Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File:                     wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier:          S4QgwqqKtqHtyPijQ0jLqYhqYUcPvS/Agw98LdldWl4=
Subject key identifier:   18:41:72:C2:04:17:D0:B3:76:8E:6D:75:EC:64:54:CC:CC:28:F1:15
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer:       /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial:       0196A80B11F3A96F50E7C9D2EA4160EEA6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number:          017A
Signing time:             Wed 07 May 2025 00:00:19 +0000
Manifest this update:     Wed 07 May 2025 00:00:19 +0000
Manifest next update:     Thu 08 May 2025 00:00:19 +0000
Files and hashes:         1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: 7ZotfArIvlWeuvImEPH4U2cZgTmHhLf+ELnOVNC4sjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:0b:11:f3:a9:6f:50:e7:c9:d2:ea:41:60:ee:a6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
        Validity
            Not Before: May  7 00:00:19 2025 GMT
            Not After : May  8 00:00:19 2025 GMT
        Subject: CN=184172c20417d0b3768e6d75ec6454cccc28f115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:49:b0:43:c3:f9:7a:59:2f:28:d4:3b:40:
                    cc:f2:6c:4a:37:a1:87:e0:a1:1d:a8:8b:e1:14:ab:
                    4f:5d:ef:01:45:47:92:63:db:eb:6b:b1:78:d9:4f:
                    46:c6:de:d6:3b:d0:78:bc:4b:a4:f8:24:26:e9:6f:
                    f8:c8:06:2b:e6:1e:30:58:71:86:2a:0c:91:e6:6a:
                    3c:f9:44:09:da:3e:57:2c:43:f8:50:57:c2:e9:02:
                    0a:0a:37:e6:b2:4f:eb:a0:64:82:f9:b3:3a:dc:25:
                    5c:7c:0a:28:a2:76:a5:fb:7e:dc:d9:42:5e:56:06:
                    e1:e8:83:c2:59:66:c8:85:36:f4:67:cd:2c:7f:cd:
                    d0:4f:e3:20:5c:21:b5:db:0c:31:22:ce:a8:a2:9a:
                    25:99:8b:16:d8:91:35:3c:4e:84:e9:be:4b:a1:f4:
                    68:02:49:f3:dc:6a:93:67:0f:a5:bd:c8:b5:02:b3:
                    36:38:63:b5:63:02:09:30:48:50:dd:9d:95:94:f3:
                    3c:19:40:d2:f0:03:93:db:80:c3:3c:f6:ca:ee:e4:
                    30:25:b9:9c:a2:af:a1:9d:f3:16:88:8d:c2:f0:37:
                    02:82:dd:eb:75:90:78:f1:15:05:86:be:b3:5a:06:
                    18:d7:c4:c5:b9:f1:94:cd:09:3d:50:1e:fd:3d:ce:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:72:C2:04:17:D0:B3:76:8E:6D:75:EC:64:54:CC:CC:28:F1:15
            X509v3 Authority Key Identifier:
                keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:c3:3a:c5:41:7f:36:24:03:04:cd:26:3e:17:d2:13:05:
         65:3d:60:90:3a:62:dd:4e:86:bc:3f:a4:1c:74:4a:d9:34:fb:
         a3:69:86:3f:8b:0b:19:d0:d8:51:05:97:6a:a6:2b:2f:dd:af:
         43:80:4c:f3:88:ba:f0:fd:87:0d:72:2c:bd:a8:42:10:0e:a8:
         c6:ef:74:4c:c6:61:cf:8a:3b:06:9c:51:d4:02:0d:9a:bd:45:
         0d:33:3c:a3:66:0c:77:23:88:0b:49:ac:3c:7d:5d:9c:63:cc:
         06:39:32:b7:e9:4b:23:49:b4:7c:d1:84:a0:4e:7d:0c:75:fb:
         f9:c1:31:5f:f9:be:05:f3:53:d6:97:90:a8:75:29:a5:f6:e7:
         0a:cd:04:2b:01:66:dd:72:f8:d8:50:e3:1e:21:7f:cd:2b:de:
         eb:a5:14:87:21:35:51:4c:5d:4a:03:e0:c4:ca:68:ef:72:bc:
         ca:ca:bd:13:03:09:5d:b2:9f:82:9e:56:ec:9a:c6:d2:2f:ad:
         96:a3:0c:09:2d:ca:18:d7:89:52:28:79:c4:d0:48:6a:12:69:
         c2:55:0b:4a:54:c9:01:59:0b:01:e6:e7:eb:96:0b:e4:be:68:
         95:5f:c3:f3:56:e8:2f:c8:cd:31:29:32:66:30:6f:bc:80:1d:
         19:8a:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:06:23 2025 by rpki-client