Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File:                     WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier:          PtXQJzqTwePfeZ3yugU+oy1f2AGsc6KNQiQhhrS4I9I=
Subject key identifier:   54:5F:5C:CA:B4:38:9F:C7:3C:76:4B:96:D0:70:73:0B:57:2B:69:76
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer:       /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial:       01967D20E199CB51D206CCDE53F688078F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number:          1514
Signing time:             Mon 28 Apr 2025 16:00:28 +0000
Manifest this update:     Mon 28 Apr 2025 16:00:28 +0000
Manifest next update:     Tue 29 Apr 2025 16:00:28 +0000
Files and hashes:         1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
                          2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: q3XA+gh6Q/7ttiMO2KrllrlkUHxjlo+VNltzAoeuLGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:20:e1:99:cb:51:d2:06:cc:de:53:f6:88:07:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
        Validity
            Not Before: Apr 28 16:00:28 2025 GMT
            Not After : Apr 29 16:00:28 2025 GMT
        Subject: CN=545f5ccab4389fc73c764b96d070730b572b6976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:f1:54:d8:28:46:4a:ff:2e:97:0c:a4:05:
                    36:66:d9:db:2f:22:f5:06:57:f4:28:4c:7d:96:26:
                    8b:b9:77:c3:34:eb:53:86:9f:38:be:37:53:13:74:
                    a2:41:6b:7b:01:bf:57:b4:39:d7:4f:42:d9:e0:07:
                    39:75:c3:49:d4:ed:1f:51:a0:ff:e5:75:30:4c:5a:
                    10:da:75:14:f6:08:86:8d:84:80:93:3b:3b:de:74:
                    7c:9b:f2:f3:b6:85:02:c3:b4:4b:98:e0:17:73:11:
                    05:ea:f2:ea:ad:73:90:ee:8f:34:98:f5:37:7d:7e:
                    73:78:b8:65:76:c0:bc:37:cf:90:a5:74:4c:7b:66:
                    64:e9:f4:ae:b0:7f:61:1d:15:c8:d8:b4:57:13:1b:
                    82:b2:d9:cc:c9:b0:24:24:88:26:10:2f:6b:92:f6:
                    a6:93:6f:b8:6a:7a:d0:7b:d7:f3:f6:43:7b:a9:ee:
                    8a:45:5b:6a:fa:bf:dd:63:f3:5d:30:f3:38:bb:1c:
                    9f:e9:a6:27:0a:82:3e:4f:01:1f:62:e7:10:96:e7:
                    8c:f0:a1:02:85:53:e6:cc:df:78:3c:f5:84:9b:4c:
                    b0:62:93:0e:46:dc:85:80:c9:e3:8b:30:89:30:07:
                    34:f7:19:6e:63:12:29:b3:21:9f:09:7d:67:30:1f:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:5C:CA:B4:38:9F:C7:3C:76:4B:96:D0:70:73:0B:57:2B:69:76
            X509v3 Authority Key Identifier:
                keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:51:8f:9e:1f:f7:ad:01:ad:21:41:8d:02:e5:20:2c:c3:
         09:ca:45:e4:52:a8:f3:60:7e:ef:c0:83:91:62:3b:7c:df:08:
         15:91:25:78:0e:9f:36:4a:27:14:a7:0d:85:d4:6c:b8:a2:e5:
         6a:1f:f0:d6:59:dc:a9:ad:9d:05:03:f1:c6:f1:26:df:97:48:
         fe:6d:7a:c0:ce:d0:68:d4:28:eb:10:14:84:ad:00:74:f4:7a:
         67:09:01:54:fb:e0:8e:54:b4:f3:14:e3:6e:65:01:4c:be:63:
         f9:08:7d:ff:aa:3f:71:ea:d4:d7:79:a6:bf:57:ae:85:34:e5:
         8d:4d:c4:25:97:46:22:bd:fa:fa:dd:94:26:a7:be:13:8d:04:
         45:c3:a3:e9:eb:df:8a:c5:43:21:c5:db:b3:76:ff:c2:13:2f:
         85:25:7b:d0:b0:e2:db:a1:15:01:95:07:d8:1f:78:39:85:e2:
         0e:0c:64:56:a3:9f:49:22:f8:1a:73:41:15:d7:4d:22:ab:2d:
         36:1e:64:ff:3e:11:3e:3f:51:53:d6:6c:09:cc:d8:98:dc:6b:
         95:0d:78:31:a4:9a:75:de:b2:39:0f:ae:3c:95:2e:f0:fa:ef:
         c6:a1:60:62:9a:9d:b1:56:d2:6f:a5:d8:63:41:14:43:08:26:
         a0:53:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:11:20 2025 by rpki-client