Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          3Vu2K+goHLp9F2dxESEz1HEp5elFc/lBpHSEibtlMDU=
Subject key identifier:   30:D3:05:25:75:9C:65:2B:5E:44:DA:CB:B5:9F:40:43:AC:F9:D2:F2
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       0195127E37C72ED3AEF92CC41784C4BD6501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          0F98
Signing time:             Mon 17 Feb 2025 06:00:16 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:16 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:16 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: TTNdjEsBRKNGnhyJuePuFaLa8kFoeu2ABkUfEJEDMis=)
                          2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:37:c7:2e:d3:ae:f9:2c:c4:17:84:c4:bd:65:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Feb 17 06:00:16 2025 GMT
            Not After : Feb 18 06:00:16 2025 GMT
        Subject: CN=30d30525759c652b5e44dacbb59f4043acf9d2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:8f:eb:eb:73:ad:38:a9:65:ad:4b:1c:54:
                    ef:d4:ec:bf:ce:26:41:5e:16:9a:52:61:56:39:2a:
                    ff:78:40:7d:35:ea:37:98:bc:c6:f7:bb:37:44:fa:
                    d5:12:35:25:ca:58:c7:77:14:9d:b0:f5:f6:12:be:
                    15:23:2b:15:47:d4:ef:91:e8:7f:4e:a2:20:47:b4:
                    a8:6c:60:ac:d6:54:f1:04:ae:6f:d4:ef:7b:58:ac:
                    94:1e:2b:6a:96:18:90:d6:30:4a:71:ca:40:b6:97:
                    dc:39:2a:97:b7:ad:52:03:d2:da:af:40:f5:64:e0:
                    59:81:e2:12:cd:58:80:c8:32:2d:be:f4:2a:f5:07:
                    02:2c:ce:2c:44:20:d6:72:d1:60:59:51:d0:f5:b4:
                    d4:e2:38:df:93:d7:24:21:19:c4:49:05:8d:f9:71:
                    91:da:53:f2:9b:45:9b:7c:78:70:8f:5e:05:38:eb:
                    5b:a6:13:48:7f:97:cc:7c:ad:6c:6d:99:f3:45:40:
                    f4:3c:40:c7:0e:1b:35:e9:84:a8:b3:80:3f:c6:16:
                    90:25:b9:7e:2d:ea:f2:f6:72:d9:ff:f2:42:e5:c8:
                    5f:25:fa:a2:9f:73:10:f2:f7:52:62:35:1c:b5:fe:
                    c2:5f:c0:90:b6:0e:ef:17:5e:68:08:5e:0f:ec:71:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D3:05:25:75:9C:65:2B:5E:44:DA:CB:B5:9F:40:43:AC:F9:D2:F2
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:fd:fa:bd:91:60:ee:57:b1:dc:79:17:05:21:3b:6c:ee:
         d7:0a:c9:7e:a2:2d:da:ae:74:48:b1:b8:ae:89:ab:25:58:3b:
         9f:09:9c:85:d9:8c:e8:f0:32:2f:b9:0d:52:78:b8:c8:fb:a3:
         08:dd:c7:c1:cb:ee:30:77:e9:59:2b:cc:1a:0a:26:45:0d:f1:
         b5:1f:41:e2:86:0c:c8:2d:71:d8:0c:ab:76:8e:12:4c:a8:66:
         ad:06:80:c4:24:d8:36:ce:37:41:2c:bb:44:09:bc:16:ee:27:
         3a:71:57:11:92:0f:d7:fe:7f:e9:13:00:2b:fd:11:d7:0b:cf:
         8a:52:83:1b:62:1e:76:6d:e6:d7:9c:6a:48:c7:9a:d8:fe:13:
         77:0b:d6:fc:33:e4:37:5e:6c:49:28:45:b8:45:0f:81:d0:e1:
         db:3b:83:79:92:a4:a0:ee:6f:f3:fa:ff:e1:4c:48:a4:8a:b1:
         6c:ee:45:07:b5:68:15:65:d5:50:a3:34:ea:e8:87:3d:c8:1d:
         63:57:ec:18:dc:6f:56:f2:fa:34:b6:cf:1f:fd:a2:88:cb:b9:
         fe:39:e5:7b:f1:27:77:61:fa:27:6b:6f:14:9d:73:d0:f8:c6:
         b8:71:eb:83:55:ec:42:be:4f:40:a9:74:ad:2a:0a:6a:af:1a:
         c3:64:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:37 2025 by rpki-client