Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          pIsHncrk80MlsQI0HNhEx0btsi8nCPLOrPZa0nQQcOg=
Subject key identifier:   A8:0D:7E:DA:81:74:D5:DD:E4:C2:E4:C7:50:E6:AD:54:F8:76:3B:24
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       0196AD689B9A311CC44BBE878F0B78F188B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1527
Signing time:             Thu 08 May 2025 01:00:36 +0000
Manifest this update:     Thu 08 May 2025 01:00:36 +0000
Manifest next update:     Fri 09 May 2025 01:00:36 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: CC+JUAirYH36w1HFVoaKkgfptlxz3cR5N9C3YSHM9Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:9b:9a:31:1c:c4:4b:be:87:8f:0b:78:f1:88:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: May  8 01:00:36 2025 GMT
            Not After : May  9 01:00:36 2025 GMT
        Subject: CN=a80d7eda8174d5dde4c2e4c750e6ad54f8763b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:0f:2e:bb:80:d7:3b:0e:93:9f:96:38:2e:
                    c3:33:15:03:34:ce:9b:24:20:22:ae:c3:86:3d:51:
                    85:03:68:d0:8f:81:2e:bb:21:63:3b:3a:93:95:ba:
                    83:e5:e0:56:0a:bb:05:f6:eb:5e:6a:71:53:ca:18:
                    57:7a:53:51:c4:d3:06:d4:59:62:31:2e:b0:7a:be:
                    5e:09:15:24:7c:5d:cc:fe:35:89:c4:5a:38:b4:f6:
                    5c:4d:7c:d1:f9:71:b5:bb:2a:2e:62:9a:97:62:7f:
                    ce:a2:e6:dc:00:06:52:aa:a3:a3:19:1d:60:b7:c1:
                    cb:39:b9:a4:3f:43:f8:dc:5d:ac:81:24:63:91:b4:
                    44:58:77:05:01:71:de:57:c8:9f:f0:56:44:ca:28:
                    5c:39:05:52:3f:3f:49:6e:5d:d1:b6:ac:97:c2:25:
                    03:28:4e:9c:f0:fe:bb:ba:0f:5a:9d:8e:b1:80:61:
                    d2:57:bc:75:44:d5:63:be:44:2d:c7:be:ef:77:ef:
                    d6:cc:00:15:56:0e:0d:ac:f7:9a:f9:0d:5e:9d:f2:
                    06:ea:26:f6:ad:ec:ac:92:65:59:83:c8:fd:da:72:
                    72:7f:c3:df:2f:a2:7d:78:2e:71:c5:19:a8:85:df:
                    4a:4d:25:c0:02:25:bd:52:73:80:d1:32:d5:c7:02:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:7E:DA:81:74:D5:DD:E4:C2:E4:C7:50:E6:AD:54:F8:76:3B:24
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:f8:1c:4b:ad:9b:91:c7:fa:88:1e:be:15:f3:f8:44:75:
         2a:01:8a:2a:c5:ab:28:10:d6:e7:54:03:68:e5:05:0b:21:1a:
         74:0c:ed:2b:0c:ff:b5:46:ba:85:68:ac:a0:56:0d:17:b7:2d:
         e3:c3:ae:f8:9d:66:03:e0:51:e6:86:bd:06:d4:b8:70:0e:8b:
         cc:15:a1:74:72:20:25:f8:1b:0d:aa:b9:13:48:38:25:f2:f5:
         8f:1f:33:c8:7e:52:f9:ca:7e:bb:12:f9:a6:89:03:62:e9:f2:
         ab:1d:81:02:38:a9:df:d0:6b:e4:b0:5f:79:6b:02:e1:d6:9a:
         3b:50:a2:46:70:97:77:6d:c4:72:5c:0a:0a:5d:e2:4c:13:64:
         86:10:27:15:11:64:d2:cc:6c:f6:2a:90:1e:d2:a1:78:20:d8:
         4f:aa:5b:95:fd:5f:b3:2c:df:2f:1b:65:07:0a:a6:3a:cd:13:
         ae:ce:6a:c1:79:51:16:2e:8d:9c:61:0c:e4:7f:17:b3:9a:c4:
         05:7c:ce:f3:01:34:3d:e9:12:8a:6d:1f:f4:43:95:19:40:9b:
         6b:9a:5d:7f:ed:26:5a:8a:d0:e9:9c:dd:c6:c1:6e:80:31:5f:
         bf:e8:d7:90:e6:6a:38:65:49:65:92:3c:80:44:91:b5:c8:29:
         16:39:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:01:55 2025 by rpki-client