Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
File:                     wuLumMR1LMeKgj6b-aTsmt8cO80.mft (raw, json)
Hash identifier:          u6yGxqzrInrLpmy8XlXJ2bNtyH3KQE7wWPgMnMJtGfc=
Subject key identifier:   11:72:6D:20:AA:41:52:9D:5C:FF:03:7E:61:29:9E:F4:86:F9:09:5E
Authority key identifier: C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD
Certificate issuer:       /CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd
Certificate serial:       0196839158C8A17422EC36A1B8C660993234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
Manifest number:          11C0
Signing time:             Tue 29 Apr 2025 22:01:02 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:02 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:02 +0000
Files and hashes:         1: wuLumMR1LMeKgj6b-aTsmt8cO80.crl (hash: 4rhfQTvu63fhwcqj3VrmVFOmEgx2CWaQKihcoqC3xdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:58:c8:a1:74:22:ec:36:a1:b8:c6:60:99:32:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd
        Validity
            Not Before: Apr 29 22:01:02 2025 GMT
            Not After : Apr 30 22:01:02 2025 GMT
        Subject: CN=11726d20aa41529d5cff037e61299ef486f9095e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:2f:95:49:74:6e:66:2d:0a:b8:0f:83:a5:
                    8f:bf:92:32:ff:2a:10:51:34:c2:b5:ed:67:91:ba:
                    90:d6:e4:8c:cc:fe:1d:9b:be:17:27:10:0f:53:83:
                    2d:5a:21:25:2f:71:1f:b0:74:46:21:5a:51:6d:43:
                    5a:b7:1d:27:8b:ee:a4:ee:b4:a6:e8:5c:c3:29:30:
                    26:93:2a:24:6b:3d:14:44:ba:2a:a0:13:3c:f9:0c:
                    fa:5f:d5:31:68:8c:35:73:d1:a9:4b:7c:1d:81:84:
                    66:16:ba:6f:fb:a3:61:55:e6:2a:a9:74:51:55:df:
                    07:18:92:4f:78:66:9b:b8:f2:30:69:8a:3d:ee:e9:
                    15:73:eb:08:3a:77:5e:2b:9b:03:ca:94:e2:4a:9c:
                    d7:ad:6c:80:28:c0:1a:ad:29:70:bc:35:35:a7:52:
                    d0:80:c6:14:da:7b:79:00:a0:49:c8:91:bc:c2:bc:
                    e4:f4:48:78:03:c1:11:cc:09:d9:41:2d:78:ec:b4:
                    85:8f:b4:35:97:e4:0b:86:d0:d0:f1:97:2b:63:56:
                    a7:2f:a1:f3:f4:24:7d:c8:5b:53:e9:03:a1:b1:5c:
                    f0:0d:01:b6:26:52:5b:75:03:37:a7:c0:8f:04:04:
                    c0:27:d2:16:b8:ce:f5:7a:d5:06:8e:d2:55:0c:db:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:72:6D:20:AA:41:52:9D:5C:FF:03:7E:61:29:9E:F4:86:F9:09:5E
            X509v3 Authority Key Identifier:
                keyid:C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:d9:f5:a3:ba:71:f1:93:b0:5a:df:31:ba:5f:0e:ec:42:
         c7:45:61:e8:3f:0e:29:80:8a:aa:34:a6:8a:cd:bc:32:ae:2e:
         06:1a:46:35:c5:ed:ab:ce:43:66:24:65:37:a0:67:69:3c:57:
         89:bc:b7:8a:2a:32:6a:23:f2:45:c3:68:ca:15:a3:e7:6e:a4:
         f7:2f:48:ed:17:fb:88:ab:a9:43:c9:4a:00:1c:03:b9:73:d3:
         4e:5b:03:0f:7e:2f:49:c2:4d:f6:b3:f1:bb:f0:da:a8:d9:29:
         f6:da:6e:14:27:2b:92:00:34:01:a4:b4:cf:de:d1:bb:0f:6f:
         b0:a4:d9:4b:94:97:6f:b1:b0:d5:ae:af:18:58:6a:b6:7b:d8:
         ce:e5:65:a3:79:0b:e2:7d:81:7a:4a:6a:c7:20:82:e1:44:49:
         8c:82:27:5a:4a:a9:32:19:a2:f9:1f:23:0d:17:01:83:8f:69:
         aa:ff:e6:99:d9:32:f5:9b:d6:61:50:b7:ed:49:0e:7c:78:23:
         59:69:94:2e:35:2f:02:64:48:c5:58:0f:4f:9d:c7:b1:ed:65:
         75:a5:f0:42:ce:bf:be:19:d5:16:5a:74:26:69:e2:01:7e:b3:
         5c:62:9c:7d:b1:5e:b3:28:f3:21:21:5c:3e:68:ba:b6:74:3b:
         4d:cf:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:11 2025 by rpki-client