Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          Th0+HRIgMRA6BR+pLHNbLmMChwRkb1Al1u7x6wC8ESM=
Subject key identifier:   D8:23:74:09:17:32:7A:1B:05:30:4D:75:03:BB:43:06:AA:CA:59:39
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       01958F6130F2E7218076AA86B763C76FCD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          1061
Signing time:             Thu 13 Mar 2025 12:01:06 +0000
Manifest this update:     Thu 13 Mar 2025 12:01:06 +0000
Manifest next update:     Fri 14 Mar 2025 12:01:06 +0000
Files and hashes:         1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: XKSfKsTIiQylpVWuJ9ymZX3UkVlrwr5d2tYRzkW5Big=)
                          2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:61:30:f2:e7:21:80:76:aa:86:b7:63:c7:6f:cd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Mar 13 12:01:06 2025 GMT
            Not After : Mar 14 12:01:06 2025 GMT
        Subject: CN=d823740917327a1b05304d7503bb4306aaca5939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:90:eb:da:53:f0:e2:44:bf:79:26:43:8f:
                    69:0e:b6:62:6c:9e:35:d7:cf:f7:ed:08:db:f9:fb:
                    57:cb:9e:78:1f:76:7b:f6:db:33:40:7d:5f:98:0a:
                    6a:ef:10:ba:8f:a5:a4:8c:9a:d1:59:be:a7:2f:ac:
                    48:8d:ba:b2:d4:54:d0:2b:1c:e0:dc:fc:63:88:9c:
                    8c:7a:bb:d6:a1:93:89:1b:39:ce:b8:8a:5c:b0:1a:
                    a1:66:fc:b0:3e:3b:7a:6a:e7:24:86:cf:db:73:a5:
                    78:cb:55:f0:79:3a:68:6c:d0:7d:fe:37:61:ea:13:
                    18:e8:61:e8:19:ce:08:15:90:51:a1:08:a3:ab:ea:
                    10:a8:66:0a:8c:b5:66:6f:f6:23:46:fd:77:f7:28:
                    db:66:02:a3:34:1d:92:ea:71:13:61:18:13:b3:32:
                    d8:83:45:aa:68:d6:c4:3d:06:07:de:85:83:d7:ab:
                    4b:21:d8:30:2d:e9:25:36:60:6f:ae:1a:4e:58:29:
                    06:0f:2c:d0:9e:8e:c7:09:93:af:bf:36:c2:69:05:
                    ea:df:91:a7:42:5a:b1:5b:d7:79:42:24:7b:d6:c3:
                    2e:85:42:96:ed:35:8a:c4:8f:11:b8:e7:16:48:22:
                    8d:68:18:9f:2f:fb:6f:53:14:f6:41:b2:ba:b2:1c:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:23:74:09:17:32:7A:1B:05:30:4D:75:03:BB:43:06:AA:CA:59:39
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:b1:c3:7e:df:89:b4:e1:d2:06:94:10:9d:b6:67:2a:d4:
         59:9d:d4:ed:e9:0e:1e:f5:b1:30:28:04:07:1f:1e:1a:75:8b:
         c2:1e:8e:6e:60:fa:a6:58:37:cb:1e:76:00:de:90:26:6c:dc:
         af:ad:d6:92:c6:92:1a:a8:60:b4:65:d7:fc:60:a6:17:10:f7:
         7f:7b:4a:2b:a6:ec:43:50:fa:31:0a:8c:f7:1b:e5:ea:c3:4a:
         ac:bf:78:a4:90:1e:f6:63:1c:b2:49:bd:9d:3e:21:25:1d:ff:
         f0:6a:a3:af:0e:cc:36:8b:4b:e1:c4:ac:c7:d8:fe:98:0d:aa:
         5b:de:61:98:28:ca:19:be:00:d5:bf:95:fc:68:e6:df:38:ce:
         24:eb:bf:2e:3b:d9:27:b3:7f:02:cb:3d:20:32:87:96:ec:00:
         36:57:c2:79:02:1c:11:fd:04:e4:3f:48:b4:ed:e0:95:e3:6c:
         7b:69:ec:21:2b:2e:26:6e:f2:42:f6:17:73:25:3b:87:36:dd:
         46:2c:2d:94:b8:99:fc:c7:53:2b:16:50:ab:45:ab:2d:ff:0b:
         79:33:59:9c:79:34:3c:6a:94:43:78:71:eb:41:56:42:48:a5:
         9a:95:44:d8:dc:88:cb:09:99:4e:4a:5b:e5:e8:8d:b7:3f:9d:
         b9:b8:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:33 2025 by rpki-client