Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          375TJO8BI7oPRhQZVQ/Gc2iFUSYU1eCYVAk4DCW7pYg=
Subject key identifier:   04:17:93:42:10:3B:CD:25:20:48:F2:B4:24:6D:47:EC:D4:5C:DB:2E
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       0196406792360646FF4AD0BB4E48D97CA1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          145A
Signing time:             Wed 16 Apr 2025 21:00:51 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:51 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:51 +0000
Files and hashes:         1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
                          2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: yGiEKTK8p7/Y9oHU2CHhkFQYkUv6GO1RxjVu0t5YYrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:92:36:06:46:ff:4a:d0:bb:4e:48:d9:7c:a1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Apr 16 21:00:51 2025 GMT
            Not After : Apr 17 21:00:51 2025 GMT
        Subject: CN=04179342103bcd252048f2b4246d47ecd45cdb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:76:a3:79:77:97:89:49:9f:47:49:84:c3:
                    e8:79:7d:84:d5:4f:90:ca:61:3d:95:3c:31:3d:52:
                    56:52:43:e3:59:9c:c3:6c:6b:3f:b3:ab:a2:ca:a0:
                    ba:15:1d:26:3e:b9:c1:ae:23:b1:c8:81:d4:27:a0:
                    10:75:23:f7:fb:ac:11:02:56:39:bb:45:b1:9e:9d:
                    a4:5c:60:2e:31:57:3d:f9:25:09:07:5c:79:50:38:
                    cd:96:db:f5:eb:e4:b7:1f:2c:ac:70:fc:99:a1:45:
                    70:5e:fb:01:ea:cb:66:32:3e:1a:bc:f4:53:fe:07:
                    b2:92:56:83:7d:da:05:36:ee:26:09:21:fa:0f:17:
                    5c:3f:39:3f:f9:f5:e2:b5:39:f3:a5:81:3b:fc:1c:
                    9a:1b:9c:01:a1:12:d7:76:34:45:4c:48:66:43:0f:
                    ff:13:ea:f0:df:9f:bd:75:5f:8a:fd:2b:1b:e5:82:
                    ea:cb:b2:87:bf:af:84:16:2e:8a:0f:9f:98:73:20:
                    93:4b:92:78:3b:5f:b6:98:5a:69:82:29:cf:ca:d6:
                    d4:3e:a6:75:a5:81:1d:97:ae:aa:5c:ec:a9:ad:c1:
                    a9:17:c4:ab:14:eb:14:29:35:3a:12:84:16:ae:c7:
                    3c:5d:14:2e:ae:bd:9c:35:f4:f1:79:fb:9a:35:3a:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:17:93:42:10:3B:CD:25:20:48:F2:B4:24:6D:47:EC:D4:5C:DB:2E
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:0a:9f:5e:fe:7d:c0:af:35:1b:d7:a6:25:8e:40:38:95:
         52:3b:8e:73:6d:4a:db:c5:18:9c:3d:aa:19:c3:a9:c0:eb:72:
         a1:eb:c0:8a:b0:0c:cd:f8:e8:b1:90:29:1b:e3:6d:4d:ff:1a:
         36:02:8c:1b:bb:f3:18:a6:7f:6e:1c:8f:ad:c8:01:3e:cc:a3:
         0c:70:ef:cf:46:b6:3f:34:3e:85:50:c2:40:e1:c6:ca:1f:89:
         66:c0:3a:15:ed:82:7a:d6:be:ac:4b:07:44:ac:64:3b:99:d7:
         7d:4b:ae:ea:2f:98:be:aa:e0:5f:9e:42:a0:2e:29:4a:e1:21:
         0d:f9:78:15:89:7b:14:d7:6f:4e:82:34:fc:b7:11:57:8b:e9:
         62:27:9d:c0:b9:3e:b9:c6:11:72:54:63:5f:e0:c6:41:7d:26:
         f2:2a:22:81:89:4a:07:d3:8e:e5:c6:ba:55:7a:b6:ff:06:a7:
         53:b4:07:14:26:ea:96:6d:ad:28:c2:c8:47:31:48:20:d6:b4:
         ad:99:7c:f3:4e:53:fb:8d:8f:1c:df:8c:83:6f:c7:09:cb:ce:
         74:36:e3:1f:46:92:28:ea:21:5c:d1:66:81:df:56:5c:28:68:
         81:03:5b:41:32:3b:04:34:d0:14:98:ef:4b:13:24:b1:59:e3:
         58:35:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:46 2025 by rpki-client