Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File:                     L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier:          izQ841JD0WvtdjaYAuEnx/lOQsvQEUWPfniSkneVJr4=
Subject key identifier:   83:0A:8C:D3:87:6D:EF:A3:15:B8:82:C3:8F:1F:68:1E:E8:87:60:81
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer:       /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial:       01958C60B069D0F150510B12A6218EAED2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 22:01:41 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:41 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:41 +0000
Files and hashes:         1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: 4u5iqdUaI3DxYHLF2Q6Py/Mf5arF9BE44GZIYKHDb8E=)
                          2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:b0:69:d0:f1:50:51:0b:12:a6:21:8e:ae:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
        Validity
            Not Before: Mar 12 22:01:41 2025 GMT
            Not After : Mar 13 22:01:41 2025 GMT
        Subject: CN=830a8cd3876defa315b882c38f1f681ee8876081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:b9:b1:6f:c8:38:a6:17:81:5d:9c:81:18:
                    4f:5b:dc:3a:9a:c9:8d:0c:47:59:eb:1d:63:5c:59:
                    2b:69:42:e5:92:34:93:fa:1e:fd:01:b2:33:89:aa:
                    4d:1a:13:fe:60:6c:55:05:62:0d:40:5b:ea:49:e3:
                    0a:35:ad:c0:e3:3b:32:b4:91:cc:13:99:37:00:eb:
                    f1:c5:a9:1d:39:b1:d4:ea:83:f7:af:5d:95:a0:30:
                    92:e7:67:10:97:a8:73:ba:a2:1b:a3:4e:a1:b1:2b:
                    94:22:0d:45:1c:a5:bc:d7:f5:42:1d:ae:46:0b:d6:
                    c5:fd:ed:89:e1:c8:45:45:5d:e3:fa:cd:2d:41:9f:
                    c8:73:67:3c:0d:11:5d:15:c8:c8:32:de:e4:e0:1a:
                    68:49:98:5e:b1:3f:c4:2c:a9:40:a8:da:19:c4:7a:
                    1d:b5:87:4a:26:85:11:39:73:b2:65:76:35:17:cf:
                    dd:6f:39:92:25:df:a5:68:a9:e9:bf:d0:84:1d:cf:
                    2a:c3:a8:fc:8e:46:9a:22:81:8e:be:ea:e2:41:17:
                    d8:a8:a4:03:12:28:03:80:42:f7:80:78:d9:22:05:
                    73:4e:34:58:46:5c:90:14:0d:a2:5c:73:a9:d9:e2:
                    0a:0b:90:38:8a:cc:f1:e3:02:20:ac:c6:c1:c4:54:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:8C:D3:87:6D:EF:A3:15:B8:82:C3:8F:1F:68:1E:E8:87:60:81
            X509v3 Authority Key Identifier:
                keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:23:7e:e9:0a:b0:63:f7:21:6e:c9:e4:43:c6:88:c4:60:
         94:60:30:0d:22:85:3d:f2:84:a5:00:d0:7b:2f:21:d4:3c:59:
         9c:81:27:a0:42:dd:ce:f9:a5:72:59:7e:e8:ee:c8:4c:c4:74:
         de:b0:c9:03:71:e3:c7:ed:fb:a1:4d:85:ee:87:2d:64:bd:a5:
         d5:4d:7b:e7:39:dd:30:4b:07:13:dc:56:10:27:7a:a2:40:fd:
         83:d8:e4:02:b7:c0:63:76:0a:6a:24:dd:00:3c:38:9a:81:fa:
         94:80:82:e2:52:a7:43:44:51:26:e0:be:82:12:48:c6:ac:b6:
         b7:41:83:db:97:38:3f:24:23:9b:8c:61:0a:28:05:fe:cd:6d:
         3e:ea:32:34:b2:fe:1e:a0:71:9b:00:2e:ef:8f:d0:20:f3:8e:
         1e:c6:48:07:ec:e9:df:88:97:ba:97:c9:fb:22:c0:de:d5:71:
         f4:59:b0:cc:16:a1:0e:4b:2b:43:bc:f7:20:2d:ff:c7:9f:d7:
         b8:61:4f:78:54:e2:eb:f4:84:46:11:77:48:78:13:b6:ef:f9:
         3c:23:3c:fa:c5:61:d9:18:6c:61:f6:7e:45:24:af:bb:70:75:
         bd:f5:ff:35:9b:d9:5d:78:eb:ed:c5:4d:0e:4a:cc:6d:50:99:
         e9:a0:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:47 2025 by rpki-client