Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File:                     LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier:          TQU+5V164OX6DpPbZBF3DHDffZ4eQF41N5ARrEjWdHQ=
Subject key identifier:   B1:FB:1C:DA:08:8E:47:A6:4D:64:7F:96:A8:DA:DC:25:E4:16:40:62
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer:       /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial:       018F866CBFD59ABBC7DAD4F579B41926FDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number:          0159
Signing time:             Fri 17 May 2024 12:00:24 +0000
Manifest this update:     Fri 17 May 2024 12:00:24 +0000
Manifest next update:     Sat 18 May 2024 12:00:24 +0000
Files and hashes:         1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: pnr5l1RJcx0nWSab5FwKeYEUV+fAfDZbi4WgA8sk7bU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:bf:d5:9a:bb:c7:da:d4:f5:79:b4:19:26:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
        Validity
            Not Before: May 17 12:00:24 2024 GMT
            Not After : May 18 12:00:24 2024 GMT
        Subject: CN=b1fb1cda088e47a64d647f96a8dadc25e4164062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:93:e0:5d:d6:b6:57:c8:d1:0e:90:fb:0d:
                    5c:af:0a:ed:52:2e:59:7d:56:7e:7a:24:0a:fa:78:
                    d0:76:e8:49:fa:1a:33:30:db:12:9a:73:ae:5d:e2:
                    22:7d:46:12:76:02:96:f9:2d:a4:bc:5e:be:2b:ad:
                    5a:08:1d:a4:20:c5:1c:d1:76:13:56:55:24:53:d9:
                    30:8b:18:c0:ac:2d:22:61:4d:c2:64:24:b3:a7:34:
                    ce:64:ac:74:e2:90:81:e7:c0:06:49:c6:47:07:e2:
                    ce:5a:3c:57:cd:de:a4:33:2c:e6:a5:4f:14:77:ba:
                    9a:29:de:0f:16:0b:97:83:c5:19:86:9e:fb:4b:fd:
                    4a:e4:93:13:f8:3a:27:39:44:da:9d:20:99:2f:64:
                    8a:2a:2c:91:43:d1:59:ac:23:97:ac:3c:9e:5d:16:
                    18:e2:d6:5d:c4:6c:ad:02:cd:8b:1a:3d:6d:8c:b0:
                    96:0b:4a:c5:ba:4d:68:89:d2:62:84:48:4d:b7:e0:
                    44:07:fc:66:50:a0:ab:f3:24:04:91:55:d2:33:1d:
                    68:b9:70:0d:3f:ca:91:f2:bd:5b:b9:4b:46:d5:2a:
                    67:d1:52:e8:7e:69:3e:ac:0e:03:83:dc:2a:a7:f0:
                    86:b7:28:16:a7:59:b9:9b:f2:7e:f2:0c:65:fe:cf:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:1C:DA:08:8E:47:A6:4D:64:7F:96:A8:DA:DC:25:E4:16:40:62
            X509v3 Authority Key Identifier:
                keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:73:51:5b:ce:ef:b7:a3:a2:a5:44:d9:24:64:f1:f2:aa:
         5a:d7:9c:e2:c5:9b:94:d2:1b:4b:44:bc:df:09:86:ca:4c:f4:
         c3:e1:66:f0:a9:f2:ad:26:31:c2:ab:62:23:6a:3c:75:10:2b:
         a1:00:7c:6a:9b:2f:03:f2:f5:07:f7:de:c0:07:e2:09:f3:fe:
         ef:5a:b6:5e:bd:3a:fb:09:31:00:53:5e:fb:f8:64:1b:3b:70:
         6d:df:f6:49:c6:a1:96:21:85:c5:06:b1:c1:cf:c2:82:1e:f3:
         15:69:f9:29:07:66:7a:01:f5:c2:1f:32:99:df:a0:6d:cd:46:
         29:19:18:70:eb:0d:bb:e8:42:e7:90:2e:42:8a:aa:c3:ec:ff:
         df:2f:ed:9c:6b:a0:32:3b:c3:f4:67:0f:1d:df:7b:58:da:da:
         4e:e6:37:06:08:64:67:87:88:76:89:89:cd:aa:1c:12:23:e4:
         d2:bd:bf:f8:54:24:81:ef:05:a6:56:ad:cf:7b:14:af:5c:42:
         52:36:f3:f2:7d:c6:26:7c:84:31:b8:31:46:c8:08:77:de:9d:
         74:7e:83:5c:1d:9e:8e:a1:34:8d:ad:01:34:ed:6e:c6:31:9f:
         e1:8e:d1:55:36:f4:2d:c3:47:b6:c1:03:96:8a:34:ed:57:43:
         c2:da:39:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbL/VmrvH2tT1ebQZJv23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTU0YzQ5Y2ZlNGM5NTliNjljOGFlMjY2ODMyNmYxMDVm
NjJiOWQwHhcNMjQwNTE3MTIwMDI0WhcNMjQwNTE4MTIwMDI0WjAzMTEwLwYDVQQD
EyhiMWZiMWNkYTA4OGU0N2E2NGQ2NDdmOTZhOGRhZGMyNWU0MTY0MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk2T4F3WtlfI0Q6Q+w1crwrtUi5Z
fVZ+eiQK+njQduhJ+hozMNsSmnOuXeIifUYSdgKW+S2kvF6+K61aCB2kIMUc0XYT
VlUkU9kwixjArC0iYU3CZCSzpzTOZKx04pCB58AGScZHB+LOWjxXzd6kMyzmpU8U
d7qaKd4PFguXg8UZhp77S/1K5JMT+DonOUTanSCZL2SKKiyRQ9FZrCOXrDyeXRYY
4tZdxGytAs2LGj1tjLCWC0rFuk1oidJihEhNt+BEB/xmUKCr8yQEkVXSMx1ouXAN
P8qR8r1buUtG1Spn0VLofmk+rA4Dg9wqp/CGtygWp1m5m/J+8gxl/s8SwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH7HNoIjkemTWR/lqja3CXkFkBiMB8GA1UdIwQY
MBaAFCylTEnP5MlZtpyK4maDJvEF9iudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgt
ZjIzZjI5Y2VmZWU2LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgtZjIzZjI5Y2VmZWU2
LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZZzUVvO
77ejoqVE2SRk8fKqWtec4sWblNIbS0S83wmGykz0w+Fm8KnyrSYxwqtiI2o8dRAr
oQB8apsvA/L1B/fewAfiCfP+71q2Xr06+wkxAFNe+/hkGztwbd/2ScahliGFxQax
wc/Cgh7zFWn5KQdmegH1wh8ymd+gbc1GKRkYcOsNu+hC55AuQoqqw+z/3y/tnGug
MjvD9GcPHd97WNraTuY3BghkZ4eIdomJzaocEiPk0r2/+FQkge8Fplatz3sUr1xC
Ujbz8n3GJnyEMbgxRsgId96ddH6DXB2ejqE0ja0BNO1uxjGf4Y7RVTb0LcNHtsED
loo07VdDwto5gg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:08:35 2024 by rpki-client on console-ams.rpki-client.org