Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File:                     WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier:          I41rKSwENn23Z0JI7ZzLUascRQhtbwOw1a5TjmYYs2c=
Subject key identifier:   C2:DA:89:EB:10:21:6E:3A:DD:94:A3:53:76:8E:C7:78:E8:4A:0D:D1
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer:       /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial:       01969B2BE0704E3D190CDC48760C87E03029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number:          087E
Signing time:             Sun 04 May 2025 12:01:06 +0000
Manifest this update:     Sun 04 May 2025 12:01:06 +0000
Manifest next update:     Mon 05 May 2025 12:01:06 +0000
Files and hashes:         1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: qi9a2YUwe4d3kmZHPY/pZ1eKstq2Du0JyRN1a/s9V2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9b:2b:e0:70:4e:3d:19:0c:dc:48:76:0c:87:e0:30:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
        Validity
            Not Before: May  4 12:01:06 2025 GMT
            Not After : May  5 12:01:06 2025 GMT
        Subject: CN=c2da89eb10216e3add94a353768ec778e84a0dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:23:dc:29:7b:a5:f8:63:3c:14:09:cf:73:
                    a2:9c:e4:df:02:28:e8:9d:70:fc:e5:42:aa:06:3a:
                    4b:9b:63:9e:67:7c:97:c4:d5:a4:0e:f3:06:6c:32:
                    4c:6f:2e:f6:e2:1a:4a:65:f7:e8:03:2e:80:5b:97:
                    e2:41:8d:33:89:a2:d3:dc:59:0d:38:08:ba:ac:bf:
                    6a:b3:cb:0d:a3:76:4b:68:f4:89:30:c2:3c:ce:e5:
                    48:c7:19:f2:cb:c1:bd:64:2b:21:1f:2d:d3:78:7b:
                    11:ef:38:60:2a:24:af:33:22:ae:0c:7b:ec:01:db:
                    84:6f:75:f0:b3:e8:2d:1d:17:0b:87:02:a3:69:d9:
                    cd:c9:be:18:dd:67:39:6f:cb:a8:76:a1:b1:ad:32:
                    eb:ea:77:99:02:af:68:6b:43:9c:9e:aa:b1:bf:29:
                    c6:cc:c9:d6:08:75:fb:c4:81:12:ad:74:dd:e7:fd:
                    2a:93:a0:01:2d:6c:ff:f3:9b:94:de:3b:ec:e8:79:
                    c2:72:a9:a0:f1:8e:ec:f1:12:14:12:5a:40:f1:96:
                    e6:f6:af:bd:fd:50:d7:e4:99:3b:5d:4f:37:ba:3f:
                    00:6d:df:31:43:a9:08:90:4f:ff:84:74:3b:f9:6e:
                    36:3c:f8:20:86:bd:40:44:f6:cb:75:08:d2:72:4c:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:89:EB:10:21:6E:3A:DD:94:A3:53:76:8E:C7:78:E8:4A:0D:D1
            X509v3 Authority Key Identifier:
                keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:fb:16:1a:fa:5c:e2:b7:4a:df:59:5e:f0:a4:3d:4b:8f:
         9b:b9:07:da:56:d6:e0:7a:b7:89:c2:d5:d3:f0:78:72:f8:56:
         fc:14:ee:a6:08:18:93:ce:2a:9b:4f:a7:34:1c:98:04:16:ee:
         72:f1:32:a8:fd:e2:5d:d8:f1:c0:68:01:1d:b3:fc:55:14:5e:
         83:2f:86:53:0e:a3:74:e5:76:aa:10:36:f0:3a:1f:09:02:41:
         21:1a:a5:ec:ed:b6:c1:9b:44:dd:8a:dc:56:65:35:c0:6c:78:
         ad:18:11:fe:11:3b:c8:ac:c4:83:f1:01:85:22:64:b6:ed:e3:
         01:65:08:99:fc:55:6d:8f:87:6d:5d:9b:4f:e8:1f:23:a9:e4:
         9d:b0:b7:78:15:c6:f9:d2:3a:b0:e3:3e:d9:ab:e7:59:c0:44:
         97:f3:92:05:e9:a6:b5:99:8a:35:80:01:c2:51:01:4a:51:cc:
         d9:70:f7:f6:1e:87:b2:3a:06:2a:7f:43:18:c2:42:05:f6:5b:
         7a:ff:40:0e:5b:31:f0:16:23:3a:29:db:2b:72:c3:02:3e:e2:
         6f:74:93:63:49:1c:a9:d0:fc:c4:4f:59:4c:c2:32:b5:b5:28:
         77:54:98:c3:20:d3:8a:30:53:c3:f2:8f:18:10:a9:9c:56:55:
         30:e3:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:18:47 2025 by rpki-client