Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File:                     Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier:          y4omaoRm/kuLzQQgS+d1omIHBqc8ISerx7uPmJW0SGM=
Subject key identifier:   9B:CB:7E:22:7D:3A:A1:C7:02:65:B2:FA:70:83:6B:14:22:EE:D7:BA
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer:       /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial:       0194C38859950005511FB104AEA05261629C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number:          088D
Signing time:             Sat 01 Feb 2025 22:01:20 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:20 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:20 +0000
Files and hashes:         1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: 08+TlIXvPnxQGtdC5MNsTEZo4FwOEbDd1YJhGdrg/+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:59:95:00:05:51:1f:b1:04:ae:a0:52:61:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
        Validity
            Not Before: Feb  1 22:01:20 2025 GMT
            Not After : Feb  2 22:01:20 2025 GMT
        Subject: CN=9bcb7e227d3aa1c70265b2fa70836b1422eed7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:63:41:fd:be:0d:f4:a0:59:69:a0:fe:83:
                    80:90:f1:60:c3:59:b9:ed:1f:2b:6a:74:c8:b9:1b:
                    12:99:c6:45:70:df:59:75:d5:f1:c0:f0:d4:71:19:
                    0b:fa:d2:58:25:50:37:ba:83:79:78:6c:ae:df:91:
                    15:f7:2e:16:b4:d6:cb:c6:a6:dd:6c:ed:77:b8:7b:
                    45:25:1a:3b:f5:42:9c:a3:aa:0c:a4:1f:45:b1:17:
                    b7:01:fd:d6:c6:cf:cf:6f:1f:72:3c:69:08:66:57:
                    e1:63:1d:b2:98:15:74:97:78:53:24:76:84:14:26:
                    71:ba:db:87:23:2c:8c:3b:bd:17:11:c0:9d:51:f6:
                    a4:9d:ee:95:24:9e:e5:20:df:c5:25:87:3c:ec:b5:
                    d9:32:1f:ad:0a:50:3d:69:45:01:4a:56:9b:29:43:
                    fc:6d:51:81:2f:e0:83:a7:4f:1c:f4:85:3a:1c:74:
                    e3:2b:e5:d2:8e:21:84:f6:32:52:cd:8f:f1:c1:b1:
                    fc:2a:2b:9b:ac:60:5a:8f:4c:ef:ed:14:a2:e9:7a:
                    87:22:01:74:af:46:d8:f3:6d:99:ea:b6:1d:b0:23:
                    a8:5f:2a:aa:66:63:6a:1e:e7:08:87:52:da:00:b7:
                    89:03:ca:35:94:22:6c:26:39:da:56:67:c8:c0:18:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CB:7E:22:7D:3A:A1:C7:02:65:B2:FA:70:83:6B:14:22:EE:D7:BA
            X509v3 Authority Key Identifier:
                keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:13:63:95:28:56:42:5d:c9:fc:f9:5d:d3:c1:00:f6:28:
         92:14:8b:cd:b8:82:a0:7e:ad:40:6c:6f:d5:f8:42:c7:5a:9a:
         f0:63:26:d4:14:a2:43:c5:1f:93:51:88:fe:f4:d7:82:fa:4f:
         89:99:f6:c1:24:b3:14:f0:b8:ce:3b:63:6a:20:27:5d:b6:eb:
         47:91:78:b4:f9:4e:7e:cc:33:e2:d6:28:94:77:83:7b:b8:43:
         14:34:b5:c1:cf:a3:0e:ec:ac:65:6a:f1:c8:56:cb:2c:0e:87:
         99:c2:56:7d:6a:db:9f:9f:97:62:14:db:39:16:de:8d:7a:54:
         f3:50:41:80:8a:c5:32:84:28:3e:ad:78:e9:8d:c3:59:25:97:
         f2:62:8f:88:3a:82:5d:6d:ce:62:47:d6:c6:1f:57:57:ca:66:
         b4:f5:3b:53:5a:14:e0:4c:34:46:8b:6a:a0:62:64:24:cf:f3:
         56:b7:7b:9f:51:df:08:ab:77:78:85:f4:52:60:05:10:6b:52:
         db:db:e9:8b:74:1b:33:89:01:e6:72:18:0c:fb:fc:fd:3a:a5:
         9a:d8:0e:d8:af:fa:21:bc:e0:25:ce:b5:ce:53:c0:bc:65:03:
         f4:42:ad:16:51:2a:33:f5:ff:b0:28:6f:82:b4:a4:21:5f:a5:
         b9:c8:26:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiFmVAAVRH7EErqBSYWKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy
ZDA0MzUwHhcNMjUwMjAxMjIwMTIwWhcNMjUwMjAyMjIwMTIwWjAzMTEwLwYDVQQD
Eyg5YmNiN2UyMjdkM2FhMWM3MDI2NWIyZmE3MDgzNmIxNDIyZWVkN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XRjQf2+DfSgWWmg/oOAkPFgw1m5
7R8ranTIuRsSmcZFcN9ZddXxwPDUcRkL+tJYJVA3uoN5eGyu35EV9y4WtNbLxqbd
bO13uHtFJRo79UKco6oMpB9FsRe3Af3Wxs/Pbx9yPGkIZlfhYx2ymBV0l3hTJHaE
FCZxutuHIyyMO70XEcCdUfakne6VJJ7lIN/FJYc87LXZMh+tClA9aUUBSlabKUP8
bVGBL+CDp08c9IU6HHTjK+XSjiGE9jJSzY/xwbH8KiubrGBaj0zv7RSi6XqHIgF0
r0bY822Z6rYdsCOoXyqqZmNqHucIh1LaALeJA8o1lCJsJjnaVmfIwBhMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvLfiJ9OqHHAmWy+nCDaxQi7te6MB8GA1UdIwQY
MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt
NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl
LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtgTY5Uo
VkJdyfz5XdPBAPYokhSLzbiCoH6tQGxv1fhCx1qa8GMm1BSiQ8Ufk1GI/vTXgvpP
iZn2wSSzFPC4zjtjaiAnXbbrR5F4tPlOfswz4tYolHeDe7hDFDS1wc+jDuysZWrx
yFbLLA6HmcJWfWrbn5+XYhTbORbejXpU81BBgIrFMoQoPq146Y3DWSWX8mKPiDqC
XW3OYkfWxh9XV8pmtPU7U1oU4Ew0RotqoGJkJM/zVrd7n1HfCKt3eIX0UmAFEGtS
29vpi3QbM4kB5nIYDPv8/TqlmtgO2K/6IbzgJc61zlPAvGUD9EKtFlEqM/X/sChv
grSkIV+lucgmqw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:49 2025 by rpki-client