Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          HAsRRCdSg4rxQUBw3HC3EsZbKYkFApjR8QmkedOI9jY=
Subject key identifier:   A7:BA:E8:6F:3D:C2:43:B2:30:28:DC:E7:BB:A6:FB:0B:38:3A:FB:60
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       019641E7F5EC71A694C6F4F4772C046A4866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          144A
Signing time:             Thu 17 Apr 2025 04:00:42 +0000
Manifest this update:     Thu 17 Apr 2025 04:00:42 +0000
Manifest next update:     Fri 18 Apr 2025 04:00:42 +0000
Files and hashes:         1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: bV5RdsSkT2gDYxmTWUB8LJfrb2XaRfDu+ogMPwOMXfw=)
                          2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e7:f5:ec:71:a6:94:c6:f4:f4:77:2c:04:6a:48:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Apr 17 04:00:42 2025 GMT
            Not After : Apr 18 04:00:42 2025 GMT
        Subject: CN=a7bae86f3dc243b23028dce7bba6fb0b383afb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:1f:ed:a4:3c:e6:22:f8:73:1b:2c:71:ea:
                    2c:56:d3:f2:9e:17:b8:92:68:c2:cc:9f:00:c7:7c:
                    cd:60:45:c1:c8:a1:60:7f:88:24:3f:3e:75:3c:66:
                    6f:5c:86:a4:1d:06:87:a0:44:b4:56:c2:a1:d6:af:
                    64:b8:63:10:9d:3d:fc:71:66:d8:24:d5:d7:64:46:
                    99:ab:34:6b:40:57:df:60:c4:b1:44:25:f3:92:ed:
                    8d:c6:41:78:13:3b:3f:f5:4e:5f:60:b1:3a:ba:cc:
                    f8:2d:f3:82:94:a2:c8:98:4e:d4:eb:38:60:af:d4:
                    45:6c:96:68:df:f2:fc:95:7a:1c:e2:c9:c7:e1:30:
                    e6:44:9e:df:3c:44:e1:c1:57:36:45:69:e8:42:9e:
                    ae:c0:f9:03:22:c3:57:41:e7:29:01:49:1d:9b:b6:
                    4e:53:5e:27:32:03:fa:c8:a1:c6:d4:9f:39:8d:ac:
                    04:79:b9:ad:67:bf:11:c6:46:4e:68:bf:f1:11:59:
                    1c:b4:b9:a2:25:b5:b3:e4:f3:14:bc:61:fb:09:13:
                    01:d7:b9:ab:1c:ff:98:de:f8:23:75:62:a2:09:74:
                    45:48:1b:68:22:2d:13:a9:7d:6a:74:c6:ec:e6:c7:
                    12:08:be:5f:97:20:ed:85:21:9e:46:bb:17:c6:81:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:E8:6F:3D:C2:43:B2:30:28:DC:E7:BB:A6:FB:0B:38:3A:FB:60
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:1a:2c:82:2b:cf:a9:25:f7:2d:16:2d:d2:30:7c:15:e1:d9:
         8a:4b:af:cf:e8:15:3c:e7:5c:2b:ff:73:bd:bc:07:08:54:02:
         15:c6:78:a3:20:c8:0c:b6:71:f2:3f:e0:35:3e:dc:bd:2f:ab:
         c8:7f:d8:6b:e7:37:b5:06:2f:c7:dc:10:9a:90:f1:17:32:40:
         8c:eb:4c:da:52:8e:15:ef:1f:12:14:e1:4e:71:d0:71:9d:e8:
         ee:88:c3:24:5b:10:64:63:c1:02:cc:6d:bf:d8:b1:be:a3:13:
         38:7a:d2:c2:22:bd:64:64:84:44:08:43:37:24:e6:c6:dc:8b:
         d5:7a:69:33:32:c4:93:06:b6:7d:37:1c:bd:6e:33:8d:bc:3f:
         ae:fb:13:de:19:1f:bd:0e:1b:d6:4d:9e:48:e6:54:6e:2b:dd:
         f1:19:0d:b8:33:63:b8:d8:77:5d:47:a6:b9:85:98:d7:fa:64:
         dd:78:48:4e:e5:b3:94:41:a4:f6:fb:a4:3d:59:5e:03:3d:9b:
         c8:ac:d7:67:30:c3:6f:9d:9f:b1:0f:91:20:e8:1f:d3:41:92:
         a9:dc:ee:cb:69:3d:ff:e8:49:70:2d:4b:9b:55:0f:b6:26:e5:
         c2:fb:5c:b5:70:0e:e4:51:78:46:69:de:a0:2c:02:a8:a7:b6:
         26:bd:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:16 2025 by rpki-client