Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          J4iTHV46NVSZnB3Xk3AbLG6zdD/F7XJedn3wbKINEqo=
Subject key identifier:   90:BF:3C:97:2C:91:8C:38:C8:67:30:98:26:69:A2:70:C0:E4:F7:B5
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       019511D94A088A8CA08932B2082223F5FE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          0BC8
Signing time:             Mon 17 Feb 2025 03:00:07 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:07 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:07 +0000
Files and hashes:         1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: hj1an0d8+LgJn7o0QsdoNn67gk4relR31W0RFNFnuLI=)
                          2: iGsfjx7wUgPTFBTP6J6qWS2J20E.roa (hash: /8k5izhxQgLa6XPswwP3IlBsn6pR6yrQzIRpIxteS8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:4a:08:8a:8c:a0:89:32:b2:08:22:23:f5:fe:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: Feb 17 03:00:07 2025 GMT
            Not After : Feb 18 03:00:07 2025 GMT
        Subject: CN=90bf3c972c918c38c86730982669a270c0e4f7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:27:0c:2b:0a:04:f0:09:28:bc:23:da:e3:
                    41:09:30:46:f5:66:4a:92:b4:1e:1a:d6:d9:b9:cf:
                    58:ca:97:c7:7f:2e:ba:69:16:be:28:45:4a:c6:f5:
                    79:e4:0b:b2:65:53:91:d4:43:fa:d7:45:20:1a:ca:
                    3f:50:be:2e:43:65:27:7c:5f:1e:3b:0a:48:58:c1:
                    24:86:e5:ec:10:e5:29:5c:c9:81:e5:2f:14:c0:d9:
                    e3:a6:67:87:64:9b:59:8d:ef:e3:21:d6:80:26:53:
                    7f:bc:dc:18:b5:49:c7:f8:e2:ef:57:4d:e2:a8:d2:
                    db:d4:69:5f:79:0e:9f:c0:89:0e:ef:d4:ea:82:28:
                    95:c1:9e:0b:ff:3b:ac:6e:f2:3d:77:e5:8b:de:2a:
                    ff:5f:cd:30:a2:0a:39:ef:1b:9c:1e:78:0c:18:c9:
                    9a:b1:79:37:0a:c9:f1:5e:bb:08:92:66:1a:9b:7b:
                    20:cf:c4:36:26:cc:4c:ba:a3:a2:24:28:74:e6:ae:
                    aa:6f:4a:87:0d:7c:dd:9e:c1:1c:62:ea:07:ca:54:
                    70:11:42:2b:93:d1:97:05:18:6a:88:4a:30:77:56:
                    88:34:34:3e:26:70:2c:e2:ea:b7:7f:9e:c9:c6:9d:
                    e3:f9:0b:55:d5:ac:5d:a5:01:c7:6d:a6:b2:55:07:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:3C:97:2C:91:8C:38:C8:67:30:98:26:69:A2:70:C0:E4:F7:B5
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:c8:c9:a2:42:fe:6e:49:46:83:d9:4f:7a:91:e0:8b:8f:
         5a:63:00:15:7f:69:56:09:38:cd:bc:38:8d:bc:17:3d:04:e1:
         b9:f9:6c:5a:33:b5:ba:60:5a:6a:6c:ce:8d:ed:05:97:da:af:
         c3:33:16:06:79:4e:35:3c:5c:4b:a3:55:b5:40:ae:ca:62:9d:
         55:79:0f:68:d7:cf:9d:89:74:02:3c:5d:7d:05:ca:54:b7:4d:
         c6:d9:ec:d0:f3:e4:93:d5:93:b8:50:5c:ec:46:e1:06:e1:2b:
         ab:e5:e5:9f:0b:b4:ff:06:c2:ca:e2:f3:71:63:6c:c1:71:ad:
         1b:dc:bc:04:06:b0:c5:c7:a7:85:0c:99:ee:bd:ef:41:fa:52:
         e6:63:05:31:01:60:74:ea:2e:7f:9b:82:21:00:d8:be:bf:ff:
         ff:1f:1f:52:6b:32:7c:94:b5:18:38:df:98:9f:94:9e:8a:45:
         ec:b6:71:db:d3:d6:0a:cc:1f:bc:6f:a6:0c:ff:31:42:8e:1f:
         0a:22:8f:c1:fe:92:c1:63:32:76:f3:ed:32:c6:d2:8a:59:80:
         68:a7:26:55:3d:06:89:36:a3:d7:63:4f:60:68:d1:b5:1a:8f:
         51:f8:28:ea:9b:02:28:0c:fc:be:03:64:89:fd:0d:de:9c:4e:
         ce:68:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:30 2025 by rpki-client