Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          unq73jwH4gFBVIeaxUw4UvyCRL8yLty1YyXeNPCuvCg=
Subject key identifier:   B0:B2:4B:BA:98:28:6A:2E:8C:22:E1:80:A5:88:CC:6F:CB:9C:D8:23
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       01965537EB7FF592EDA9E3F640D37C8B11F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          0747
Signing time:             Sun 20 Apr 2025 22:00:50 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:50 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:50 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: /abr/rDJ4NIH+6reXfT/zYf9cEcTnZWt4I9RXDbM7FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:eb:7f:f5:92:ed:a9:e3:f6:40:d3:7c:8b:11:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: Apr 20 22:00:50 2025 GMT
            Not After : Apr 21 22:00:50 2025 GMT
        Subject: CN=b0b24bba98286a2e8c22e180a588cc6fcb9cd823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:8d:0d:0d:6c:fe:9d:91:1d:73:ca:58:7b:
                    96:59:26:b2:d2:c7:31:c5:3c:21:23:3a:51:7e:ed:
                    df:ee:b4:f4:c4:e4:3f:3c:ad:ea:24:8d:e9:cb:43:
                    f6:37:05:bd:0b:26:64:99:f5:e9:03:3a:a8:da:09:
                    7b:33:b0:c6:9d:9b:e5:0e:b1:f9:71:c6:57:35:d4:
                    d6:1a:14:09:20:ca:81:96:31:8d:4f:a2:91:04:e3:
                    84:39:14:f1:f3:17:0f:f1:6d:1a:ba:43:e5:94:2b:
                    12:1d:05:48:3a:ae:0e:85:4d:ac:f0:2e:09:7b:99:
                    57:a1:6c:68:7d:e0:79:d6:50:4f:9a:ba:70:30:41:
                    00:27:f2:e1:88:31:f0:69:ee:0d:8b:81:23:2c:94:
                    fa:63:6b:d1:ab:94:0c:47:db:8c:00:39:c0:14:e5:
                    da:b8:c0:70:65:42:93:3c:50:95:76:35:8f:73:d6:
                    85:de:ff:04:d6:92:ab:49:10:7f:ef:5c:2a:4f:25:
                    20:03:a5:85:eb:48:b4:0f:d6:bb:a1:be:d7:cb:fa:
                    53:bc:70:48:d3:d1:87:8f:97:76:12:19:7f:7e:fc:
                    61:ad:c9:2f:b8:26:34:52:a4:94:52:19:52:61:4d:
                    5a:4d:47:b9:9c:35:84:eb:39:22:f6:57:87:16:9f:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:4B:BA:98:28:6A:2E:8C:22:E1:80:A5:88:CC:6F:CB:9C:D8:23
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:43:fb:2c:f0:ab:7f:e0:f6:8b:37:40:fd:3a:5f:05:d6:45:
         44:04:19:44:e5:69:49:34:3f:b1:75:00:65:75:e1:48:58:7d:
         04:7b:83:20:65:98:41:94:17:ca:6e:57:63:6b:4c:2c:de:b1:
         c5:a0:79:44:84:cb:c5:35:47:eb:26:b5:8e:2a:f6:1a:86:0f:
         10:0e:dc:ce:51:55:7b:cd:50:fd:b5:6f:93:9d:23:3b:55:1a:
         6e:65:8c:fe:c1:c4:15:a3:34:c8:07:5c:f1:7f:ad:1e:a8:72:
         df:a3:fd:72:11:02:f8:63:de:49:71:0b:ad:67:63:70:9f:1a:
         e7:b8:47:af:68:9b:bc:27:bd:24:65:8d:79:f7:bb:27:c2:02:
         33:28:d4:2e:e6:a7:76:5a:63:30:c3:90:b5:f0:02:79:52:8c:
         b3:f6:5b:33:1f:16:97:78:14:e1:f2:1f:1a:18:92:e3:8c:3f:
         5e:b0:b3:57:f1:95:79:5b:97:40:b4:16:8e:f2:6a:10:93:b0:
         90:5e:18:ad:5f:f4:54:5f:54:16:a0:ea:bf:7e:31:23:85:a2:
         56:5d:61:48:36:af:34:bb:e8:1c:64:ed:75:55:5e:1e:23:c4:
         a0:0e:82:1d:f1:df:32:16:41:ad:30:27:0d:e8:07:3a:a6:b2:
         bb:16:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:21 2025 by rpki-client