Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File:                     wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier:          3qSgeZnmzV65DZ4vAer1C38FfRBrvmt6pJ5trMnivbc=
Subject key identifier:   3D:E4:8F:67:54:86:73:A8:12:2A:6F:C7:38:31:D3:AE:82:C0:B9:9B
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer:       /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial:       01968C93E6FDD763747F177210A2ABFD4519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number:          0273
Signing time:             Thu 01 May 2025 16:00:25 +0000
Manifest this update:     Thu 01 May 2025 16:00:25 +0000
Manifest next update:     Fri 02 May 2025 16:00:25 +0000
Files and hashes:         1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: E+Q3zjaWSfqQaGntLbdvRRTFPf3dU5eNUxbOt/uaKbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:93:e6:fd:d7:63:74:7f:17:72:10:a2:ab:fd:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
        Validity
            Not Before: May  1 16:00:25 2025 GMT
            Not After : May  2 16:00:25 2025 GMT
        Subject: CN=3de48f67548673a8122a6fc73831d3ae82c0b99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:4e:de:80:3b:89:89:d8:20:c8:d7:ad:e5:
                    bc:ba:b3:4c:88:62:d9:bd:9b:5a:63:77:66:33:37:
                    d5:85:cb:77:97:79:d3:7f:38:24:2e:6a:7f:82:3d:
                    9e:db:af:79:9d:f2:ab:e8:c7:3c:14:ee:54:cd:04:
                    ea:00:5f:41:80:b3:fb:97:27:27:20:7f:e9:c9:47:
                    24:4f:38:c7:ca:9d:5b:57:a5:60:ce:ce:ff:99:3e:
                    04:d8:07:83:ab:15:27:fd:5c:04:41:5c:f3:ab:86:
                    98:3b:e2:72:24:7e:cf:60:e3:88:90:10:8a:8f:c5:
                    bb:eb:da:f8:35:ad:01:3e:69:e8:a5:08:4b:35:cc:
                    ed:2c:7e:c2:1f:62:b7:46:67:48:f2:d6:f5:c3:a1:
                    3c:77:c1:c9:c8:c6:48:a2:99:a7:bd:9f:f4:b1:bc:
                    59:11:e0:7e:0a:ad:7e:86:d8:d5:24:63:c0:de:c6:
                    77:3f:bc:c6:c1:f2:d3:08:c4:51:d1:d6:7b:3f:22:
                    8c:26:c7:74:39:76:fb:51:2d:cf:4d:65:b9:49:d9:
                    8a:61:0a:11:d9:d8:47:88:25:5c:cd:0b:77:00:36:
                    cc:26:00:16:92:e2:fc:c3:f4:58:ab:2f:9a:06:63:
                    13:56:7f:a2:82:5b:6b:29:06:46:71:46:ad:ed:36:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:8F:67:54:86:73:A8:12:2A:6F:C7:38:31:D3:AE:82:C0:B9:9B
            X509v3 Authority Key Identifier:
                keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:59:ae:18:4e:6a:8d:cc:00:54:18:de:94:44:01:f7:27:
         05:9a:5e:4a:b7:cf:00:1d:2b:6e:fa:3b:e6:c7:c8:a8:e8:31:
         3d:be:6c:9d:86:06:e1:5b:6c:f2:a6:2d:fc:fe:87:17:38:69:
         7e:9a:ea:19:bc:5a:79:71:32:a2:38:d5:f0:95:6a:77:3a:d1:
         ab:55:2d:c0:42:72:5f:54:24:28:98:d7:d7:27:2c:5f:ff:98:
         f0:90:6d:77:fc:ac:c6:9b:0d:0f:97:e8:1e:15:80:a0:39:b3:
         fc:23:22:57:b1:ff:cb:65:15:f4:39:1b:a4:62:a1:31:e4:43:
         d4:c1:17:ec:ae:18:c8:0e:3d:1b:0b:d6:40:1d:94:96:f7:a1:
         07:e2:a8:81:ac:42:b1:30:4a:6d:b2:1f:b2:30:e5:fc:28:01:
         6e:b0:3f:5c:fa:67:c8:e9:15:6c:64:1f:10:59:1b:48:3d:f2:
         48:df:8d:a9:38:f3:d7:0a:41:a3:a9:b8:25:30:53:7a:dc:5c:
         6a:c7:34:ca:8c:61:a0:06:45:21:9f:1a:f8:f7:c1:3e:7b:f3:
         df:b4:0a:5e:8c:e4:a5:ef:12:66:ea:6d:1c:26:16:b0:77:dc:
         0b:cc:ac:1b:ab:1b:e9:c9:06:fd:eb:b6:0c:a1:21:f9:e7:13:
         66:0c:1a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMk+b912N0fxdyEKKr/UUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDRlZDllYjU5NWM4OWJiOWVjN2UyMGY5ODUyOWU5NTE3
MzlkODQwHhcNMjUwNTAxMTYwMDI1WhcNMjUwNTAyMTYwMDI1WjAzMTEwLwYDVQQD
EygzZGU0OGY2NzU0ODY3M2E4MTIyYTZmYzczODMxZDNhZTgyYzBiOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6VO3oA7iYnYIMjXreW8urNMiGLZ
vZtaY3dmMzfVhct3l3nTfzgkLmp/gj2e2695nfKr6Mc8FO5UzQTqAF9BgLP7lycn
IH/pyUckTzjHyp1bV6Vgzs7/mT4E2AeDqxUn/VwEQVzzq4aYO+JyJH7PYOOIkBCK
j8W769r4Na0BPmnopQhLNcztLH7CH2K3RmdI8tb1w6E8d8HJyMZIopmnvZ/0sbxZ
EeB+Cq1+htjVJGPA3sZ3P7zGwfLTCMRR0dZ7PyKMJsd0OXb7US3PTWW5SdmKYQoR
2dhHiCVczQt3ADbMJgAWkuL8w/RYqy+aBmMTVn+igltrKQZGcUat7TbR2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3kj2dUhnOoEipvxzgx066CwLmbMB8GA1UdIwQY
MBaAFMAE7Z61lcibuex+IPmFKelRc52EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2Ut
MWVhNWQyZTk1NDFhLzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2UtMWVhNWQyZTk1NDFh
LzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU29ZrhhO
ao3MAFQY3pREAfcnBZpeSrfPAB0rbvo75sfIqOgxPb5snYYG4Vts8qYt/P6HFzhp
fprqGbxaeXEyojjV8JVqdzrRq1UtwEJyX1QkKJjX1ycsX/+Y8JBtd/ysxpsND5fo
HhWAoDmz/CMiV7H/y2UV9DkbpGKhMeRD1MEX7K4YyA49GwvWQB2UlvehB+KogaxC
sTBKbbIfsjDl/CgBbrA/XPpnyOkVbGQfEFkbSD3ySN+NqTjz1wpBo6m4JTBTetxc
asc0yoxhoAZFIZ8a+PfBPnvz37QKXozkpe8SZuptHCYWsHfcC8ysG6sb6ckG/eu2
DKEh+ecTZgwauw==
-----END CERTIFICATE-----
Generated at Thu May 1 20:16:36 2025 by rpki-client