Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
File:                     WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft (raw, json)
Hash identifier:          x4iBaXR29yLoC4zN9dxfwBffF/FApVMLeTnOjPVTd/o=
Subject key identifier:   81:5D:F5:29:EB:36:7F:1F:B9:8E:0F:A6:48:9B:87:82:A5:93:BD:A7
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Certificate issuer:       /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial:       019675D52C08296176BBF1BD51E72E5A8F92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
Manifest number:          12F0
Signing time:             Sun 27 Apr 2025 06:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:26 +0000
Files and hashes:         1: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl (hash: kz9rUWtHT+WsQH4m6s+TYrTNEfI8aCW6Swf7Qyydc4o=)
                          2: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (hash: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:2c:08:29:61:76:bb:f1:bd:51:e7:2e:5a:8f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
        Validity
            Not Before: Apr 27 06:00:26 2025 GMT
            Not After : Apr 28 06:00:26 2025 GMT
        Subject: CN=815df529eb367f1fb98e0fa6489b8782a593bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:92:e5:55:45:98:3b:b2:05:01:4f:62:ea:
                    25:c4:28:93:f5:fb:94:3c:25:a6:78:88:57:e0:e5:
                    36:33:63:2b:a6:cc:bb:6c:c2:2f:b1:3d:41:c6:54:
                    a3:bb:4e:ad:35:69:3c:ac:bb:ea:85:02:c1:45:08:
                    69:83:45:39:3a:96:2e:02:90:0f:04:5b:b9:b9:67:
                    90:1e:88:fe:23:3d:79:92:2d:e5:8a:39:01:c3:25:
                    87:72:9f:0f:90:8f:f8:e2:31:a8:5e:ed:3e:56:5d:
                    e9:64:d4:5c:9a:52:c3:e6:43:8d:51:85:29:f5:38:
                    b5:f1:a9:60:ff:22:27:fe:53:4e:04:47:ef:42:fa:
                    8d:92:d1:c2:12:b9:ac:ad:a8:11:d8:8b:2b:e0:90:
                    61:c7:82:21:db:54:ae:d3:8f:c1:aa:d9:74:0c:66:
                    4f:01:ff:c5:b4:b9:98:0a:4a:2a:34:28:f5:08:f2:
                    f0:7d:14:db:c0:30:26:78:bb:71:67:22:7b:93:5d:
                    24:17:8f:70:8d:9c:ac:a8:a7:87:5f:e6:34:b6:43:
                    58:6b:f0:6b:bd:3e:c4:f2:12:87:d3:32:2b:03:63:
                    55:e5:65:06:ef:b2:b2:a0:bf:e1:bd:7d:ad:0d:fe:
                    11:35:47:63:26:a6:1c:fa:96:fa:02:e5:58:3a:a2:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:F5:29:EB:36:7F:1F:B9:8E:0F:A6:48:9B:87:82:A5:93:BD:A7
            X509v3 Authority Key Identifier:
                keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:18:34:8e:4f:c7:f3:9c:1a:e7:d9:2b:36:b4:2b:b1:3d:
         aa:1a:20:01:07:7f:ce:ab:8a:9c:28:f3:90:78:71:47:24:45:
         b7:74:0e:53:c3:f8:6e:c9:57:30:5a:a6:36:6f:b8:e3:7c:44:
         96:4d:71:5d:66:6e:43:79:c6:2e:e6:3d:9e:d2:d0:a2:17:3e:
         34:3e:72:45:fb:44:8e:a9:e2:a6:ed:5a:34:ba:5c:44:00:eb:
         d9:e4:19:4f:6d:7a:e5:9c:e1:41:fe:da:cd:18:33:48:ac:85:
         8e:93:6a:14:4a:7a:7e:4e:0e:ee:a8:c1:57:54:b0:4f:8d:1a:
         82:bf:52:df:b0:51:21:fd:f9:90:75:56:b8:6d:58:d1:35:94:
         b6:8a:a2:b0:2b:11:7b:eb:89:9a:c6:43:34:0e:96:17:cb:12:
         88:17:94:5b:59:ff:4d:ed:8d:3f:28:b5:95:1e:52:32:0f:92:
         5e:1e:af:a6:43:ea:a1:60:0e:07:b4:3e:28:d5:17:86:fc:46:
         8d:d6:76:49:1f:9c:21:7d:7d:22:0c:b7:6f:90:c6:b0:17:66:
         92:3c:00:ef:4e:18:30:a0:37:ae:21:db:8d:fe:ae:62:9e:13:
         9a:a7:86:10:8e:6d:44:eb:1f:61:40:9e:19:9d:8e:da:1a:66:
         a8:72:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:05 2025 by rpki-client