Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          rorUthVco99lnugNiSmN9pgff545BckBfd5rwInbsmw=
Subject key identifier:   C0:E8:BC:F7:31:8D:EE:11:FB:C1:FB:30:F4:AC:83:51:E2:4B:77:19
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       0196496A5083C1C4A39765BCA4D2A610DFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          1039
Signing time:             Fri 18 Apr 2025 15:00:26 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:26 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:26 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: hnfAN1CghgPfx8u+46HGq6HoOAZAspCAGJZ4iB2qOe4=)
                          2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:50:83:c1:c4:a3:97:65:bc:a4:d2:a6:10:df:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Apr 18 15:00:26 2025 GMT
            Not After : Apr 19 15:00:26 2025 GMT
        Subject: CN=c0e8bcf7318dee11fbc1fb30f4ac8351e24b7719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:8e:7a:fe:69:c0:13:8a:4c:ea:1f:cf:a2:
                    0e:f3:00:3d:2e:e4:8a:98:55:17:e1:b6:ee:a2:c6:
                    b2:f4:3e:95:67:b7:08:a5:0f:9b:3d:b0:c9:dd:4f:
                    14:11:7f:c1:4f:06:41:cd:25:c1:8b:c8:da:86:4d:
                    9a:5e:da:b8:92:c3:97:a9:18:d0:4e:a7:37:b1:fc:
                    b6:36:f7:28:79:c8:58:3e:2b:81:94:63:c0:9e:aa:
                    7c:8b:98:4a:1d:f8:71:73:95:ae:59:a8:b2:47:d7:
                    10:50:b1:cf:19:79:9b:f0:ee:6e:9a:6f:48:e3:06:
                    d7:7d:45:fd:6f:3d:59:81:f9:30:7f:c9:5e:f9:f9:
                    84:e4:e6:55:5c:9a:50:4e:cb:01:35:11:db:23:23:
                    a0:bd:98:b1:97:55:09:3c:b7:e0:a9:26:a1:c9:0a:
                    a7:cc:ac:3b:ba:10:ae:2a:72:1f:9b:ea:6e:2b:a8:
                    ce:8a:a7:69:3b:29:70:c0:20:1a:2c:c5:1e:1f:f1:
                    c8:4e:49:34:79:b9:da:b8:95:78:71:bf:37:51:e7:
                    15:9f:57:6e:53:87:6d:3e:4e:5f:92:d3:ca:15:1e:
                    71:53:bc:81:bc:72:04:54:6b:a0:7d:02:32:70:9b:
                    5f:70:95:c8:5c:77:16:23:4b:a2:e3:fa:29:2e:57:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:BC:F7:31:8D:EE:11:FB:C1:FB:30:F4:AC:83:51:E2:4B:77:19
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:b0:ed:51:59:28:f2:69:0b:33:36:12:81:9c:f8:76:7c:
         73:9c:07:c4:d0:bf:2c:2e:a4:d9:12:60:d4:7e:66:9c:0d:f3:
         82:da:ab:f8:d4:0f:12:1d:e2:49:5d:30:cf:be:49:ef:f5:be:
         d8:78:02:a5:22:73:0f:f3:bf:7b:1c:bb:8b:1a:12:67:80:bc:
         6e:cc:c6:ef:81:43:0d:6d:db:c9:a9:c8:ec:c3:26:27:43:b9:
         1d:37:62:40:ef:92:f1:58:6b:c9:fa:26:d4:c6:9e:95:20:b4:
         b2:5d:fe:0d:b5:ab:e6:0b:50:fa:92:f9:46:85:b9:54:ab:4b:
         0c:97:1d:b4:76:2f:03:dd:3d:d1:07:3c:2b:40:4e:09:7d:e0:
         11:a1:95:ad:ca:46:a6:91:c4:60:0f:05:92:0a:42:bf:af:4e:
         c9:48:db:46:08:06:b6:af:cb:5a:aa:82:cf:36:45:50:84:96:
         36:62:21:65:39:c2:00:59:99:2b:5d:01:1b:b7:73:ab:ad:b0:
         a0:fb:6f:16:d0:d2:ae:91:c5:aa:ce:77:86:bf:6e:ad:fa:37:
         ef:96:58:b9:87:7d:01:54:01:08:65:41:46:36:08:b4:2d:1a:
         24:7d:72:13:81:71:c0:c2:12:df:a5:5a:d3:b5:0f:61:ad:d6:
         89:13:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:24 2025 by rpki-client