Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          32lb+KE0wdZk9hEi+sA24p3mvjl0tsQvPkfEGyfot/Y=
Subject key identifier:   67:95:EC:4C:17:09:E4:69:EC:CD:1B:47:75:DE:0F:EC:DC:9D:5E:AB
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       01951134DAE78EA7DAA9C70E930B747A3070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0A30
Signing time:             Mon 17 Feb 2025 00:00:31 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:31 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:31 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: hB8JatB9NtBMQ/JT/PAMyrvaTGtRccPS9NIJvJttuSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:da:e7:8e:a7:da:a9:c7:0e:93:0b:74:7a:30:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: Feb 17 00:00:31 2025 GMT
            Not After : Feb 18 00:00:31 2025 GMT
        Subject: CN=6795ec4c1709e469eccd1b4775de0fecdc9d5eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1a:f1:e8:d9:de:e9:dd:d7:ab:ef:b8:f3:52:
                    27:dd:f1:52:7b:85:d1:4b:09:ba:b5:5a:77:73:9a:
                    cc:3c:f1:2e:29:6f:a0:ba:da:03:ce:1c:33:52:86:
                    f4:09:44:26:f8:8d:bf:8e:ff:1a:69:13:16:53:97:
                    b9:ee:d1:0f:9f:e9:1e:31:c4:bd:ed:11:c2:f8:33:
                    da:eb:85:ab:ae:2c:c9:30:ef:ab:cc:c0:f3:a0:ab:
                    27:f2:00:ae:b5:ff:69:8c:d4:98:9b:52:30:91:e4:
                    87:a2:57:3b:09:e7:5f:01:39:4d:c9:aa:b9:14:2c:
                    0d:88:ca:3b:42:ba:72:9e:47:30:55:c0:1e:93:69:
                    ec:15:ab:34:19:e0:9b:79:24:28:a7:f2:30:87:f8:
                    7c:a4:95:52:be:7f:19:f8:11:69:73:96:a3:b6:3c:
                    64:b0:ec:38:ea:e5:54:10:a2:05:1a:1a:e2:8c:88:
                    37:2d:62:7e:a9:a8:ba:8e:11:78:82:84:db:d2:89:
                    82:87:3a:33:5a:3e:81:9c:27:d3:10:d7:a4:f5:3a:
                    be:a8:47:c4:62:7b:1c:57:36:cc:4f:a0:54:d8:f8:
                    dc:54:50:0f:3f:a4:cf:77:3c:12:8c:a3:38:83:fd:
                    d2:32:43:4b:3c:a4:b4:9e:be:b1:21:5b:73:a8:67:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:95:EC:4C:17:09:E4:69:EC:CD:1B:47:75:DE:0F:EC:DC:9D:5E:AB
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:b9:32:80:e2:51:f3:d5:35:38:f4:b3:a9:18:76:cd:e6:
         26:aa:d2:47:42:13:7a:52:1e:41:8b:9b:cf:c2:e9:c6:81:86:
         95:13:01:88:25:19:b8:e5:dd:32:f3:77:c6:05:5e:43:01:f8:
         8b:d6:44:81:83:06:22:61:ce:d0:e7:b1:09:9c:6f:3c:c7:da:
         02:27:c0:57:62:42:e1:ae:77:c1:e1:f0:e2:f6:63:38:51:8f:
         5b:67:e0:76:8b:50:43:70:4d:ca:46:09:a8:f3:43:bb:33:6d:
         4b:99:36:c8:85:80:4e:59:17:83:7b:cd:54:d9:76:a6:d9:6e:
         d6:96:f3:74:44:b3:53:88:0b:34:9d:04:b2:e2:fe:5f:e1:a4:
         e2:b7:3b:51:6f:8c:5a:c4:05:e9:08:6d:0a:ae:9c:b3:f4:32:
         d1:b4:20:57:dd:34:07:1c:9a:c7:cb:ee:05:6b:73:e7:32:a8:
         39:72:9a:eb:d0:5b:9c:32:35:71:91:7e:6b:67:62:60:30:47:
         fe:c2:7d:df:91:d9:e2:c0:2b:01:e8:f6:6b:6c:93:8b:42:94:
         f5:dc:d9:bd:51:0e:a6:d7:81:1d:20:ec:a3:a1:01:c0:23:e1:
         54:8a:ba:83:d6:01:fd:af:72:59:ff:de:2a:59:6a:62:c5:8b:
         de:e8:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:14 2025 by rpki-client