Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
File:                     LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft (raw, json)
Hash identifier:          jSOfXtsOxtyJjTk6Tve/VzPmtoJXrv/v4Ld+R6yeEnA=
Subject key identifier:   25:25:FD:62:94:1F:2C:96:16:CC:CC:D4:94:5B:30:D6:3B:22:05:FD
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Certificate issuer:       /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial:       01965BA80A6BB3BFF6AB2F96C0B1648BB2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
Manifest number:          1507
Signing time:             Tue 22 Apr 2025 04:01:01 +0000
Manifest this update:     Tue 22 Apr 2025 04:01:01 +0000
Manifest next update:     Wed 23 Apr 2025 04:01:01 +0000
Files and hashes:         1: 1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa (hash: Bmj7Dd8JxoYoJUgJkT98vzeeRsbATtejXxg70Xp0XBw=)
                          2: LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl (hash: gJ6Ylj92cXwLx3oCjAO3UeFAD0QrrUNHZmv49KSycgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:a8:0a:6b:b3:bf:f6:ab:2f:96:c0:b1:64:8b:b2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
        Validity
            Not Before: Apr 22 04:01:01 2025 GMT
            Not After : Apr 23 04:01:01 2025 GMT
        Subject: CN=2525fd62941f2c9616ccccd4945b30d63b2205fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:05:05:6d:90:41:c3:81:71:f0:db:2b:9c:
                    22:97:e9:96:d1:81:66:c3:c1:0e:1a:6d:8a:8f:76:
                    1a:f3:00:03:1a:d7:03:7b:8a:e8:51:72:3c:69:40:
                    ee:12:ef:99:e3:a6:6e:30:69:36:73:2a:bb:72:59:
                    7c:f6:f7:81:ff:75:c0:a5:e5:eb:cf:2c:5a:e7:c2:
                    b8:b4:98:2f:a7:b8:88:64:65:8c:79:8b:0f:01:46:
                    f3:5b:3d:05:16:0b:ea:d4:f9:db:67:5e:b0:c4:bd:
                    e0:95:d4:55:24:d5:d4:6e:77:72:30:95:c9:9a:59:
                    0e:23:4a:f7:13:91:0a:47:7f:b6:bf:9d:72:e8:7f:
                    ab:c1:aa:c8:00:e8:16:c1:cb:c3:53:99:ad:bb:f2:
                    88:7d:4a:fa:73:1d:75:50:97:86:89:47:b0:9a:1d:
                    20:6f:ca:3c:48:0f:8a:5e:61:0e:92:ca:5d:4c:7a:
                    04:06:57:71:cb:10:90:64:70:3b:a4:3e:bc:29:a6:
                    ea:d2:0b:3e:f7:0b:fd:66:b4:9e:28:6b:5d:93:23:
                    43:2f:c1:0e:4a:46:12:c9:20:1e:98:7a:82:44:21:
                    d0:1f:76:27:0a:8b:01:f3:17:31:d3:c3:f0:15:c0:
                    e9:d2:9c:51:9d:1a:5c:b7:07:60:12:24:83:8a:fc:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:25:FD:62:94:1F:2C:96:16:CC:CC:D4:94:5B:30:D6:3B:22:05:FD
            X509v3 Authority Key Identifier:
                keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:df:53:c9:7d:2e:72:ab:fd:03:0b:b3:a6:26:a8:62:17:
         80:f8:6f:7c:d8:06:41:62:df:f6:a5:c7:55:73:a4:ae:f4:0b:
         1d:33:33:65:7a:e5:77:8b:a8:44:da:eb:eb:80:ac:5d:a3:ad:
         f9:13:99:47:91:5f:c4:5a:a4:18:62:75:ca:63:a3:31:a8:27:
         fd:c0:59:00:80:8e:81:e1:ca:94:99:67:f4:2f:59:0e:15:a3:
         c7:90:83:b8:94:21:c9:ad:50:db:e7:be:7b:b6:5f:be:8e:a3:
         c2:6e:ab:1b:f4:f9:70:9e:7a:4e:f9:a6:18:2e:6d:51:91:f6:
         bc:7e:e4:bb:e2:fa:a7:50:50:98:74:f8:b4:4a:10:e8:2b:4f:
         b5:06:ff:02:79:3c:b3:e6:b0:30:95:2d:e7:13:ef:a7:c8:c8:
         b6:38:6e:a4:37:95:d8:3b:58:cd:26:14:fb:d7:40:32:fe:58:
         61:2a:d8:1f:60:ed:14:b1:9f:12:c0:3b:d3:f2:8a:d5:27:b1:
         fd:62:1c:33:bf:ae:b0:a1:bc:86:75:d8:5a:0a:c2:94:8d:cc:
         b8:a2:04:c7:9b:f5:81:3f:bc:55:a4:19:79:83:4d:70:c6:60:
         5e:50:49:43:80:8c:3f:3e:16:1b:14:24:ae:95:cf:f2:3e:c2:
         0a:6c:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:36 2025 by rpki-client