Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          kvNvYFBgS/YgmB5HFf7W0Vpe5YLv0o9P62uEQyn+Bvw=
Subject key identifier:   DA:20:B8:36:84:A2:81:B8:71:A6:FB:92:EE:36:A9:8B:8A:62:05:1C
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       019679E96D723ADAEBB96A49DF19F91A06C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1510
Signing time:             Mon 28 Apr 2025 01:01:02 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:02 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:02 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: QyTbkrQCnlyq1GOUSjrOP2D/NFF0W+HltYWyM8/4udA=)
                          2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:6d:72:3a:da:eb:b9:6a:49:df:19:f9:1a:06:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Apr 28 01:01:02 2025 GMT
            Not After : Apr 29 01:01:02 2025 GMT
        Subject: CN=da20b83684a281b871a6fb92ee36a98b8a62051c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:af:d0:ac:6d:46:6a:c4:2d:fb:64:b7:c2:
                    82:c9:90:d4:5d:78:63:18:1a:5a:02:79:ed:79:dd:
                    d1:19:b3:ba:50:34:82:db:5e:f8:09:f2:88:45:f0:
                    68:c9:fd:b9:aa:ac:9c:7e:4e:5a:e3:41:c5:fa:05:
                    18:87:e8:3e:40:2e:43:28:be:d7:d4:f0:8d:83:ad:
                    a1:3d:cb:01:f5:2f:99:a9:97:52:fc:34:29:55:f3:
                    6a:ef:3c:b4:7a:67:a8:54:f6:4b:4d:ac:48:16:d3:
                    f8:b4:ef:68:b2:c6:74:db:8b:33:a7:e3:54:3c:a8:
                    33:09:2e:30:70:a3:4a:46:64:53:0a:55:20:f3:d6:
                    25:78:ec:bc:82:c3:dc:5d:40:68:2b:03:2c:04:1a:
                    a3:77:40:ce:6d:a8:fe:29:f3:6d:82:40:35:51:d7:
                    95:90:c2:49:c1:a4:10:86:7f:2e:08:ef:4a:4d:cb:
                    3c:4e:64:2f:f8:9f:dc:f7:93:4c:96:81:2e:aa:23:
                    0f:01:9b:a8:39:37:34:24:65:05:0e:fd:f2:07:0e:
                    a1:e3:a5:7e:d8:31:74:d3:5d:ed:c3:ab:8e:f8:34:
                    f5:13:a8:55:63:5a:88:6b:f3:1b:ee:0a:71:20:e3:
                    4a:fb:07:d8:12:35:db:4e:c2:80:d9:0b:a4:48:bc:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:20:B8:36:84:A2:81:B8:71:A6:FB:92:EE:36:A9:8B:8A:62:05:1C
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:88:23:a6:45:64:34:7f:ac:29:35:d1:e7:8e:6e:e7:07:
         04:d8:bb:52:45:30:af:cd:df:18:40:7c:3a:88:81:ee:f7:3f:
         d4:bb:f6:fb:a0:19:1d:b3:58:a9:9d:0b:d9:fc:d7:b0:79:4e:
         cf:80:94:3c:bf:9f:0c:3e:b6:3c:97:10:ab:97:10:04:97:6e:
         91:ce:61:d2:d5:bf:df:b0:3c:d7:19:eb:68:cb:de:cd:b7:18:
         c9:05:ff:aa:1e:bc:cd:86:b2:ef:27:2b:73:e8:7e:21:54:22:
         86:10:14:69:cb:cf:e5:3b:ba:59:06:a2:20:49:02:20:ed:9a:
         ae:ed:d4:4c:d2:5d:27:7b:03:84:54:d0:ff:b3:7c:a2:aa:c6:
         14:b2:40:0e:00:33:aa:54:60:41:4d:18:e9:ab:95:8a:a8:97:
         3b:b4:ad:d3:9e:52:b6:8e:1d:0e:68:02:cc:4f:74:ed:f9:55:
         df:a2:d3:ff:24:a1:02:7f:4d:20:9c:7a:b1:99:04:cc:79:81:
         d1:07:c4:f0:66:b5:fd:a8:6d:38:f8:70:fa:09:78:0d:b9:2b:
         a0:5d:24:34:5c:17:a5:2f:33:e1:c4:ca:27:a8:34:b4:b1:44:
         79:3b:ce:ee:99:a2:46:80:72:8c:3b:08:c1:eb:06:9a:d5:4f:
         95:ef:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:28:20 2025 by rpki-client