Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File:                     LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier:          TXwUzum3toCl2J/rEYL9ZKPgQzbsqb7mmFCrxCTo8Ks=
Subject key identifier:   52:A5:54:E7:DE:9F:6A:16:D7:5D:5D:EE:B1:75:26:13:BA:CC:9C:FA
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer:       /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial:       0195127E962B7344D82AE6721F2040068082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number:          1459
Signing time:             Mon 17 Feb 2025 06:00:40 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:40 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:40 +0000
Files and hashes:         1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: GjzU4MpSz0a6Zm96CimRe0aPRMdbAdz1D0lBwFYauA0=)
                          2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:96:2b:73:44:d8:2a:e6:72:1f:20:40:06:80:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
        Validity
            Not Before: Feb 17 06:00:40 2025 GMT
            Not After : Feb 18 06:00:40 2025 GMT
        Subject: CN=52a554e7de9f6a16d75d5deeb1752613bacc9cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:9a:69:d6:36:9f:8d:e7:46:fa:d5:69:37:
                    8c:bf:c9:f7:03:01:4b:92:ab:17:3a:99:f8:77:54:
                    a0:2f:19:6a:47:86:8e:e0:c1:cd:66:06:8c:f1:05:
                    a6:96:57:b7:71:ef:e6:b6:5e:0d:a6:4e:e1:ff:3c:
                    f8:d4:25:e9:f4:5d:f7:77:27:a2:c7:ba:0f:ec:93:
                    3c:49:cb:96:a1:a0:8b:29:7d:08:e5:e7:7d:04:f9:
                    9a:ed:44:2f:ee:25:c0:a2:f1:80:cb:f6:a8:31:85:
                    d7:f4:33:29:ae:65:1e:8d:55:00:16:73:9f:63:93:
                    ef:3b:9a:fd:c5:45:cc:0b:dc:81:a8:86:27:57:41:
                    78:b4:66:b8:8d:0b:3c:85:13:88:a9:dc:f0:dd:57:
                    19:cf:8f:c6:0b:fc:b3:e0:7a:0f:a2:68:d7:f4:05:
                    37:07:9c:0e:58:eb:25:61:62:ad:d1:63:9a:61:6b:
                    bb:04:63:88:fd:48:42:98:ac:38:09:1b:48:14:b7:
                    76:cb:27:a7:a5:a4:c5:81:74:47:bc:7a:d2:a3:a8:
                    76:7b:1b:d7:af:1b:76:d0:9b:a3:2e:f7:97:56:2a:
                    58:f6:38:10:28:82:a9:ea:69:bc:9f:89:f8:b7:06:
                    2b:14:af:9a:2a:1b:70:82:c5:92:98:e0:92:4b:01:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:54:E7:DE:9F:6A:16:D7:5D:5D:EE:B1:75:26:13:BA:CC:9C:FA
            X509v3 Authority Key Identifier:
                keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:f2:a2:55:ff:59:05:20:9c:30:50:00:40:43:29:21:d7:
         22:fe:04:32:df:68:29:bf:f1:d6:f3:81:21:20:2a:72:ac:f9:
         45:17:a5:5a:3b:c9:6e:42:68:6e:dd:07:ee:30:ca:6f:2d:ea:
         48:81:94:b7:3a:ec:54:ef:54:5b:50:d8:77:0f:19:5d:e4:41:
         b6:75:63:ab:b2:b3:ac:cc:57:fc:31:6a:1f:32:65:65:b6:d3:
         54:80:b0:bb:ea:ea:69:b9:d2:c9:53:4e:98:28:01:d7:8f:99:
         2b:f6:b6:0e:96:fe:11:de:76:62:db:04:b9:c3:61:2a:68:9d:
         0e:4d:35:82:5b:b2:54:06:51:f8:56:fd:56:88:a1:21:cd:c7:
         50:12:2e:c6:72:ff:4d:62:c2:af:d2:2e:41:f1:35:5e:0b:97:
         2a:a4:79:91:7f:9b:c4:69:27:32:5a:46:81:28:7a:fa:bc:8f:
         3f:72:d7:90:fa:f3:5e:aa:6b:c8:73:15:e8:d0:76:8d:7c:db:
         21:58:e0:0c:17:01:69:21:22:08:d8:e5:85:96:93:85:e6:cc:
         1a:8d:96:dc:39:55:17:2d:7e:40:c2:4f:a3:9d:12:ae:2e:ca:
         d3:23:76:cc:d3:b6:85:03:16:cc:2e:38:fa:17:48:95:0d:18:
         6c:e1:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:45 2025 by rpki-client