Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File:                     wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier:          J5Urf4duWXfNZ45FD36O+JRqEAaYd8yrG3fJwTJO06M=
Subject key identifier:   B7:7B:85:54:36:38:B6:94:BD:38:7E:08:51:E7:26:2F:29:5F:02:09
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer:       /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial:       01968E82718C9E05DAF14E94458B7770DA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number:          1517
Signing time:             Fri 02 May 2025 01:00:35 +0000
Manifest this update:     Fri 02 May 2025 01:00:35 +0000
Manifest next update:     Sat 03 May 2025 01:00:35 +0000
Files and hashes:         1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 5rRStZSkN749mtTCkffXkTS9MIpIPTqDpKSyIRnbf7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:82:71:8c:9e:05:da:f1:4e:94:45:8b:77:70:da:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
        Validity
            Not Before: May  2 01:00:35 2025 GMT
            Not After : May  3 01:00:35 2025 GMT
        Subject: CN=b77b85543638b694bd387e0851e7262f295f0209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:54:eb:8c:44:e1:90:66:fe:78:21:cd:bd:55:
                    80:c2:bb:8c:22:b4:40:62:de:75:75:d8:4b:5c:9a:
                    44:3b:95:01:8e:e5:a5:c1:22:16:44:81:3c:3a:29:
                    d2:ba:f3:0a:75:b8:bf:11:b8:17:63:5f:b4:28:85:
                    42:56:f4:41:1d:9b:6b:00:5f:3a:0a:6a:43:6f:35:
                    53:1c:4b:7b:a1:f0:79:31:5a:23:91:55:78:7e:56:
                    26:e9:b4:4e:97:74:05:7a:d2:66:58:2c:56:b4:d3:
                    89:bf:8b:a5:93:12:46:10:f6:75:20:e3:fa:35:f4:
                    8b:28:ca:c4:78:01:c5:e4:a3:7c:5f:b1:e7:5c:13:
                    0a:e6:84:e0:97:94:42:17:43:f9:55:a3:1d:61:ca:
                    95:f2:3d:97:60:7c:4a:81:3c:83:00:93:2d:74:92:
                    99:d9:96:33:36:1d:0e:03:9f:a9:54:12:5b:7a:77:
                    40:96:30:4c:7d:34:e3:20:06:1e:0d:73:e0:4b:35:
                    27:90:09:ee:f4:7b:19:a0:35:99:6c:53:e4:59:2a:
                    f9:6a:d7:51:9e:40:5f:e1:f3:cd:0d:3c:cc:be:3a:
                    79:8e:2e:f1:dd:cc:79:b8:4f:e4:f3:c4:d5:8a:22:
                    88:bb:7d:33:e9:42:54:08:e2:80:ad:11:20:f5:b5:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7B:85:54:36:38:B6:94:BD:38:7E:08:51:E7:26:2F:29:5F:02:09
            X509v3 Authority Key Identifier:
                keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:f8:38:ea:14:28:b1:0f:18:e8:f6:67:88:fc:df:22:27:
         60:48:6f:6c:62:bc:bb:0d:02:8a:6c:fe:fa:b7:ba:4c:7b:a6:
         08:e4:5c:c5:8a:19:23:e8:c2:22:ff:59:8b:de:a0:cc:e9:51:
         e0:c5:d7:90:fb:dc:b7:1c:04:c8:07:9c:1e:1b:65:f7:cd:e9:
         0a:2a:cd:17:62:bd:1b:05:c4:42:05:c3:da:84:5a:f9:7b:d8:
         7c:60:bb:c7:61:2d:03:a1:c4:a8:6f:16:ff:65:01:53:ed:df:
         b1:66:0d:5b:27:16:87:45:dc:08:d3:1d:b9:4b:49:b4:d8:d2:
         37:d5:0f:2e:d5:bd:a3:e5:65:4f:d1:be:53:3c:af:67:fe:17:
         48:af:78:2c:a1:59:d0:8f:90:24:19:a9:cd:69:40:85:8f:35:
         3d:78:68:0e:56:fd:8d:f5:72:61:4f:87:82:e1:a2:cb:fd:e5:
         29:22:67:20:6d:d0:ba:8c:df:da:57:a2:38:40:7a:c8:26:52:
         6e:01:4e:d1:6b:75:6f:de:65:43:28:f0:02:79:b8:1d:30:66:
         ce:59:9d:ad:33:29:6e:42:a3:b3:a0:2b:0f:26:d0:4f:b7:cb:
         01:d1:07:1b:5d:29:f4:53:65:8e:f3:1a:5e:26:85:0a:69:c0:
         c7:bf:a9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOgnGMngXa8U6URYt3cNonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl
ZjhiNDAwHhcNMjUwNTAyMDEwMDM1WhcNMjUwNTAzMDEwMDM1WjAzMTEwLwYDVQQD
EyhiNzdiODU1NDM2MzhiNjk0YmQzODdlMDg1MWU3MjYyZjI5NWYwMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91TrjEThkGb+eCHNvVWAwruMIrRA
Yt51ddhLXJpEO5UBjuWlwSIWRIE8OinSuvMKdbi/EbgXY1+0KIVCVvRBHZtrAF86
CmpDbzVTHEt7ofB5MVojkVV4flYm6bROl3QFetJmWCxWtNOJv4ulkxJGEPZ1IOP6
NfSLKMrEeAHF5KN8X7HnXBMK5oTgl5RCF0P5VaMdYcqV8j2XYHxKgTyDAJMtdJKZ
2ZYzNh0OA5+pVBJbendAljBMfTTjIAYeDXPgSzUnkAnu9HsZoDWZbFPkWSr5atdR
nkBf4fPNDTzMvjp5ji7x3cx5uE/k88TViiKIu30z6UJUCOKArREg9bWcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd7hVQ2OLaUvTh+CFHnJi8pXwIJMB8GA1UdIwQY
MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt
YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy
LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACh34OOoU
KLEPGOj2Z4j83yInYEhvbGK8uw0Cimz++re6THumCORcxYoZI+jCIv9Zi96gzOlR
4MXXkPvctxwEyAecHhtl983pCirNF2K9GwXEQgXD2oRa+XvYfGC7x2EtA6HEqG8W
/2UBU+3fsWYNWycWh0XcCNMduUtJtNjSN9UPLtW9o+VlT9G+UzyvZ/4XSK94LKFZ
0I+QJBmpzWlAhY81PXhoDlb9jfVyYU+HguGiy/3lKSJnIG3Quozf2leiOEB6yCZS
bgFO0Wt1b95lQyjwAnm4HTBmzlmdrTMpbkKjs6ArDybQT7fLAdEHG10p9FNljvMa
XiaFCmnAx7+pSg==
-----END CERTIFICATE-----
Generated at Fri May 2 06:23:20 2025 by rpki-client