Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File:                     WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier:          B97QgvoqazhkW2nRLNYYjTRDegk3kb9suy3xt2QF8Qw=
Subject key identifier:   2D:6E:AF:04:F5:C3:6F:E2:F1:A2:86:FB:9E:FE:50:9C:78:32:A9:F3
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer:       /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial:       019680229CC085743D9D2DDCB9B59117A60D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number:          1515
Signing time:             Tue 29 Apr 2025 06:01:14 +0000
Manifest this update:     Tue 29 Apr 2025 06:01:14 +0000
Manifest next update:     Wed 30 Apr 2025 06:01:14 +0000
Files and hashes:         1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
                          2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: 5iJShm8Gf1+hfeHXC63KNXUCEv3Kp8JebfAlU8BJcp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:9c:c0:85:74:3d:9d:2d:dc:b9:b5:91:17:a6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
        Validity
            Not Before: Apr 29 06:01:14 2025 GMT
            Not After : Apr 30 06:01:14 2025 GMT
        Subject: CN=2d6eaf04f5c36fe2f1a286fb9efe509c7832a9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:79:b5:ed:24:ea:9f:f2:d5:42:9a:5a:a6:
                    cd:f2:b5:10:c2:c8:f0:ae:6c:9c:9a:97:21:46:2a:
                    7c:70:b2:c0:4b:fa:07:96:a7:ef:d5:69:3c:f8:b8:
                    8e:f5:ca:b4:3f:07:b0:ac:e3:71:da:86:64:ca:3a:
                    5c:89:f8:23:23:55:ec:42:9c:66:24:46:dd:4d:95:
                    d2:18:df:6d:93:c1:a4:3b:65:ed:d9:3d:a2:1c:2e:
                    8e:37:0e:e2:94:fa:89:99:f2:33:b1:1b:d4:d9:c4:
                    73:c6:83:b2:f2:4c:15:1c:38:3e:38:dc:a5:6b:74:
                    5a:7a:ec:4d:16:75:bd:82:6e:03:f8:93:71:ec:a9:
                    47:4c:bd:5c:a1:eb:08:20:94:21:2a:d6:9c:e4:48:
                    e5:f9:9e:31:bc:ab:a2:cf:1c:38:f4:e5:d7:37:18:
                    bf:e5:4d:61:82:db:8b:ed:ca:6b:f2:81:0b:02:86:
                    87:c8:c2:8b:fa:90:db:fe:c1:44:70:72:bb:c7:9f:
                    b8:a1:25:0d:db:ab:73:19:20:53:01:66:94:33:61:
                    70:d8:2f:f9:34:0e:c8:8a:8b:2a:81:1c:c6:ec:79:
                    f6:5f:91:fb:87:70:da:7a:8e:af:cf:e6:01:7a:ec:
                    40:f9:32:85:e7:59:24:6e:8a:a6:01:fb:e4:b9:6b:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:AF:04:F5:C3:6F:E2:F1:A2:86:FB:9E:FE:50:9C:78:32:A9:F3
            X509v3 Authority Key Identifier:
                keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e9:43:a3:84:cd:37:a7:4b:95:04:37:77:92:4e:86:be:81:
         9a:5a:20:e4:39:77:f4:d4:68:4d:00:15:cf:40:39:12:61:1c:
         5e:17:4e:dc:ca:aa:bc:0e:c7:81:fe:4e:13:68:fa:55:96:ac:
         99:eb:e4:3f:ec:b7:78:5e:c5:02:10:13:f5:f3:59:32:f3:1f:
         90:93:3d:55:b1:53:77:48:69:d5:17:b7:79:26:74:df:0c:26:
         2a:ba:fd:ba:51:c4:94:0e:41:f1:23:f9:41:f5:ad:b1:0c:1e:
         ea:0f:ad:a7:8f:a3:5b:83:2d:79:2a:9f:f6:20:ea:54:6b:bc:
         94:a2:f7:59:46:bd:d9:a0:19:1b:c3:c7:8a:01:3a:a9:a8:d3:
         73:c3:d1:d9:5f:de:44:7f:bf:52:9d:41:18:eb:3f:bb:1b:49:
         c8:4e:57:84:64:0c:e2:b9:bc:ab:92:41:a9:5d:8c:71:01:82:
         2b:86:94:92:62:ee:fd:51:cb:c9:85:47:7f:f8:52:3f:44:f2:
         b1:c9:cf:7d:2c:00:59:4d:27:35:90:21:af:9d:2d:a3:d2:2f:
         b0:e7:36:ff:79:ae:bb:f6:47:8b:d0:13:ae:93:ff:a2:ff:ab:
         6d:9f:f0:3a:7c:08:3f:7f:3f:88:21:26:5a:ad:dc:09:50:f1:
         03:e0:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:52 2025 by rpki-client