Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          weREGi5U5B600jB5mZ30xqV0ZyOn7E2BEANw+EHQsfc=
Subject key identifier:   C6:73:C5:25:2D:27:41:08:30:88:84:FB:08:77:4E:44:59:1E:97:F1
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       01967EA207D78FA4D24A496645F53008B418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          1512
Signing time:             Mon 28 Apr 2025 23:01:10 +0000
Manifest this update:     Mon 28 Apr 2025 23:01:10 +0000
Manifest next update:     Tue 29 Apr 2025 23:01:10 +0000
Files and hashes:         1: A2lRtYsynJJAILeNP4ol_NB53as.roa (hash: zgRdZJry0e4HRbPx+TfhqLtDE1uOOj3QlmHxDJhN/Mg=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: 8dGjCJ+inoTgOZV8uL0sTYK7PPJRjqRoEj2Uo1Wm1Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a2:07:d7:8f:a4:d2:4a:49:66:45:f5:30:08:b4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Apr 28 23:01:10 2025 GMT
            Not After : Apr 29 23:01:10 2025 GMT
        Subject: CN=c673c5252d274108308884fb08774e44591e97f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:c0:ff:11:cb:b9:ee:96:1a:00:20:a5:52:
                    28:46:4b:37:d1:2b:7a:ce:33:95:f9:5d:ba:20:b2:
                    4f:1a:36:79:4a:91:a9:66:78:64:81:d5:e9:ae:a8:
                    e7:1e:d1:5a:b7:ea:91:8b:87:56:ae:e8:29:da:9e:
                    47:29:89:ec:23:d8:ef:10:35:0c:4b:e3:f2:a3:c9:
                    9f:6a:5a:51:09:71:18:2d:23:4c:61:18:9b:ab:aa:
                    f2:1e:d5:35:c6:cb:f2:d5:c1:12:7c:dc:aa:3f:77:
                    65:9f:4e:26:85:d0:82:cc:a6:44:08:cb:b3:04:a6:
                    5f:f4:8b:d5:4e:80:3f:0f:25:68:07:13:e8:c1:80:
                    a4:86:74:8d:1a:e4:28:08:f8:ea:2c:f4:90:31:20:
                    e0:06:ec:fa:0d:cd:74:d1:14:e6:9b:b9:65:90:ae:
                    ce:3e:b1:08:e1:0a:f0:e4:cd:e9:14:06:4d:ce:44:
                    86:f2:06:4e:0d:7a:22:6a:b0:f8:af:25:32:8f:cc:
                    1d:41:bb:97:0f:da:a9:ce:6f:50:9b:24:ad:f8:8b:
                    b2:20:d1:3d:94:59:44:6b:3a:25:29:dc:a0:66:59:
                    31:f4:00:0f:f1:3f:82:bd:da:51:f1:0b:5c:30:35:
                    2a:5a:e0:26:4f:38:0c:62:0f:f5:9e:5d:43:62:d3:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:C5:25:2D:27:41:08:30:88:84:FB:08:77:4E:44:59:1E:97:F1
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:38:dc:91:3d:d0:a7:3d:c5:be:1b:91:2c:8a:ba:15:06:
         0f:bf:0e:47:19:f5:34:0d:73:dd:61:65:78:b6:f8:fb:ea:6c:
         a8:cd:f6:cd:70:6a:ff:2a:05:63:af:64:31:2c:76:43:4a:bb:
         f1:30:9b:8e:54:6e:f9:d5:62:d5:4b:92:ca:3a:bf:eb:e0:93:
         5c:26:33:97:6e:7b:cc:e8:d6:3d:cc:f0:7d:0d:0b:e2:1f:e8:
         13:16:28:bf:ca:2b:40:b0:91:b2:b1:b0:08:9a:e2:b4:50:7b:
         3c:43:64:a1:09:9a:1d:d1:1f:25:e5:b9:29:b7:1c:a0:77:63:
         5e:4f:a4:00:27:09:34:be:68:df:5a:de:fa:a6:4e:79:05:32:
         d6:0a:2c:7d:c4:aa:42:4e:fd:d9:57:4e:58:a1:85:48:aa:24:
         31:7e:68:6d:3e:7f:d9:57:1f:84:60:d7:48:29:e0:f4:20:f1:
         a6:45:5c:2a:ce:4f:f3:4e:bb:a6:92:74:ce:4a:20:9a:b8:84:
         68:9b:57:df:88:a3:24:07:ab:e7:d5:45:7f:5d:b6:72:13:90:
         ae:0d:22:f9:5f:c9:b7:dc:0e:13:73:df:67:b7:04:75:96:9c:
         35:74:b2:65:ec:bc:f8:ee:92:67:0a:1f:20:22:07:cd:f6:ef:
         6d:16:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:57 2025 by rpki-client