Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
File:                     WKNa-48AdsEVWKz_QGPy9YooF8o.mft (raw, json)
Hash identifier:          xXJpSYGKSwoL1/V/lAuw/+BhhdThjqhWJh3jFhzSGtw=
Subject key identifier:   FD:46:4D:DA:5A:DC:06:DD:4C:B8:B1:0A:A9:75:2B:5B:47:13:3F:31
Authority key identifier: 58:A3:5A:FB:8F:00:76:C1:15:58:AC:FF:40:63:F2:F5:8A:28:17:CA
Certificate issuer:       /CN=58a35afb8f0076c11558acff4063f2f58a2817ca
Certificate serial:       0196B0D790B75A5EDF7C7BD578309475579B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
Manifest number:          0314
Signing time:             Thu 08 May 2025 17:00:39 +0000
Manifest this update:     Thu 08 May 2025 17:00:39 +0000
Manifest next update:     Fri 09 May 2025 17:00:39 +0000
Files and hashes:         1: WKNa-48AdsEVWKz_QGPy9YooF8o.crl (hash: 0SYQNCKDpVQozvJMgZ5saLG9I3XpeH4mZKdWWQv7PIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:90:b7:5a:5e:df:7c:7b:d5:78:30:94:75:57:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a35afb8f0076c11558acff4063f2f58a2817ca
        Validity
            Not Before: May  8 17:00:39 2025 GMT
            Not After : May  9 17:00:39 2025 GMT
        Subject: CN=fd464dda5adc06dd4cb8b10aa9752b5b47133f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:cd:6a:d9:fd:75:30:0b:34:9c:cf:a1:58:
                    05:2c:a4:a7:5b:09:39:8b:5f:f2:68:27:79:43:06:
                    5a:58:dc:62:b3:1c:ca:09:b0:2f:2f:03:03:07:56:
                    66:79:6d:21:0a:63:6c:2c:dd:99:3e:f8:f0:d4:87:
                    31:b6:1a:f6:64:e3:66:15:9a:fa:27:03:3d:20:33:
                    a3:b2:7b:73:50:a2:3f:4d:8e:dd:ff:4a:3e:96:49:
                    10:10:dd:da:e1:ca:23:9e:d2:ae:7f:d7:7d:c0:6e:
                    12:eb:f0:af:8b:16:9d:ab:98:0f:8e:23:33:f7:72:
                    2d:ac:b8:ef:c7:67:41:81:88:89:a3:fc:e3:a6:13:
                    f8:34:c5:01:8d:d0:22:38:cb:b8:6d:99:a4:b8:6e:
                    ba:6c:f0:ed:7c:62:c2:a2:d2:c2:2a:15:3e:a2:38:
                    eb:55:ea:14:ec:e0:96:0d:63:62:f4:a9:ae:99:24:
                    18:00:69:12:9b:b6:af:74:fd:d8:39:fc:80:1d:82:
                    20:df:e3:bb:45:e1:14:5d:53:c1:58:10:4f:22:f6:
                    3e:09:ce:a8:64:c5:d0:e6:1f:ab:07:95:22:b7:b4:
                    39:cf:46:25:52:25:86:08:37:d0:38:44:12:cf:e3:
                    71:3c:21:c5:ff:9b:5f:9e:9c:de:d0:53:5b:91:81:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:4D:DA:5A:DC:06:DD:4C:B8:B1:0A:A9:75:2B:5B:47:13:3F:31
            X509v3 Authority Key Identifier:
                keyid:58:A3:5A:FB:8F:00:76:C1:15:58:AC:FF:40:63:F2:F5:8A:28:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKNa-48AdsEVWKz_QGPy9YooF8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d27b3a-3cec-4139-87e8-3518d806ffc3/1/WKNa-48AdsEVWKz_QGPy9YooF8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:65:65:71:db:dd:18:64:9e:78:f0:07:29:cd:73:15:48:
         8a:1e:1d:1e:5a:4d:08:25:20:37:51:6d:50:69:8a:9d:c8:2f:
         58:84:c4:e2:54:93:fb:6b:de:50:84:34:d6:56:c1:83:26:66:
         a4:23:2c:7d:b1:ea:8b:1a:82:8e:f7:57:f3:79:b4:ff:d2:2e:
         5c:fc:ad:39:51:11:87:44:f2:48:aa:fc:70:f9:2d:eb:10:78:
         7a:c4:fe:f1:cb:65:e8:b0:1c:54:9e:d3:e5:48:80:81:ee:0f:
         84:0f:4d:e6:9c:c6:f8:c7:29:81:09:08:78:db:13:a0:c8:43:
         37:de:ea:b8:7e:9c:6b:85:23:13:b0:6e:9d:4d:9c:a9:ac:19:
         35:e7:ee:6a:6e:08:ce:7f:4d:52:9d:96:de:e3:20:4d:e0:7b:
         87:cd:52:51:6b:4b:4a:04:65:09:2a:aa:1f:80:ca:18:14:5b:
         1e:39:9b:3b:be:45:2f:55:e0:1a:2c:66:8b:0e:c2:ac:45:70:
         ec:4d:a8:31:df:ee:a3:ee:3a:77:ec:e2:f6:a1:dc:d4:85:ac:
         9c:a2:d2:7d:48:65:ab:84:0c:cc:11:5f:d4:83:ad:dd:a6:33:
         0e:37:63:25:c9:9b:fe:6e:89:fe:ed:89:ba:08:8a:46:a1:63:
         d2:4b:36:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw15C3Wl7ffHvVeDCUdVebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTM1YWZiOGYwMDc2YzExNTU4YWNmZjQwNjNmMmY1OGEy
ODE3Y2EwHhcNMjUwNTA4MTcwMDM5WhcNMjUwNTA5MTcwMDM5WjAzMTEwLwYDVQQD
EyhmZDQ2NGRkYTVhZGMwNmRkNGNiOGIxMGFhOTc1MmI1YjQ3MTMzZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOHNatn9dTALNJzPoVgFLKSnWwk5
i1/yaCd5QwZaWNxisxzKCbAvLwMDB1ZmeW0hCmNsLN2ZPvjw1Icxthr2ZONmFZr6
JwM9IDOjsntzUKI/TY7d/0o+lkkQEN3a4cojntKuf9d9wG4S6/Cvixadq5gPjiMz
93ItrLjvx2dBgYiJo/zjphP4NMUBjdAiOMu4bZmkuG66bPDtfGLCotLCKhU+ojjr
VeoU7OCWDWNi9KmumSQYAGkSm7avdP3YOfyAHYIg3+O7ReEUXVPBWBBPIvY+Cc6o
ZMXQ5h+rB5Uit7Q5z0YlUiWGCDfQOEQSz+NxPCHF/5tfnpze0FNbkYHC8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1GTdpa3AbdTLixCql1K1tHEz8xMB8GA1UdIwQY
MBaAFFijWvuPAHbBFVis/0Bj8vWKKBfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tOYS00OEFkc0VWV0t6X1FHUHk5WW9vRjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kMjdiM2EtM2NlYy00MTM5LTg3ZTgt
MzUxOGQ4MDZmZmMzLzEvV0tOYS00OEFkc0VWV0t6X1FHUHk5WW9vRjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kMjdiM2EtM2NlYy00MTM5LTg3ZTgtMzUxOGQ4MDZmZmMz
LzEvV0tOYS00OEFkc0VWV0t6X1FHUHk5WW9vRjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCZlZXHb
3RhknnjwBynNcxVIih4dHlpNCCUgN1FtUGmKncgvWITE4lST+2veUIQ01lbBgyZm
pCMsfbHqixqCjvdX83m0/9IuXPytOVERh0TySKr8cPkt6xB4esT+8ctl6LAcVJ7T
5UiAge4PhA9N5pzG+McpgQkIeNsToMhDN97quH6ca4UjE7BunU2cqawZNefuam4I
zn9NUp2W3uMgTeB7h81SUWtLSgRlCSqqH4DKGBRbHjmbO75FL1XgGixmiw7CrEVw
7E2oMd/uo+46d+zi9qHc1IWsnKLSfUhlq4QMzBFf1IOt3aYzDjdjJcmb/m6J/u2J
ugiKRqFj0ks2yw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:26:41 2025 by rpki-client