Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File:                     Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier:          WZoqNZbBMPLP6WhgggdSgHAHV9e0ySeu31Qcu+e3M6c=
Subject key identifier:   19:F1:4A:A4:00:D9:EF:4B:23:CB:6C:15:56:6B:D3:87:C1:2A:5A:26
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       019673790AA803D1AB4E0A773D6E6619D446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number:          150B
Signing time:             Sat 26 Apr 2025 19:00:34 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:34 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:34 +0000
Files and hashes:         1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: XSzQ6ZzY+mnHP9ClXiuadljm9WOQDYCKouG9/4jUqGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:0a:a8:03:d1:ab:4e:0a:77:3d:6e:66:19:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: Apr 26 19:00:34 2025 GMT
            Not After : Apr 27 19:00:34 2025 GMT
        Subject: CN=19f14aa400d9ef4b23cb6c15566bd387c12a5a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cd:de:09:fa:71:20:2b:75:5c:9a:17:ff:09:
                    e3:69:5f:3a:8c:19:33:0e:6e:2c:73:23:7c:a2:38:
                    a2:fa:f1:79:29:b2:40:e5:2b:b3:c1:33:41:6a:c0:
                    8a:b0:13:8c:8b:40:c6:24:60:01:c6:2a:c6:34:ad:
                    4f:61:85:66:71:7c:7f:f1:76:12:78:f8:fd:92:d5:
                    08:6e:e7:3d:74:cb:57:90:c2:0f:ed:98:3a:30:6d:
                    2e:ac:02:2e:f3:a6:7c:24:d1:26:11:63:ed:1e:9a:
                    61:97:1d:2b:91:4a:e5:3c:d5:66:ee:01:11:ec:40:
                    dc:e6:72:67:0c:35:66:b0:fd:ef:44:f8:08:f2:07:
                    80:37:da:fe:3c:16:19:18:c5:99:05:5e:ba:a5:79:
                    12:78:1b:99:c4:c1:87:93:0b:95:14:1a:fc:11:0b:
                    6c:01:09:d5:34:52:53:c7:47:72:51:e8:49:ba:b4:
                    ad:ec:48:67:64:dc:4a:c9:6b:9b:24:2d:7d:3d:f2:
                    2c:29:40:e6:92:dd:74:5b:95:bb:54:a2:95:96:0e:
                    4b:16:cc:92:a3:09:b8:ef:db:ce:9c:ab:5e:32:18:
                    d7:0f:ef:a7:2d:60:89:69:b8:e5:2b:7c:37:b0:07:
                    2b:d8:80:b0:40:22:47:25:6f:6a:9d:29:88:95:16:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F1:4A:A4:00:D9:EF:4B:23:CB:6C:15:56:6B:D3:87:C1:2A:5A:26
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ad:3d:fe:e5:99:43:c1:70:ec:07:81:77:8f:fa:9c:91:d1:
         f3:50:d6:c4:15:da:e8:f8:32:4a:46:4d:9d:da:54:05:50:74:
         51:87:8b:b2:0f:4d:3f:9b:2c:36:76:69:57:71:c4:ec:ad:fd:
         15:6e:b4:a5:d8:43:69:3e:a6:c7:0e:cf:b2:07:9b:4f:ff:54:
         9d:07:49:b5:9a:db:ab:67:aa:83:bc:b3:e6:45:b2:76:1f:71:
         41:e8:91:97:fb:80:83:be:15:86:92:6b:66:be:93:51:68:00:
         99:73:3b:04:1a:d2:e0:a5:50:77:c9:50:5f:13:fc:ba:0c:a5:
         cb:66:de:5a:87:a4:30:61:d2:46:e7:97:a1:64:ac:63:d0:8f:
         6f:78:13:9b:0f:cb:07:96:f3:b1:dd:6a:e7:4c:95:ba:d7:42:
         26:e4:24:66:7f:f9:a8:cd:fa:b9:bb:75:65:7f:16:90:c7:23:
         3c:8d:f1:b8:2e:64:39:f8:36:67:58:e4:24:64:d6:b4:20:27:
         6a:35:4a:18:1f:08:65:eb:e2:34:ea:25:f9:4d:0f:f3:4f:12:
         d3:ab:6e:66:70:f1:21:c2:f2:17:20:53:d2:4d:8e:b8:ee:7c:
         bc:84:e9:6b:36:24:d2:c2:7c:43:9b:54:7f:82:f0:72:4b:20:
         69:c3:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:49 2025 by rpki-client