Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File:                     wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier:          XuKqN2W61nmL/aORiKRyWgbkqYB6i9d8zO+K07kByrU=
Subject key identifier:   AC:22:C2:72:AA:CC:DD:45:7F:1A:B7:66:1C:59:35:1D:60:05:76:97
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer:       /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial:       019650113AC8985CDBD5280605B4777481FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number:          C2
Signing time:             Sat 19 Apr 2025 22:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:28 +0000
Files and hashes:         1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
                          2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: 1tGaaN1h5LB6RnsayRf+bmF42Ca2N7DhkE7R2UGyVYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:3a:c8:98:5c:db:d5:28:06:05:b4:77:74:81:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
        Validity
            Not Before: Apr 19 22:00:28 2025 GMT
            Not After : Apr 20 22:00:28 2025 GMT
        Subject: CN=ac22c272aaccdd457f1ab7661c59351d60057697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:7b:4e:54:0f:5c:cb:55:62:60:5d:e7:1d:
                    3c:48:38:21:6d:6a:b6:68:1b:b1:36:91:9e:f7:e2:
                    4a:19:d1:15:89:1b:eb:bc:f3:f4:10:7e:91:a8:98:
                    c7:d9:4b:94:ac:03:59:9c:69:0f:07:d4:1f:d3:23:
                    08:20:7d:65:d8:af:f0:e4:b6:90:2e:6e:73:a8:63:
                    ef:79:1d:0c:b8:07:91:81:da:90:09:dd:05:ba:17:
                    7f:64:43:48:ad:47:4b:b0:d8:f6:c4:ab:c2:ac:af:
                    70:c6:19:ef:ad:fa:62:a1:91:2c:d0:94:85:35:1b:
                    33:53:bb:77:28:b1:c2:26:da:c3:4c:cc:17:ba:14:
                    8c:c1:84:53:08:7a:fd:35:de:a4:8f:18:5e:c3:85:
                    1b:a4:57:0b:5f:68:29:dc:48:61:8a:84:ce:46:19:
                    9c:66:7f:f8:0c:af:3b:3e:e9:48:c1:09:10:ba:e1:
                    9c:1f:94:1f:b0:2e:da:70:8e:51:13:ab:f2:67:d1:
                    1c:61:44:3c:20:41:30:d7:d9:e2:df:8b:32:b0:b4:
                    32:fb:a0:00:cf:7d:0c:88:3e:c9:1a:94:e8:3a:f0:
                    08:da:0c:03:eb:47:b3:9a:41:10:ac:f5:8f:e8:33:
                    c2:0d:1a:bc:37:69:9d:24:59:81:17:c8:d0:1d:a0:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:22:C2:72:AA:CC:DD:45:7F:1A:B7:66:1C:59:35:1D:60:05:76:97
            X509v3 Authority Key Identifier:
                keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:61:05:97:93:8b:85:62:d3:ad:27:81:f5:81:a1:c8:a7:0c:
         5d:ff:ca:b0:72:2d:78:cf:ff:9c:4e:93:8d:d0:62:4c:5c:75:
         13:39:77:ec:27:e2:46:11:bf:5a:af:31:67:2d:33:86:8e:40:
         97:b4:a3:d0:a9:67:18:b0:a2:e5:94:44:94:e5:61:d3:b1:77:
         00:6d:6d:f5:c6:e1:3a:80:ef:46:f0:d0:0e:c8:79:c3:d7:2c:
         e3:a3:09:8f:73:be:de:34:97:72:0f:28:b8:8a:89:86:45:ec:
         cf:0d:82:a0:0c:be:47:78:64:1b:16:ee:b2:2a:09:c9:8b:38:
         ea:09:3d:f9:56:95:59:4b:01:99:ac:c1:eb:55:4c:8f:ec:40:
         0b:13:88:d3:55:95:8b:75:07:1f:14:e7:3b:d1:df:c8:37:2e:
         19:d5:44:be:20:f5:a1:db:95:50:e1:f4:21:c0:0a:1e:08:47:
         79:9c:6e:28:86:f3:1c:d6:97:9d:73:3c:d2:78:37:34:66:cf:
         d5:e5:e6:1e:cc:d6:98:09:b3:91:d5:0b:9e:d3:18:2d:ae:c8:
         17:2d:6b:51:4e:c5:69:93:87:d3:2a:f0:c0:1a:89:2e:83:32:
         1c:9c:18:1e:93:7f:91:6c:6a:8b:d7:fd:88:63:4f:f3:c0:82:
         6f:89:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:24 2025 by rpki-client