Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File:                     l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier:          s99vGmsj0iMAr7SdpWmup4rIfZEfTSX7/qQgBVyghnU=
Subject key identifier:   56:95:AF:47:22:4D:89:E0:CC:E2:8C:0C:BA:F8:B2:EB:20:AD:3E:E5
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer:       /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial:       0196384074DF0B0E4CF97ECF4CEA8413C57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number:          04F3
Signing time:             Tue 15 Apr 2025 07:01:10 +0000
Manifest this update:     Tue 15 Apr 2025 07:01:10 +0000
Manifest next update:     Wed 16 Apr 2025 07:01:10 +0000
Files and hashes:         1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: jE7Ysn4llqVijpY5nFARIvI8vVjtlEAYg6GDw9pFNo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:40:74:df:0b:0e:4c:f9:7e:cf:4c:ea:84:13:c5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
        Validity
            Not Before: Apr 15 07:01:10 2025 GMT
            Not After : Apr 16 07:01:10 2025 GMT
        Subject: CN=5695af47224d89e0cce28c0cbaf8b2eb20ad3ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:f3:45:b5:dd:00:7c:33:d6:65:30:3e:d2:
                    f0:c6:9a:f0:83:89:8a:b5:33:77:bc:7f:9e:4d:4a:
                    6f:f2:d5:6f:c2:a0:ba:4d:93:c2:e6:63:20:f2:25:
                    b3:ee:8b:af:9b:2e:ee:ac:03:e2:2a:4f:52:7f:59:
                    60:57:a0:73:5d:5b:df:ff:4f:25:e6:de:aa:48:8a:
                    14:dc:87:03:dd:43:f4:e5:39:92:ee:71:ec:9a:ef:
                    c8:fc:65:49:4a:0d:48:81:91:65:b6:24:87:60:31:
                    62:b4:93:e8:16:f1:2d:0c:e8:f0:e6:31:e0:a7:8b:
                    9b:35:32:64:94:e5:76:d0:28:f8:1e:2a:0a:ba:49:
                    66:1f:b6:4d:34:fc:3d:79:7e:ca:5c:db:d7:72:27:
                    d4:6e:ae:ac:86:35:9f:4f:d1:83:e0:95:eb:89:d9:
                    cf:ab:f7:9b:67:cc:f8:36:c2:38:7b:a8:06:f4:5d:
                    3c:09:ed:b4:9b:49:14:d4:f8:e9:6e:3c:31:3d:c3:
                    c0:bb:ec:26:aa:30:f6:71:01:b3:05:e9:d1:12:92:
                    c2:bc:c9:55:c7:e7:10:35:e7:51:ea:20:09:1a:76:
                    65:a3:bd:5d:c1:27:38:4e:ae:0c:ef:af:b6:7e:7b:
                    e4:d7:1b:0a:85:31:16:a1:89:a1:dd:40:01:98:c3:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:AF:47:22:4D:89:E0:CC:E2:8C:0C:BA:F8:B2:EB:20:AD:3E:E5
            X509v3 Authority Key Identifier:
                keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:b3:cf:aa:e3:4e:22:06:cd:af:3b:96:b5:2c:50:e0:4a:
         21:f4:20:1c:60:90:0a:0b:04:be:ab:c1:51:1a:2f:d4:04:77:
         d0:7f:3e:37:0b:a2:7f:3d:a5:f5:0c:90:67:76:79:b9:61:32:
         8b:f2:77:f0:e3:4f:43:2b:b6:43:be:5e:b8:cb:69:c1:ec:d2:
         04:95:45:5f:37:38:52:6e:da:68:13:90:58:77:40:ce:5b:da:
         4e:66:44:ae:e1:72:18:4c:b3:74:d6:b7:97:5f:79:3c:98:bd:
         5a:aa:59:30:7d:0e:1f:43:9d:c2:f2:85:39:c1:8d:ac:9f:d8:
         01:61:11:7c:d8:6f:4c:57:08:70:b5:4d:31:0e:2f:a2:fd:7f:
         46:86:cb:97:e5:d4:24:da:78:0a:9c:fa:c7:fb:d8:d2:64:b3:
         f5:61:14:8a:c3:ec:c3:41:11:96:a5:c1:f9:7d:28:40:59:86:
         2f:06:65:ab:ac:40:04:29:fd:c0:f5:16:62:94:53:30:1a:cb:
         5e:ad:0d:40:26:61:03:2e:0b:20:8b:8e:92:96:3d:b4:b1:98:
         91:bf:4f:a7:65:aa:c0:dc:3b:9b:82:e9:6d:a7:23:22:b8:9e:
         4f:99:e7:ab:6b:9d:d8:76:8e:3c:64:15:82:d4:00:c9:6f:d2:
         ff:63:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:55:08 2025 by rpki-client