Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
File:                     LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json)
Hash identifier:          jkFmVZNm0z5r7zQfoqKrofYh506czUsMh3KmzWpJpyM=
Subject key identifier:   35:15:F1:5B:2E:D7:FE:7A:AE:C1:47:63:13:BC:CD:A5:3F:23:14:FA
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Certificate issuer:       /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial:       019616C6F0F4500627C208C002AC2857CF51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
Manifest number:          0BC4
Signing time:             Tue 08 Apr 2025 19:00:58 +0000
Manifest this update:     Tue 08 Apr 2025 19:00:58 +0000
Manifest next update:     Wed 09 Apr 2025 19:00:58 +0000
Files and hashes:         1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: i68aTZhZhl+7Qujljjv8M7Ow8MrTdzA9j4hmDFEcSpM=)
                          2: RfAA1xaR3Se-RvvvQKJJ2gMoa-w.roa (hash: ZjUwK6nsqDf3RG0U3GrfbUxp0iL0zaNbRBEGccx3Ch0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:c6:f0:f4:50:06:27:c2:08:c0:02:ac:28:57:cf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
        Validity
            Not Before: Apr  8 19:00:58 2025 GMT
            Not After : Apr  9 19:00:58 2025 GMT
        Subject: CN=3515f15b2ed7fe7aaec1476313bccda53f2314fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:c7:d8:b0:3b:ee:64:06:10:a3:da:02:6e:
                    90:d5:50:5f:d6:42:c4:e7:10:31:58:18:5c:26:cd:
                    31:e1:6f:7b:a4:b8:18:30:25:92:56:e2:1f:66:60:
                    c6:22:0e:02:f8:ed:f4:2a:aa:00:af:9b:5e:d2:08:
                    12:6c:fe:94:90:76:35:d1:b2:fc:5b:d3:9a:17:76:
                    14:2c:2a:f6:73:63:94:a0:2e:25:08:48:95:c7:a0:
                    54:6c:f8:56:f7:b2:f6:3d:04:6b:88:b6:4a:11:24:
                    34:26:28:1e:36:62:95:e1:e3:6d:bc:84:4f:ab:bc:
                    33:88:b6:88:c8:80:80:4a:e5:4a:46:23:ce:2e:25:
                    32:43:43:25:33:0c:12:f6:86:7d:77:47:6c:d4:06:
                    32:c3:64:56:e2:65:00:f3:3f:14:7c:2d:0f:b9:e5:
                    5d:a1:eb:f2:f7:5b:68:d2:df:e3:9c:8e:08:64:7a:
                    ca:18:7c:8f:40:d9:d7:1c:8f:58:24:b0:fc:34:67:
                    d6:74:9f:5f:ae:1c:74:76:ac:68:b5:c3:bc:55:79:
                    c5:52:5c:9c:d5:7c:c6:5f:06:ca:e8:eb:3d:06:db:
                    bd:64:58:d6:25:af:69:ea:1e:cc:d2:48:6f:aa:3f:
                    bd:71:d9:22:d5:db:00:ac:b0:83:69:88:a8:8e:68:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:15:F1:5B:2E:D7:FE:7A:AE:C1:47:63:13:BC:CD:A5:3F:23:14:FA
            X509v3 Authority Key Identifier:
                keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:d7:b1:8d:b5:14:32:6e:0c:35:ea:39:34:ab:fe:b7:92:
         f8:76:27:9b:1f:c6:8a:a6:26:46:ec:95:42:6a:a7:6d:9e:81:
         d6:ec:17:54:59:a6:a7:0a:8c:4d:99:69:06:ed:d8:12:60:6b:
         61:b0:98:10:a4:be:a8:e3:85:55:f8:d8:b6:f0:e2:5a:f7:38:
         b1:0d:89:63:32:4e:c8:82:f8:7b:ee:b6:ec:58:5a:f5:45:ca:
         0a:3f:06:18:3b:06:eb:e3:28:e8:f6:75:ca:50:37:63:b7:99:
         d7:c3:bb:19:f6:94:95:7f:ad:a9:ab:88:a2:05:0f:88:ac:d1:
         51:d3:8d:03:8f:8b:02:2f:e4:1a:97:21:43:89:a8:23:b4:52:
         32:55:cb:0b:ec:ea:b2:a1:bc:ea:61:15:96:e4:ed:0b:63:6a:
         cf:94:0a:50:e2:8c:af:6a:d7:d8:5f:d5:f4:56:5e:95:d4:3c:
         66:d5:65:1d:28:de:1e:18:24:2c:34:98:b8:f5:07:fc:57:57:
         f9:6c:67:9e:87:90:a2:f4:1a:29:48:a7:2b:b0:a6:23:ae:71:
         b5:8d:6a:a1:ae:f2:fc:78:3a:42:72:65:dd:82:13:67:19:33:
         4b:ef:5a:22:9b:c2:84:95:bc:b0:b5:a1:be:d8:91:93:c3:e9:
         12:49:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:46:14 2025 by rpki-client