Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          ZgkMALrbIba8kdPlPB70czZaES0q+5eQ/bqhtrNLmac=
Subject key identifier:   89:76:90:AC:CF:D0:C7:7A:A1:C2:C1:F5:20:13:F6:68:B0:2E:84:00
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       019653B7C764AB5246C3E8F8BEDCBEF6C0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0B88
Signing time:             Sun 20 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 20 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 21 Apr 2025 15:01:15 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: 4gSsSMcixYNHBoYMGQDRUdrNX5XxwNh66NX9kReIh/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b7:c7:64:ab:52:46:c3:e8:f8:be:dc:be:f6:c0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Apr 20 15:01:15 2025 GMT
            Not After : Apr 21 15:01:15 2025 GMT
        Subject: CN=897690accfd0c77aa1c2c1f52013f668b02e8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:aa:2c:46:b3:e3:54:46:46:61:c1:1c:ab:
                    66:27:9e:ab:1e:f9:18:80:b0:c0:26:85:b8:93:02:
                    bf:a1:0d:3f:be:03:c9:aa:88:2a:25:c8:bd:e8:d5:
                    ab:4e:5f:10:ae:64:8c:44:c1:7c:6b:b9:05:03:ad:
                    7d:ea:11:cf:b5:ea:2f:af:00:cb:f3:95:38:6c:70:
                    ca:11:3c:46:8e:99:f7:cf:85:75:80:2f:09:06:d7:
                    44:d9:a6:da:a5:ea:96:62:36:8c:9b:3c:79:16:b7:
                    ab:89:16:d0:aa:50:26:bf:04:7d:f3:cf:7b:a9:26:
                    bb:fe:8a:24:40:e9:1a:e2:9b:0b:ab:2a:95:ff:0a:
                    62:51:51:fc:a7:5b:43:21:54:69:8b:80:9e:ba:60:
                    1a:75:a0:35:0a:0d:f4:00:69:20:1b:1a:2b:aa:90:
                    13:f1:22:14:07:5c:1d:05:0c:37:be:73:5e:23:48:
                    b6:e7:78:c2:bf:d3:99:60:23:95:84:bc:da:ed:51:
                    1c:7c:10:8c:20:0f:45:d5:eb:a6:52:67:9e:40:4d:
                    55:1c:fd:3d:8c:6d:eb:27:64:fe:27:fa:28:6f:1b:
                    f7:a2:cb:15:4f:05:d6:bf:df:a0:f5:6e:9a:30:e7:
                    d5:cd:25:fa:2e:fb:6c:32:19:38:6b:86:3a:9c:fc:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:90:AC:CF:D0:C7:7A:A1:C2:C1:F5:20:13:F6:68:B0:2E:84:00
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:69:9c:c8:77:3d:f4:25:3c:f4:df:71:a6:b5:9b:b2:20:
         1a:bf:cb:3a:39:e9:0e:19:39:d0:e4:44:cb:f7:fc:ca:2d:2c:
         b9:a7:95:c3:b0:f7:b0:60:aa:dd:63:f2:3d:49:1b:0e:1d:10:
         c5:b0:6f:5b:bb:68:9d:58:35:f4:24:ee:a7:ed:17:88:92:be:
         23:68:98:32:58:f9:ee:3d:8d:48:67:39:e8:f9:5e:be:ae:ca:
         d2:a3:78:92:39:c0:ac:e7:4e:06:68:62:65:0d:a2:b3:e4:5f:
         da:26:b1:6d:99:22:63:31:cc:a2:e2:4a:fc:62:0f:86:01:97:
         a7:b5:35:3d:9f:43:47:42:ab:ac:0f:5c:a3:62:57:3b:5b:b4:
         d7:d7:b7:65:9f:1e:6d:65:cf:fe:73:07:b2:f0:a5:e7:36:0f:
         b6:32:1a:a8:c5:82:b7:bc:4b:88:4a:a9:84:0c:1b:19:3f:0b:
         dc:bf:60:be:c1:48:2b:8c:1e:66:41:07:52:67:c8:7c:0d:0f:
         1e:ca:f2:f9:8a:e1:31:19:c1:ce:b9:be:3b:eb:92:93:9f:d8:
         cf:f1:65:84:d9:79:cb:3f:c0:d0:c0:f2:a7:29:6a:69:7a:06:
         0a:38:70:5c:d3:25:7d:45:77:2c:16:36:68:4b:86:99:ca:7d:
         8d:2b:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:14 2025 by rpki-client