Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File:                     wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier:          JJ7XMf48n0vKZIgv5FdYliH1D2Orteofh7Qqvv47LT4=
Subject key identifier:   9C:C8:86:04:44:27:4C:65:ED:9A:A4:41:26:2A:33:4C:56:8E:98:8D
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer:       /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial:       01969DBE4160A20F3E494F520EAC4D1C86CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number:          0796
Signing time:             Mon 05 May 2025 00:00:13 +0000
Manifest this update:     Mon 05 May 2025 00:00:13 +0000
Manifest next update:     Tue 06 May 2025 00:00:13 +0000
Files and hashes:         1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
                          2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: xt+lYC6QRTWQNmYM1rL52moH0eA9eCAcPbvWEnFs1a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:41:60:a2:0f:3e:49:4f:52:0e:ac:4d:1c:86:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
        Validity
            Not Before: May  5 00:00:13 2025 GMT
            Not After : May  6 00:00:13 2025 GMT
        Subject: CN=9cc8860444274c65ed9aa441262a334c568e988d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:72:33:a0:b2:c7:8c:17:51:eb:bc:8b:af:
                    95:23:47:e4:0f:4b:dd:18:7e:f8:7c:df:2a:09:36:
                    ef:69:b6:f4:6e:b4:9d:ca:c3:80:0f:f1:33:5e:e4:
                    2e:71:40:14:fa:ff:6f:d0:51:a1:16:a6:eb:94:4c:
                    51:3e:0b:c0:71:77:d0:db:9f:c1:81:22:13:99:28:
                    73:08:93:eb:20:7b:99:7b:d5:9c:ff:f6:cc:76:79:
                    88:bb:3d:bd:d5:23:60:a0:63:13:44:9c:76:fd:ab:
                    cb:c0:ff:8e:01:2f:cf:40:18:47:77:32:10:0c:91:
                    14:d4:5c:8c:2b:9f:8f:91:d8:62:e4:ee:33:ee:e7:
                    2f:56:ed:12:2e:0d:75:cd:13:8a:53:32:8e:d9:0f:
                    8c:08:9f:82:0e:df:8d:ac:0f:69:95:8e:ba:ef:38:
                    96:5e:04:84:1a:25:33:5c:61:c2:14:07:a2:1e:0f:
                    c6:fa:da:5e:f3:50:75:7a:1c:b4:25:25:75:a7:af:
                    2c:75:98:29:d2:c2:68:e2:81:b5:e2:46:cd:ff:b3:
                    06:12:ab:db:bc:1b:79:6d:d5:0a:db:30:30:72:e7:
                    73:a7:31:5d:90:8c:81:74:ac:78:4d:e2:a1:fb:7e:
                    4e:6e:87:b8:9b:65:f8:b4:90:cd:b3:f5:83:4e:f4:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:86:04:44:27:4C:65:ED:9A:A4:41:26:2A:33:4C:56:8E:98:8D
            X509v3 Authority Key Identifier:
                keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:77:6e:1d:58:b2:f0:6a:07:fa:31:ed:5b:c0:84:f1:79:
         ab:0e:68:20:ed:29:86:01:4c:7f:80:db:e5:3c:f0:91:aa:12:
         54:ee:83:6c:dd:e0:6b:67:09:fd:ce:8d:31:41:e8:da:0e:c7:
         7a:0e:f0:ad:67:50:bd:d8:7b:cc:6e:1e:df:18:5e:36:36:33:
         74:71:33:ed:f9:51:8f:47:3b:ed:ed:8e:4f:17:82:b1:a5:76:
         fb:95:88:59:c1:df:5f:8f:26:49:af:40:5d:08:6f:ee:15:7b:
         cd:7d:34:d2:77:51:e6:11:6d:5a:71:43:1f:b7:89:49:60:e6:
         70:95:b3:a2:5f:5e:64:68:65:79:be:b4:48:e1:8e:4d:71:8c:
         87:7d:c6:fb:38:c0:ab:14:9a:ba:88:43:56:f5:de:eb:d0:f0:
         2c:d9:18:b6:1f:64:82:06:ed:66:67:e8:3f:88:25:68:13:3c:
         11:d3:dd:ec:55:f8:2d:b0:b0:6e:6c:e9:6f:d3:3c:97:e7:7c:
         17:89:65:f0:6b:7a:bc:57:da:a8:33:d7:be:68:4f:e3:f9:dd:
         ad:d4:82:56:e0:49:d6:d2:c1:f9:52:1f:21:fb:09:ff:01:6e:
         64:ee:d9:49:e4:83:d8:40:ff:ac:68:42:81:f9:00:c3:5d:30:
         ec:d2:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:50:44 2025 by rpki-client