22:d9:b0:44:66:b3:4b:5f:55:7a:c6:ee:
                    c7:f8:36:ad:af:df:f0:89:bf:6f:8b:1f:58:04:81:
                    05:15:75:83:c2:2b:45:a8:75:79:bf:34:a1:d1:77:
                    77:36:f3:54:2a:2a:a0:dd:31:fd:6d:d6:d3:09:cd:
                    2f:1e:66:aa:b5:2e:ba:47:a8:f7:2d:c3:bd:48:6a:
                    da:23:92:98:39:b1:90:3a:c0:b2:d6:ca:ed:fe:aa:
                    fc:0e:99:8c:3c:67:d0:82:50:da:16:dd:00:32:25:
                    4e:4e:78:39:ab:17:de:28:cf:91:59:2e:fa:cc:d4:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:F3:0C:35:94:B0:E6:17:3E:9A:42:85:39:2C:81:BB:EF:E6:FF
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:56:38:02:ce:a8:72:a3:8f:25:9a:ae:92:e8:5c:64:ef:
         af:49:a1:7f:dc:3b:53:1e:f1:aa:f4:0d:4a:78:7e:ec:e5:d6:
         c8:d0:9d:aa:69:21:02:2e:fd:bd:aa:77:e0:12:60:c2:4b:91:
         eb:1e:ae:28:07:3d:99:25:8c:48:8e:da:be:cb:bf:84:c3:b9:
         1b:b6:e5:05:5d:f6:dc:30:b9:33:b7:93:02:78:98:73:6f:c1:
         82:20:e3:8c:7b:dc:43:63:4e:9c:79:a9:fb:53:c4:00:93:69:
         77:0e:76:7c:62:e2:e1:26:b2:66:91:79:d4:c0:69:0d:f8:5d:
         17:dd:15:e5:95:ef:1d:fb:ca:49:ed:97:38:79:d1:2b:32:2f:
         8f:1b:17:b5:be:2c:37:d8:3c:c0:80:75:cf:83:97:31:e5:88:
         f1:ac:fb:5d:24:b0:1f:57:02:67:32:25:03:1b:10:a0:c9:68:
         5e:ce:a0:4b:af:a8:03:23:6f:20:54:dc:aa:be:26:09:df:9a:
         fb:dd:81:aa:0e:40:e5:a3:9a:54:3f:a7:ae:5b:af:cf:5c:35:
         1b:c9:15:52:16:f9:ea:3e:29:36:8e:2a:75:7c:46:bd:92:dc:
         18:9d:a3:49:b9:f3:ae:03:cb:75:44:62:82:4d:40:7a:43:ef:
         82:bd:f7:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoaOcllFDa9LNyyqvN9MbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTc5NzlkYjcyNmZlM2U2OTNkYjkyZDRmYTE4ZmQ3NDFi
ZTc2OTkwHhcNMjUwNDA3MTkwMjA3WhcNMjUwNDA4MTkwMjA3WjAzMTEwLwYDVQQD
Eyg3NjlhZjMwYzM1OTRiMGU2MTczZTlhNDI4NTM5MmM4MWJiZWZlNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6O/LJrHBFn6nZDeobbGG6XCCSJq
5E1+o/7DdicQYcidypJHRuXstY2JD0lNGTEGW+npK/1BKfSXY/nDEO8xGp9mB/CC
oZseX9Q/79SQfMv1S1HhkmMKqVc/adouPjGYp2lT3MIJ5wIO9lZo23cOE93+Y5fs
4kVGAj+geS181w5qnCRk4RlQAg4i2bBEZrNLX1V6xu7H+Datr9/wib9vix9YBIEF
FXWDwitFqHV5vzSh0Xd3NvNUKiqg3TH9bdbTCc0vHmaqtS66R6j3LcO9SGraI5KY
ObGQOsCy1srt/qr8DpmMPGfQglDaFt0AMiVOTng5qxfeKM+RWS76zNTMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaa8ww1lLDmFz6aQoU5LIG77+b/MB8GA1UdIwQY
MBaAFFqXl523Jv4+aT25LU+hj9dBvnaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84NzY4OGYtNTM4YS00YzI1LWI1ZGEt
ZGVkNWFkZGJlNWNmLzEvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84NzY4OGYtNTM4YS00YzI1LWI1ZGEtZGVkNWFkZGJlNWNm
LzEvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj9WOALO
qHKjjyWarpLoXGTvr0mhf9w7Ux7xqvQNSnh+7OXWyNCdqmkhAi79vap34BJgwkuR
6x6uKAc9mSWMSI7avsu/hMO5G7blBV323DC5M7eTAniYc2/BgiDjjHvcQ2NOnHmp
+1PEAJNpdw52fGLi4SayZpF51MBpDfhdF90V5ZXvHfvKSe2XOHnRKzIvjxsXtb4s
N9g8wIB1z4OXMeWI8az7XSSwH1cCZzIlAxsQoMloXs6gS6+oAyNvIFTcqr4mCd+a
+92Bqg5A5aOaVD+nrluvz1w1G8kVUhb56j4pNo4qdXxGvZLcGJ2jSbnzrgPLdURi
gk1AekPvgr33VA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:44 2025 by rpki-client