Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          /YhG3zksMPd2l6IVJC+I+GqrHx9J0jk/aRAcUWWP4ao=
Subject key identifier:   EB:36:7A:74:E0:E8:B3:AB:04:C4:BF:D1:0C:17:A6:7C:41:DF:C3:B8
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       01958C29250B9A5DFD10FD21B655F19E36A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          1134
Signing time:             Wed 12 Mar 2025 21:01:01 +0000
Manifest this update:     Wed 12 Mar 2025 21:01:01 +0000
Manifest next update:     Thu 13 Mar 2025 21:01:01 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: em6LMtVwQuXvsPi5DyIBlCZdWp07ZEITnLOhvfl2+nM=)
                          2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:29:25:0b:9a:5d:fd:10:fd:21:b6:55:f1:9e:36:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Mar 12 21:01:01 2025 GMT
            Not After : Mar 13 21:01:01 2025 GMT
        Subject: CN=eb367a74e0e8b3ab04c4bfd10c17a67c41dfc3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:60:af:6b:21:d6:dc:13:e9:55:42:d6:53:
                    0d:59:4f:da:c6:1e:3e:40:3a:38:60:c4:60:6d:40:
                    79:97:a0:5e:fc:5b:70:35:32:80:d9:7a:31:75:73:
                    0e:04:ba:7f:c2:53:5a:fa:b5:d0:10:91:e1:bd:28:
                    cc:f7:e0:af:aa:3f:92:1b:f4:c8:ff:9e:36:92:8d:
                    79:b5:30:e2:79:29:9e:ee:9a:e7:02:1b:dc:96:93:
                    f4:94:59:fe:c5:38:88:57:57:e6:c1:58:ca:31:ad:
                    b4:67:4a:51:c9:2e:05:8a:d1:2e:64:bc:5f:58:48:
                    df:78:fa:8b:09:30:fa:ae:58:c4:75:05:8f:65:00:
                    28:f4:67:d5:9f:35:ae:7c:b7:2b:64:1e:eb:e9:e4:
                    98:6d:2a:31:02:68:66:43:0f:e1:e9:68:26:cf:4b:
                    1f:97:f6:b7:44:97:d0:60:1f:da:a7:9b:bb:d4:48:
                    83:dd:1c:db:ab:4d:2d:1b:f9:b0:18:26:00:a1:f4:
                    33:b3:78:98:53:2b:79:b6:38:9c:5e:4e:68:c6:78:
                    ed:89:5e:d3:7e:86:ba:ed:e4:c2:89:79:40:86:18:
                    1d:50:08:98:70:1b:62:fe:c0:12:82:17:e5:b6:c7:
                    af:e4:c4:06:67:81:e1:9b:47:79:00:42:a8:51:71:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:7A:74:E0:E8:B3:AB:04:C4:BF:D1:0C:17:A6:7C:41:DF:C3:B8
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0a:ed:67:42:d0:26:bb:46:34:31:0a:2a:a7:86:d4:4b:41:
         fa:0b:a9:06:8e:eb:c6:2b:ba:ed:e4:c0:4c:7e:48:b7:14:d2:
         29:50:3f:3f:94:c9:20:a2:05:ed:84:85:c0:7e:77:43:00:cf:
         8e:05:c8:dd:bc:e9:2e:ea:90:4d:59:ed:4b:fb:46:c1:5a:b2:
         6b:78:06:b6:6d:ae:11:2f:ed:a7:8c:3b:eb:ca:a5:5a:e6:11:
         3f:47:04:26:ab:3a:0a:42:b0:a4:d9:6d:67:66:2e:e3:35:3e:
         b7:09:e2:cf:df:b5:09:8d:6b:ff:56:1f:6a:b9:22:e5:45:2e:
         8f:0c:5d:85:bd:9c:50:a5:b9:a9:d8:a6:80:36:c8:b4:10:99:
         1e:fa:94:24:03:9e:83:1e:46:75:dd:76:64:ac:43:28:3b:de:
         ff:1b:1a:2c:0f:f9:7c:3e:30:42:68:7e:b7:4d:e2:f4:38:2e:
         2c:03:3f:fb:cd:ba:bb:90:0c:98:90:b1:a4:e5:08:2f:11:17:
         9e:72:ce:c4:59:b2:87:c7:1d:be:ae:de:c2:65:de:f0:c9:68:
         b8:3a:b4:82:7c:90:b8:89:fa:7b:64:d6:c1:2b:6e:cd:84:27:
         bd:d9:40:6f:e5:6a:78:0e:0a:58:7c:fc:ce:c7:b5:8e:f3:d0:
         46:b5:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:03 2025 by rpki-client