Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          swNf4rtU9UWEcW/0HnS9E216vRiQcbiPCAjuoo7dd6s=
Subject key identifier:   6E:46:00:2A:36:84:7E:20:A8:92:FD:A4:6D:CB:7E:3E:A1:0B:1E:29
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       0194C3BE875561D0C4C53DE0BCF48828690A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          02D9
Signing time:             Sat 01 Feb 2025 23:00:31 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:31 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:31 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: Gzr676FEh9c3+qLIzbnyhMuR9qrNus8HrgbsW/NxWPo=)
                          2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:87:55:61:d0:c4:c5:3d:e0:bc:f4:88:28:69:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Feb  1 23:00:31 2025 GMT
            Not After : Feb  2 23:00:31 2025 GMT
        Subject: CN=6e46002a36847e20a892fda46dcb7e3ea10b1e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:25:74:b5:96:b4:5d:53:29:23:42:cf:94:
                    33:68:92:be:8e:80:db:19:04:1d:c4:aa:23:e9:dd:
                    f4:cb:eb:53:a9:9b:92:a0:0a:ca:45:51:94:16:27:
                    e3:64:cb:aa:8a:3d:97:be:06:2d:f9:1a:ad:85:78:
                    e4:9d:58:65:f7:cf:b8:c6:43:01:b6:ac:3a:8f:38:
                    cc:d7:f3:04:96:ce:d6:38:b7:c5:d2:cb:8d:ef:28:
                    c4:f6:ce:86:76:ed:21:09:87:8c:13:71:7f:e0:5d:
                    79:41:0c:28:a1:15:b9:fc:e1:13:ab:b0:c0:64:6b:
                    95:9b:6f:4d:90:aa:48:07:fb:20:5a:c1:d5:94:c6:
                    61:78:a6:32:e5:ee:fc:d2:36:61:89:82:be:d3:96:
                    33:19:8f:b1:7a:81:be:74:4a:fe:4a:2c:cd:33:c9:
                    5e:79:73:45:b2:12:90:e1:13:d8:b2:cd:53:55:08:
                    94:1a:3f:99:bf:00:9a:ce:23:67:bf:94:10:17:ba:
                    4d:5f:03:ed:fe:44:a3:e6:24:b1:63:45:5b:7d:ad:
                    81:ae:71:ae:97:28:cf:75:da:71:37:90:52:38:b0:
                    a1:6a:58:49:b8:f1:0b:ac:dd:d4:57:9c:ff:13:96:
                    7b:6c:60:d9:fb:1f:78:72:4b:96:f7:66:f8:18:33:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:46:00:2A:36:84:7E:20:A8:92:FD:A4:6D:CB:7E:3E:A1:0B:1E:29
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:40:04:9a:95:3c:05:24:08:69:19:30:36:e6:3f:ab:a9:
         14:bb:a0:c4:05:e4:d3:85:2b:5a:bd:9e:d7:b4:a9:1d:3f:80:
         fc:5e:8b:6c:a8:af:34:75:24:10:af:85:ff:6c:1a:0d:7e:f6:
         e0:ca:a8:03:75:ed:2f:16:16:c4:38:13:7c:c5:6b:80:a4:7b:
         7c:6c:77:2d:74:71:13:71:9c:c0:ab:86:95:5d:20:1c:47:31:
         c8:aa:9a:eb:97:f7:c6:24:08:75:2b:dc:fd:2e:2b:c7:72:2b:
         9a:18:b5:a8:00:69:d1:a0:da:df:06:6e:a2:98:b5:ae:4d:6e:
         fc:40:55:ca:c4:dd:fc:dc:13:ba:4f:9a:49:59:60:a0:56:9c:
         18:63:3e:9e:53:f1:5c:4a:b7:34:77:37:dc:ed:39:6e:f2:42:
         da:75:91:f2:5a:68:7e:37:65:4b:35:ab:0d:68:5a:35:66:09:
         f3:6e:de:d4:45:b4:00:6b:20:95:47:b2:b7:81:bf:18:42:43:
         54:b4:72:09:20:ad:12:84:05:b6:4a:b3:fd:ff:75:be:69:87:
         b0:df:8b:66:c8:60:19:43:ae:6c:b8:35:1a:0e:7a:d3:05:d4:
         24:2b:72:7b:62:a3:ff:41:7b:ea:61:ef:c0:0f:4e:ea:4f:1a:
         1b:7b:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:38 2025 by rpki-client