Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          iMm/R50K5loYZn04K1mQN/R1QoW1HJStWUZ0NyRPuJs=
Subject key identifier:   5D:99:9C:35:36:0D:55:32:52:3A:C2:81:61:CC:C2:D7:CE:61:DF:47
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       0196C0B818CF824781382CA0C7FA0C284098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          1404
Signing time:             Sun 11 May 2025 19:00:12 +0000
Manifest this update:     Sun 11 May 2025 19:00:12 +0000
Manifest next update:     Mon 12 May 2025 19:00:12 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: nPXi5L8hMcN48WrZUo8TQPZMe7UrVq5jN4tBykfYUlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:18:cf:82:47:81:38:2c:a0:c7:fa:0c:28:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: May 11 19:00:12 2025 GMT
            Not After : May 12 19:00:12 2025 GMT
        Subject: CN=5d999c35360d5532523ac28161ccc2d7ce61df47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:cb:1c:4e:73:49:42:65:dc:c4:68:83:e2:5a:
                    c9:97:7f:b0:b5:9a:80:26:7d:89:b5:f9:dc:55:21:
                    d8:1a:9d:e9:41:4a:c9:44:a4:16:d7:24:54:4c:77:
                    8b:bc:bd:7b:52:1b:ca:01:b3:38:74:b0:72:63:f5:
                    24:44:d9:48:1e:40:e0:58:b7:64:54:86:f8:25:e1:
                    9e:c2:e6:b3:c6:a9:dd:a6:a4:0c:96:09:25:1e:50:
                    21:b6:61:ca:e6:ce:20:f5:a4:b2:39:a7:3b:56:87:
                    74:7e:af:dd:6a:6d:75:89:73:bc:7b:7e:84:07:c1:
                    88:09:0f:80:c9:78:c0:a7:63:7e:93:b4:e5:59:e3:
                    a4:e1:e7:fd:16:c5:d6:be:5e:78:89:a3:c8:5e:ec:
                    92:0a:c1:07:76:3a:90:4c:f2:9b:ac:58:c5:1d:d1:
                    37:8f:bc:ca:dc:e0:01:9f:74:ac:a4:11:c0:d5:0b:
                    88:12:ed:a3:74:6b:45:cf:89:a5:9c:25:f0:25:ae:
                    5c:21:84:8a:c8:f6:ad:36:66:0e:5e:cf:ca:dd:5f:
                    0c:28:ac:46:64:11:6c:17:7e:aa:29:bf:8b:23:69:
                    a6:bd:28:45:9f:f2:25:8a:a9:11:0b:f6:5b:62:46:
                    b9:76:6a:8a:fb:76:ac:34:f2:f1:a4:18:83:17:4c:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:99:9C:35:36:0D:55:32:52:3A:C2:81:61:CC:C2:D7:CE:61:DF:47
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:16:17:fc:07:6b:9f:2f:03:e7:f9:2b:32:2d:39:da:e4:64:
         d7:96:4d:3b:b9:96:6d:2c:e5:c4:a2:58:9a:31:84:07:58:65:
         43:6c:07:b1:b2:0f:e0:26:4e:1e:51:11:31:dd:7e:18:40:e7:
         10:72:1e:4b:85:33:af:2d:3f:a7:d0:e0:e0:06:46:ca:2f:38:
         54:6f:7b:72:49:11:f0:41:d0:fb:a0:f5:e8:1e:bc:7b:05:31:
         56:d5:ba:99:c4:b6:e1:9c:ef:02:6a:43:62:33:a5:73:04:b7:
         0e:0c:c8:22:1e:0d:5b:04:4b:fb:b5:9c:44:c0:c9:cb:a8:ee:
         ba:51:f2:14:9a:f2:ea:8e:87:4d:e5:72:c5:54:c4:7f:ec:a9:
         9a:4c:c5:ee:89:ab:14:f5:2e:d2:f3:39:e7:65:5d:6a:85:e0:
         be:dc:be:63:37:d4:b5:0b:8b:90:92:23:5d:b5:ce:cb:36:3d:
         a5:e4:cd:17:82:a8:8c:9b:f4:b2:c7:af:2d:a2:6c:2c:56:d6:
         b6:08:3a:dc:15:73:98:d1:6e:78:35:37:38:6b:ad:67:a2:45:
         50:39:59:d3:ed:9b:e3:bf:9d:ca:11:9c:70:05:ca:2a:f7:8f:
         9d:91:c8:c3:96:39:84:bd:65:07:66:41:ae:e3:68:c8:4d:3b:
         84:45:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:14:40 2025 by rpki-client