Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File:                     wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier:          AOdKtepOTIZmyFB4KaJsl/6CbeYrjcif6NEfCDzWv/s=
Subject key identifier:   14:C8:C6:A7:92:52:1C:15:BB:B0:A7:23:79:CE:5B:F7:44:2E:B6:07
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer:       /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial:       01968B4A25E04C31EB01A7F178D023F3C4A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number:          1517
Signing time:             Thu 01 May 2025 10:00:14 +0000
Manifest this update:     Thu 01 May 2025 10:00:14 +0000
Manifest next update:     Fri 02 May 2025 10:00:14 +0000
Files and hashes:         1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: q3dOLtfUCsaaGgNbgzfuel6+ZreHrMlDgGHCz23s58I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:4a:25:e0:4c:31:eb:01:a7:f1:78:d0:23:f3:c4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
        Validity
            Not Before: May  1 10:00:14 2025 GMT
            Not After : May  2 10:00:14 2025 GMT
        Subject: CN=14c8c6a792521c15bbb0a72379ce5bf7442eb607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:b0:19:94:d6:5e:0c:43:bc:e7:c3:25:f0:
                    f6:76:98:99:c3:4d:c3:ba:6a:cf:3d:39:c1:e7:7e:
                    7b:6b:fb:64:4a:f5:bb:56:2f:ec:11:e9:b8:a3:c0:
                    25:ca:ee:6f:7c:f8:1c:c2:98:e5:bc:db:b2:3b:c3:
                    d1:af:8a:b9:d6:3e:c2:ae:9b:89:f8:c4:86:d9:9c:
                    59:39:62:35:a8:f6:a0:d1:bc:6a:77:ce:a4:06:98:
                    1a:bc:fd:cd:89:78:bc:a9:6f:eb:96:cf:92:47:a4:
                    cb:3b:12:69:fc:f9:5d:6b:70:d4:24:e0:f0:b0:51:
                    69:6a:d9:ca:1b:55:6c:82:4b:ac:9f:67:22:f7:d1:
                    1d:71:f5:58:e9:4b:f1:4b:36:dd:c1:ed:fd:bc:90:
                    d2:48:b2:00:65:7e:1e:9b:64:8f:4b:2f:d8:8f:e9:
                    36:f8:9b:92:2b:4f:9f:41:a6:53:21:3b:93:00:c2:
                    68:60:45:ec:8b:97:43:e7:35:8e:b6:1d:9e:38:6a:
                    e8:e5:13:4b:b6:9a:c7:8d:3b:15:43:58:c7:86:51:
                    75:16:c8:ac:ef:e7:e2:92:f7:cf:41:09:66:5c:9e:
                    66:37:eb:2d:a5:2d:28:11:11:8a:73:24:25:b2:34:
                    01:61:ac:7a:36:a3:9c:d1:1a:e2:14:3d:06:eb:0f:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C8:C6:A7:92:52:1C:15:BB:B0:A7:23:79:CE:5B:F7:44:2E:B6:07
            X509v3 Authority Key Identifier:
                keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:ac:1d:07:7e:09:f2:81:40:80:1c:97:dd:f0:0b:d9:c4:
         a7:39:a4:ed:8a:5c:2e:60:91:b2:ca:58:b7:c1:94:6b:74:b3:
         b3:38:d9:ac:7d:4a:2d:12:a3:c9:b9:c9:11:90:d2:00:5f:f9:
         47:ef:af:29:6a:b9:95:5b:19:56:a3:2f:f3:6c:91:10:1b:a7:
         21:fb:e4:3a:69:5a:42:1e:0a:a4:7d:6f:81:c1:54:61:6c:30:
         83:5c:8d:7e:53:95:b2:7d:c2:58:bc:08:f3:98:59:6a:55:12:
         bc:be:e2:29:32:4b:e2:03:d6:ae:2f:aa:ce:ce:c8:72:e4:b1:
         4d:5d:82:93:18:be:7c:c2:7a:5e:52:24:3f:63:4b:03:26:b2:
         70:24:7c:c8:cf:56:54:0f:a4:7c:df:06:8e:6a:de:5a:28:72:
         b9:bf:67:4b:5e:31:a1:ad:6f:f5:11:f5:63:18:ad:37:3f:79:
         81:b1:3c:4c:ef:62:56:34:86:3f:91:a2:7b:42:96:8c:a6:8c:
         49:07:76:bd:56:23:a6:28:b9:e0:04:36:02:a2:5c:04:56:35:
         0b:d2:ab:c9:c8:e2:67:6e:dc:9d:44:29:c5:3a:61:ca:f5:96:
         71:e3:c2:08:22:3c:df:02:02:af:a1:36:4c:68:07:df:44:bb:
         39:dd:24:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSiXgTDHrAafxeNAj88SmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyM2ZmYjdmZGFjMzU3OWNkNzAwMWRjNTA2MzAyMDE1M2Rl
Y2U3YTUwHhcNMjUwNTAxMTAwMDE0WhcNMjUwNTAyMTAwMDE0WjAzMTEwLwYDVQQD
EygxNGM4YzZhNzkyNTIxYzE1YmJiMGE3MjM3OWNlNWJmNzQ0MmViNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk2wGZTWXgxDvOfDJfD2dpiZw03D
umrPPTnB5357a/tkSvW7Vi/sEem4o8Alyu5vfPgcwpjlvNuyO8PRr4q51j7CrpuJ
+MSG2ZxZOWI1qPag0bxqd86kBpgavP3NiXi8qW/rls+SR6TLOxJp/Plda3DUJODw
sFFpatnKG1Vsgkusn2ci99EdcfVY6UvxSzbdwe39vJDSSLIAZX4em2SPSy/Yj+k2
+JuSK0+fQaZTITuTAMJoYEXsi5dD5zWOth2eOGro5RNLtprHjTsVQ1jHhlF1Fsis
7+fikvfPQQlmXJ5mN+stpS0oERGKcyQlsjQBYax6NqOc0RriFD0G6w8QhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTIxqeSUhwVu7CnI3nOW/dELrYHMB8GA1UdIwQY
MBaAFMI/+3/aw1ec1wAdxQYwIBU97OelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83MDA2ZjUtZjJmOC00YjhkLTgwYTct
NDEyYWRjZGJiNzFiLzEvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83MDA2ZjUtZjJmOC00YjhkLTgwYTctNDEyYWRjZGJiNzFi
LzEvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0GsHQd+
CfKBQIAcl93wC9nEpzmk7YpcLmCRsspYt8GUa3SzszjZrH1KLRKjybnJEZDSAF/5
R++vKWq5lVsZVqMv82yREBunIfvkOmlaQh4KpH1vgcFUYWwwg1yNflOVsn3CWLwI
85hZalUSvL7iKTJL4gPWri+qzs7IcuSxTV2Ckxi+fMJ6XlIkP2NLAyaycCR8yM9W
VA+kfN8GjmreWihyub9nS14xoa1v9RH1YxitNz95gbE8TO9iVjSGP5Gie0KWjKaM
SQd2vVYjpii54AQ2AqJcBFY1C9KrycjiZ27cnUQpxTphyvWWcePCCCI83wICr6E2
TGgH30S7Od0kwA==
-----END CERTIFICATE-----
Generated at Thu May 1 18:32:18 2025 by rpki-client