Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          ssYoccuctpIK4qU+8KJ65NPSfgH49T1aGXwL7ukrEt0=
Subject key identifier:   D5:C4:9F:95:CC:C1:CA:36:88:17:FE:66:FE:EB:C9:38:C1:8B:96:D5
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       019654C9E5A99C26C330666CBC1BD2CB4F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          148F
Signing time:             Sun 20 Apr 2025 20:00:39 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:39 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:39 +0000
Files and hashes:         1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: 5JOiYFl/pP3gXlo/G6xQOdh5AphEN2tWHT1J1nnSuR8=)
                          2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:e5:a9:9c:26:c3:30:66:6c:bc:1b:d2:cb:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Apr 20 20:00:39 2025 GMT
            Not After : Apr 21 20:00:39 2025 GMT
        Subject: CN=d5c49f95ccc1ca368817fe66feebc938c18b96d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:fc:1b:b2:3f:7b:19:5a:b5:fc:36:4c:0e:
                    48:d6:ba:4b:26:7d:03:82:97:f4:12:36:a1:5d:c2:
                    46:f1:f0:13:7e:9c:92:b0:0d:93:97:41:dc:25:32:
                    d0:47:d4:51:11:12:78:b3:b5:bb:7b:96:e2:d3:ec:
                    45:65:15:49:c1:4f:ee:58:39:a9:10:c0:5b:0e:fb:
                    8f:2f:8b:cf:f5:d0:3f:75:76:49:74:84:14:ba:86:
                    c8:ed:b9:a7:41:cc:ca:68:83:45:37:ea:96:56:03:
                    c3:4d:4f:cf:f7:56:2d:ac:b5:c1:9f:62:68:30:73:
                    e7:26:a5:8f:57:1d:62:71:c0:51:2f:30:bf:85:f3:
                    34:21:37:06:80:41:63:35:78:e5:9b:0c:22:da:7a:
                    45:ad:e5:1b:c8:c3:cc:b9:d6:2d:c1:30:83:cd:ac:
                    7f:2d:19:1f:20:ab:14:8e:73:30:60:d4:5b:a2:44:
                    bb:20:1a:4f:75:7e:f7:63:54:70:a6:5c:48:ef:bd:
                    66:9a:2e:47:3c:d9:a2:f0:0a:81:db:cf:23:6b:af:
                    89:3f:5e:89:40:83:c7:07:10:2a:89:a9:98:17:73:
                    3d:c7:61:77:12:63:bc:be:77:30:0b:65:68:45:40:
                    f0:d0:bb:e2:cb:ab:70:21:27:14:0e:fb:89:d2:ee:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:9F:95:CC:C1:CA:36:88:17:FE:66:FE:EB:C9:38:C1:8B:96:D5
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:67:e3:57:7a:97:91:26:d7:f4:d1:23:3b:90:03:22:36:1b:
         e9:f0:48:91:0a:67:7f:f3:60:ec:4f:95:d4:8c:06:0c:15:9d:
         81:0c:de:3b:39:7f:e0:c3:e1:ed:9a:b6:af:34:39:22:94:03:
         1f:0d:85:e7:62:98:82:f6:93:5b:18:0f:18:58:78:b5:c9:d9:
         40:05:01:1e:e2:23:de:f6:ef:fb:16:31:c8:75:d8:dd:50:89:
         76:33:57:05:e4:dd:51:1b:84:62:e2:95:a5:9f:60:dd:26:d9:
         1f:30:13:f1:31:33:ee:3d:f5:ee:99:66:71:77:42:d1:34:20:
         b0:5a:22:9d:7d:4d:14:3f:34:15:f6:13:0c:62:33:5b:84:7f:
         94:86:f5:8b:33:3d:ba:e0:5d:97:2a:f0:ab:4c:9c:7c:dc:f4:
         3c:76:28:28:8c:c5:8f:f0:8a:5e:02:96:6d:17:0d:b3:ec:52:
         a6:6c:1b:79:4b:db:34:75:fa:32:e2:58:f4:eb:cf:78:54:b9:
         1b:8c:52:8c:83:14:03:37:3d:11:8f:92:44:97:fe:39:0a:14:
         c0:89:50:3b:b3:ae:4d:28:05:4b:29:a0:7f:20:a2:3b:24:15:
         c9:84:f0:63:f8:bd:fd:dd:27:7f:8a:0a:42:77:53:c2:4b:1f:
         38:2a:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:53 2025 by rpki-client