Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          rv3BClBM9nz6kasMYdpQIfziSU/apV/B3VHLu5rEmRI=
Subject key identifier:   95:CC:CC:81:AA:19:31:F9:B8:56:92:E1:43:64:41:1C:B8:DA:CC:B1
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       0195127E62045365B32FBBE52FF360832265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          0C9D
Signing time:             Mon 17 Feb 2025 06:00:27 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:27 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:27 +0000
Files and hashes:         1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: aO8Vd6it0D7eTXMjeJsFgBh+VPtBAmrurJhajxXVdY4=)
                          2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:62:04:53:65:b3:2f:bb:e5:2f:f3:60:83:22:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Feb 17 06:00:27 2025 GMT
            Not After : Feb 18 06:00:27 2025 GMT
        Subject: CN=95cccc81aa1931f9b85692e14364411cb8daccb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:71:47:6d:64:68:c0:51:45:c7:53:db:1a:
                    83:44:03:4a:3e:01:18:8a:88:b0:b2:20:ff:b4:3d:
                    61:12:da:c3:9f:d2:56:f8:99:60:55:89:69:7f:2c:
                    60:74:3d:40:4f:13:80:31:1d:19:77:23:d4:b0:dc:
                    b8:d1:ad:24:10:45:c1:b2:81:00:fd:54:a6:67:a8:
                    45:d6:16:d7:4d:33:98:fa:78:ba:25:54:88:53:ee:
                    f3:d9:7b:0c:8d:37:23:d4:30:2a:c5:9b:48:f9:19:
                    ce:31:07:73:d5:a0:d6:7c:a0:c6:da:2e:a1:1c:fb:
                    14:26:f3:c1:db:76:3d:5a:f7:34:40:06:56:a8:11:
                    93:7c:3a:6c:4c:13:a9:08:6b:6a:a2:04:1e:40:40:
                    71:c5:2c:85:46:80:50:d7:3c:91:51:ef:69:f2:41:
                    c7:19:29:36:65:a0:b6:40:03:ae:8f:bc:32:67:2a:
                    5e:bb:45:f8:5d:b5:75:00:22:94:b6:f2:ae:82:0a:
                    b3:61:2b:69:9f:30:f7:c7:d4:64:47:b4:8c:32:cd:
                    84:fe:20:01:7d:5e:c7:84:b1:13:e7:a3:78:54:e2:
                    33:c3:ea:61:a0:3e:7c:f1:42:90:05:be:35:c8:63:
                    85:32:41:fd:b8:71:f1:b6:58:70:c6:ae:8d:5a:d3:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:CC:81:AA:19:31:F9:B8:56:92:E1:43:64:41:1C:B8:DA:CC:B1
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:39:cd:f1:bd:ac:00:6f:1a:29:92:bf:59:e0:c1:26:4a:
         5b:5d:1b:c2:48:dd:a8:ed:f0:50:b2:06:75:56:28:f6:ee:28:
         93:f9:85:d0:c5:2f:5c:e1:dc:2b:3d:d9:85:8d:51:f2:48:f8:
         0e:9a:bd:df:c0:80:e8:59:b2:35:39:d2:67:48:d4:c2:83:59:
         7e:c3:61:8b:fb:93:29:36:b4:57:da:88:57:e0:34:a3:35:fa:
         bb:92:b6:b8:37:a4:ed:98:03:09:67:c8:99:7c:03:1a:fa:b5:
         ce:8d:e2:85:0b:bb:08:c3:b5:7e:8e:3c:94:1f:0a:68:85:23:
         dd:6c:f2:cd:2c:c4:50:04:64:23:e3:94:a8:fa:54:34:15:65:
         5f:63:d4:6c:53:c8:6d:15:00:2b:25:3b:06:5c:57:6d:ba:07:
         23:82:43:dc:87:cc:3c:0e:8d:bd:d7:29:2f:f7:53:e8:2f:bc:
         39:b0:56:df:6b:d9:5d:c5:83:ad:5c:99:84:93:b6:4f:d0:b9:
         82:b4:91:f1:a2:c6:e7:a8:ca:21:06:68:f8:84:99:19:9f:ab:
         0d:7f:93:65:90:95:70:43:ec:af:3b:63:f4:5b:7e:a3:21:14:
         f2:d0:72:b0:9f:ad:0c:82:96:1c:85:f0:cb:e1:e5:d1:37:5b:
         0b:76:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:33 2025 by rpki-client