Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          dEiyG7yKv9h1J5CrM4wppb4SQWRyNr80is43wajyKNk=
Subject key identifier:   E4:11:88:61:5B:0E:18:E6:48:28:0C:71:6C:29:D7:FF:72:E2:09:68
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       0195127E2B51FB112C3A851E396CE0F8D640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          10F5
Signing time:             Mon 17 Feb 2025 06:00:13 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:13 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:13 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: fmoyhWVQKG76Z3Z/fJOQKtyu93BP7Tcww8+gant28qw=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:2b:51:fb:11:2c:3a:85:1e:39:6c:e0:f8:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Feb 17 06:00:13 2025 GMT
            Not After : Feb 18 06:00:13 2025 GMT
        Subject: CN=e41188615b0e18e648280c716c29d7ff72e20968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:fd:88:66:ca:29:e4:38:e4:8c:3f:e1:f6:
                    d1:4e:ab:54:6e:88:f6:5f:eb:36:59:bf:14:66:0f:
                    e1:40:7a:4b:6b:a5:89:e3:81:2a:bb:46:86:6c:5a:
                    a6:95:25:c0:96:24:4c:84:a0:f2:8a:e2:ae:21:0e:
                    98:31:cd:30:43:da:77:0a:10:fc:31:bf:98:ee:c0:
                    34:cb:e9:da:40:fe:23:0c:a8:20:5d:9b:51:e7:4c:
                    01:82:ae:33:e9:0a:27:0d:5b:33:bd:bc:50:67:65:
                    0f:75:57:96:86:2e:cd:2f:7f:2b:0a:14:05:ac:77:
                    fd:4c:8d:6e:7d:6c:de:08:2d:80:33:3c:d2:dc:b2:
                    5d:a9:f0:2d:ca:34:2d:c5:af:f9:ab:2a:f6:e4:ca:
                    7c:58:c1:2e:49:1c:90:8f:62:0a:d4:69:f2:79:2c:
                    08:76:ca:2b:05:17:90:af:0f:28:fa:ea:10:12:1d:
                    0a:b7:b7:bd:53:26:0d:28:af:b6:a1:82:ac:5d:30:
                    4b:81:35:ea:f8:59:e5:e3:76:4f:cc:2e:ff:ed:c9:
                    ce:83:16:d5:08:db:88:e7:dc:0b:f1:e7:47:47:ee:
                    9d:0a:c6:cc:46:ef:c2:83:69:28:f9:4a:2e:e3:ea:
                    ed:f2:fe:4b:90:13:04:2a:2f:6d:57:76:93:10:c9:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:11:88:61:5B:0E:18:E6:48:28:0C:71:6C:29:D7:FF:72:E2:09:68
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:88:a7:b2:e4:3f:bb:93:a4:19:e3:e6:45:3d:1a:a3:2f:a8:
         87:43:fa:62:a5:63:e9:92:38:59:26:4c:bd:70:03:73:f0:d0:
         91:46:8e:ab:84:1e:d7:f8:5c:17:43:20:53:0b:2c:c1:16:69:
         8c:50:c6:d5:52:10:09:4d:6c:f5:b5:2f:61:4c:02:1c:30:87:
         01:82:b7:45:5d:4d:8f:e8:35:dd:22:05:39:d0:08:74:87:df:
         4d:8e:70:db:72:e0:cb:ae:2c:37:e1:1e:1e:75:53:17:e1:d9:
         28:f6:ef:61:84:07:26:66:36:cf:2e:59:35:1b:c2:de:9b:c3:
         fc:b6:9f:dc:fb:9a:65:3c:19:f7:fe:88:05:b7:44:87:c4:99:
         15:37:dd:2c:6c:6a:2a:f5:9b:9e:a4:84:aa:95:2b:26:f8:78:
         0b:14:c5:94:6e:20:bd:fb:c2:9f:49:f0:8e:d4:5e:de:f1:e4:
         8a:50:1e:61:61:e9:a8:31:81:0e:d4:db:c1:5c:9d:27:48:09:
         dd:86:48:a6:71:36:ea:f4:3f:e8:e7:66:87:69:be:3d:40:5f:
         fd:01:23:66:81:f0:27:80:00:35:19:0b:00:8a:12:36:11:5c:
         08:15:22:01:44:7e:ac:4c:bf:76:7b:f4:db:e4:94:88:ec:f6:
         40:87:a9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfitR+xEsOoUeOWzg+NZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2U1ZDUxZmE3NWJiYjZlZDk2MmE0MTY2ZWY2Zjg2MzBh
MDI1ODEwHhcNMjUwMjE3MDYwMDEzWhcNMjUwMjE4MDYwMDEzWjAzMTEwLwYDVQQD
EyhlNDExODg2MTViMGUxOGU2NDgyODBjNzE2YzI5ZDdmZjcyZTIwOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMn9iGbKKeQ45Iw/4fbRTqtUboj2
X+s2Wb8UZg/hQHpLa6WJ44Equ0aGbFqmlSXAliRMhKDyiuKuIQ6YMc0wQ9p3ChD8
Mb+Y7sA0y+naQP4jDKggXZtR50wBgq4z6QonDVszvbxQZ2UPdVeWhi7NL38rChQF
rHf9TI1ufWzeCC2AMzzS3LJdqfAtyjQtxa/5qyr25Mp8WMEuSRyQj2IK1GnyeSwI
dsorBReQrw8o+uoQEh0Kt7e9UyYNKK+2oYKsXTBLgTXq+Fnl43ZPzC7/7cnOgxbV
CNuI59wL8edHR+6dCsbMRu/Cg2ko+Uou4+rt8v5LkBMEKi9tV3aTEMnnyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQRiGFbDhjmSCgMcWwp1/9y4gloMB8GA1UdIwQY
MBaAFCzOXVH6dbu27ZYqQWbvb4YwoCWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQt
YmY1NWI4YjE2NjljLzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYjVlZDYtM2E3Yy00NjMxLWI0OWQtYmY1NWI4YjE2Njlj
LzEvTE01ZFVmcDF1N2J0bGlwQlp1OXZoakNnSllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYinsuQ/
u5OkGePmRT0aoy+oh0P6YqVj6ZI4WSZMvXADc/DQkUaOq4Qe1/hcF0MgUwsswRZp
jFDG1VIQCU1s9bUvYUwCHDCHAYK3RV1Nj+g13SIFOdAIdIffTY5w23Lgy64sN+Ee
HnVTF+HZKPbvYYQHJmY2zy5ZNRvC3pvD/Laf3PuaZTwZ9/6IBbdEh8SZFTfdLGxq
KvWbnqSEqpUrJvh4CxTFlG4gvfvCn0nwjtRe3vHkilAeYWHpqDGBDtTbwVydJ0gJ
3YZIpnE26vQ/6Odmh2m+PUBf/QEjZoHwJ4AANRkLAIoSNhFcCBUiAUR+rEy/dnv0
2+SUiOz2QIepOw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:42 2025 by rpki-client