Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File:                     LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier:          U7JsAhCuafl28I/QcNP52gdehvpGovmxnTJVbI7g59U=
Subject key identifier:   0B:75:D7:B6:44:F5:55:84:CD:89:45:61:27:5C:24:D4:F4:51:4E:C0
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer:       /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial:       01974AE835910B8B6F26BF7D4D9E18C835F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number:          1411
Signing time:             Sat 07 Jun 2025 15:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:21 +0000
Files and hashes:         1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: MC7cttHuS9h7o9yUBgsVf6UMrqI5svq+YF71RRWWo+c=)
                          2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:35:91:0b:8b:6f:26:bf:7d:4d:9e:18:c8:35:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
        Validity
            Not Before: Jun  7 15:00:21 2025 GMT
            Not After : Jun  8 15:00:21 2025 GMT
        Subject: CN=0b75d7b644f55584cd894561275c24d4f4514ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:c5:bb:d8:31:77:99:d5:09:8d:cf:44:1f:
                    76:a6:cd:1b:ca:5e:f2:8a:89:e6:fe:25:0f:21:74:
                    13:6e:6b:b2:bb:75:28:ab:6d:ca:fc:ef:b9:2b:c8:
                    74:97:23:e5:13:b8:bb:36:6b:ea:fa:bc:31:c4:c0:
                    2c:e6:2f:fb:f2:23:a1:ba:b2:86:89:3a:f6:26:92:
                    b4:5b:98:4d:31:5f:3c:7f:ca:60:b4:68:ff:48:39:
                    2d:1f:f4:3d:60:0c:80:fa:9e:cf:cb:82:67:eb:05:
                    7e:0d:33:a8:fd:ab:21:95:3d:d6:42:03:0f:df:94:
                    45:59:c1:ea:7e:64:19:e6:a5:40:f7:95:57:9b:65:
                    41:56:22:1f:ad:3f:65:c0:ef:13:0e:50:cf:5d:2c:
                    a2:e5:fe:94:62:d3:46:87:07:73:ec:e0:46:8c:b4:
                    2d:44:de:b2:7a:4e:53:7c:3d:08:12:59:f0:a4:e4:
                    74:d0:be:4e:3d:00:23:32:9f:39:f5:2e:08:aa:bb:
                    36:e3:c6:d2:b7:8e:c8:1a:c6:cf:46:59:0a:f9:74:
                    8d:7a:84:a3:bf:92:de:c0:1a:dd:f9:00:20:0b:b4:
                    a9:a2:17:74:00:8b:be:0b:33:c3:22:ea:c1:3a:e3:
                    17:a3:66:00:50:7b:05:c1:4e:e6:a0:be:92:7f:7b:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:D7:B6:44:F5:55:84:CD:89:45:61:27:5C:24:D4:F4:51:4E:C0
            X509v3 Authority Key Identifier:
                keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:70:ca:79:70:67:55:e0:4b:c9:18:72:47:03:3b:19:c0:
         fd:bc:47:c1:03:2c:ac:7c:fb:6b:df:81:f8:a2:43:97:56:81:
         39:6f:76:4e:6f:cc:60:89:0b:43:8b:ac:2d:15:06:30:7b:6e:
         99:da:c4:a6:46:f3:fa:06:dd:8d:a7:97:85:e7:f1:f5:01:51:
         7f:58:23:b1:74:be:82:f5:f6:e3:b6:14:65:e3:89:bf:ca:ad:
         eb:ef:21:ab:7b:8f:52:94:0b:3a:24:80:4f:b4:31:89:29:26:
         b8:f6:01:02:85:19:42:81:3b:17:15:74:1b:dc:8d:73:95:5a:
         8e:60:18:ee:99:0e:42:42:c5:b3:53:ff:3d:78:f1:b1:80:25:
         be:4e:b1:ff:51:d4:96:6c:93:66:6f:91:93:11:09:79:89:59:
         2d:f0:ca:66:ae:0e:c6:e4:d9:30:fc:09:2d:4e:00:f8:83:0a:
         44:0b:ad:97:98:3c:a4:a5:1c:61:1f:47:a8:98:3e:c0:6c:91:
         d9:ac:94:67:8f:aa:d3:4f:0b:c4:94:cc:23:72:50:c4:fe:ac:
         9b:de:0f:26:b0:3f:b0:bd:d5:7c:47:5d:8d:5c:9e:66:8f:83:
         c9:e3:b6:f7:8c:cc:5d:8a:39:e8:3d:f9:a7:ab:58:a3:50:ad:
         2a:9c:8f:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6DWRC4tvJr99TZ4YyDX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGMyMWNmZmE4MGI1YTFlNWNiZDYzMTkzMGU3ZmM1NWZk
ZGZjNDgwHhcNMjUwNjA3MTUwMDIxWhcNMjUwNjA4MTUwMDIxWjAzMTEwLwYDVQQD
EygwYjc1ZDdiNjQ0ZjU1NTg0Y2Q4OTQ1NjEyNzVjMjRkNGY0NTE0ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0arFu9gxd5nVCY3PRB92ps0byl7y
ionm/iUPIXQTbmuyu3Uoq23K/O+5K8h0lyPlE7i7Nmvq+rwxxMAs5i/78iOhurKG
iTr2JpK0W5hNMV88f8pgtGj/SDktH/Q9YAyA+p7Py4Jn6wV+DTOo/ashlT3WQgMP
35RFWcHqfmQZ5qVA95VXm2VBViIfrT9lwO8TDlDPXSyi5f6UYtNGhwdz7OBGjLQt
RN6yek5TfD0IElnwpOR00L5OPQAjMp859S4Iqrs248bSt47IGsbPRlkK+XSNeoSj
v5LewBrd+QAgC7Spohd0AIu+CzPDIurBOuMXo2YAUHsFwU7moL6Sf3uBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt117ZE9VWEzYlFYSdcJNT0UU7AMB8GA1UdIwQY
MBaAFC0MIc/6gLWh5cvWMZMOf8Vf3fxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAt
Y2RjYzcwNGIzOGE3LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAtY2RjYzcwNGIzOGE3
LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPZwynlw
Z1XgS8kYckcDOxnA/bxHwQMsrHz7a9+B+KJDl1aBOW92Tm/MYIkLQ4usLRUGMHtu
mdrEpkbz+gbdjaeXhefx9QFRf1gjsXS+gvX247YUZeOJv8qt6+8hq3uPUpQLOiSA
T7QxiSkmuPYBAoUZQoE7FxV0G9yNc5VajmAY7pkOQkLFs1P/PXjxsYAlvk6x/1HU
lmyTZm+RkxEJeYlZLfDKZq4OxuTZMPwJLU4A+IMKRAutl5g8pKUcYR9HqJg+wGyR
2ayUZ4+q008LxJTMI3JQxP6sm94PJrA/sL3VfEddjVyeZo+DyeO294zMXYo56D35
p6tYo1CtKpyPLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:21 2025 by rpki-client