Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File:                     LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier:          TF/K/OG8z830gBI+2l5qPpwUaM2uqPQLl5OEVU7MwTs=
Subject key identifier:   61:E1:23:04:ED:15:AF:6A:83:75:B3:BB:51:29:03:97:DC:C2:91:74
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer:       /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial:       01965492DA8BADEE9C114696BA9BCD5ED79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number:          1438
Signing time:             Sun 20 Apr 2025 19:00:32 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:32 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:32 +0000
Files and hashes:         1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: rJ8Dou0QHbQfLbmS4rv97KCE/16GW+jz6v3zigzc3uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:da:8b:ad:ee:9c:11:46:96:ba:9b:cd:5e:d7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
        Validity
            Not Before: Apr 20 19:00:32 2025 GMT
            Not After : Apr 21 19:00:32 2025 GMT
        Subject: CN=61e12304ed15af6a8375b3bb51290397dcc29174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:34:e4:fd:37:09:2c:59:69:ac:58:a1:f0:
                    fa:24:a1:c5:6a:c0:72:ba:0a:5e:cc:1f:94:c9:70:
                    d3:37:a8:14:20:db:03:03:0a:5d:23:5c:cc:78:6f:
                    6c:92:6d:85:9b:9a:f3:65:e9:a9:45:c6:81:20:69:
                    fb:4f:f0:81:2c:a2:97:6f:40:40:9b:93:49:42:dc:
                    e7:c9:b9:be:73:79:8a:02:50:d5:40:7b:4e:b0:e8:
                    0d:f0:cb:2a:19:96:c9:a9:31:62:a5:2d:cb:96:af:
                    8c:19:ad:19:01:f5:6d:08:1e:ad:2b:b1:b6:67:c1:
                    9f:2a:d8:9a:0f:6e:45:49:31:0f:19:67:4f:25:62:
                    12:53:4b:f5:db:74:d4:b6:53:ba:25:e1:bf:b9:3b:
                    d7:38:40:e5:11:2d:4e:1e:8e:c9:a3:85:64:17:a1:
                    c7:19:24:d2:24:40:1f:22:3a:35:a8:66:cf:50:d2:
                    0d:b7:e1:4e:e9:11:92:7c:95:1a:4a:00:06:80:62:
                    c2:03:ef:a7:50:37:65:0c:49:ae:37:ee:e7:25:1c:
                    d3:87:70:62:27:3e:ae:98:43:4a:78:29:8b:7d:28:
                    6e:ee:ce:dc:d7:5c:e0:12:ee:44:08:f3:a0:20:48:
                    20:48:c9:76:96:28:b5:11:d7:65:84:36:f3:6a:ce:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:23:04:ED:15:AF:6A:83:75:B3:BB:51:29:03:97:DC:C2:91:74
            X509v3 Authority Key Identifier:
                keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:50:dc:53:ed:46:76:b1:7f:fe:4c:b6:85:0f:71:d6:cd:
         78:13:62:f4:6b:c8:e7:84:8e:f8:62:f4:af:e3:3b:dd:c7:07:
         1e:be:14:47:90:bd:a8:cb:f7:77:cb:bb:4c:b7:6a:89:21:77:
         33:e0:7a:28:8e:43:e6:2c:cd:18:d9:e9:e1:d7:d5:d8:d5:35:
         dd:2c:72:cf:25:86:45:40:62:1f:07:e6:47:73:24:c8:be:0d:
         6f:75:dc:c6:26:98:44:72:57:fb:22:29:b2:6f:3e:95:71:0e:
         58:51:f5:69:ed:36:36:39:ea:c2:d7:02:b1:41:4a:d3:98:d4:
         16:74:12:04:f2:d8:dc:60:d8:af:6c:8b:23:fc:7d:b4:b8:ae:
         23:25:f4:47:a1:76:bd:5b:67:cf:31:a8:ad:dd:1e:5f:04:93:
         42:d8:68:31:78:de:36:b7:01:d0:91:28:e0:6b:1c:79:ea:22:
         0c:fa:40:a8:6a:c2:9c:9e:5b:9a:74:bf:54:c6:0b:ff:08:11:
         42:b9:54:9b:4e:be:e5:f8:97:f5:16:f0:fe:2f:44:46:18:bd:
         85:a4:cd:57:a8:76:9b:73:d1:22:a5:47:8e:3b:09:88:a2:b9:
         a1:8f:9c:3f:d8:28:78:67:5f:13:4d:98:ff:a5:e2:72:e7:10:
         b0:2a:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:28 2025 by rpki-client