Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File:                     L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier:          3aW4xadrvDjAUAI+tfpIRQSDmoLwJQWhgFWO/+5GL+w=
Subject key identifier:   C3:35:FD:7A:3F:38:C3:B9:2B:F4:A4:2C:DC:DF:C9:1E:0D:81:6F:87
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer:       /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial:       01958BBBBBDDCD9375F737DC57DB2138F95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 19:01:31 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:31 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:31 +0000
Files and hashes:         1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: hR4L9rwb+Rbo979WL+Z2/Y6MNg2CnOQiq2bi6zpanI8=)
                          2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:bb:dd:cd:93:75:f7:37:dc:57:db:21:38:f9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
        Validity
            Not Before: Mar 12 19:01:31 2025 GMT
            Not After : Mar 13 19:01:31 2025 GMT
        Subject: CN=c335fd7a3f38c3b92bf4a42cdcdfc91e0d816f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:94:b2:f3:85:5a:ce:f1:97:c9:03:15:83:
                    8f:17:b0:b0:15:72:0f:08:33:ce:4c:f3:0a:ba:f0:
                    c4:03:81:1d:05:a3:c5:87:97:f3:a6:33:b4:d0:f2:
                    e9:2c:bc:ff:24:af:be:9e:b4:5e:a4:2c:b8:e8:2c:
                    aa:20:7d:d0:42:ae:a9:1c:1a:b3:2f:67:c4:4c:e2:
                    3d:7e:a6:ac:62:a9:8c:e3:05:6e:fd:55:33:6b:cd:
                    ad:e6:73:99:51:b7:57:0e:c1:61:80:7d:61:21:b0:
                    a8:ab:ef:4c:83:d8:6c:a1:cf:83:6d:25:66:e6:bb:
                    17:c8:78:95:d8:35:c3:82:4a:33:12:0f:35:71:5c:
                    89:19:d7:e5:3c:bc:26:b1:6e:4d:a9:86:c0:8d:0c:
                    c1:b2:5d:d0:46:25:7e:13:3d:d1:2a:44:51:a4:57:
                    51:b9:44:2d:ab:12:1f:24:75:be:80:ab:db:fa:1f:
                    29:e0:5a:98:e8:df:34:4f:d0:af:a6:97:f8:47:af:
                    ca:53:5e:bf:d1:b8:a6:67:0d:66:28:51:5e:57:c3:
                    a2:ac:c2:06:51:88:0d:88:bd:ad:dd:55:09:b1:a3:
                    29:b4:9a:bb:65:70:3a:cc:06:ac:23:6e:74:c8:9e:
                    91:88:cb:cc:c4:2d:64:10:b5:c4:7f:bc:ea:5a:af:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:35:FD:7A:3F:38:C3:B9:2B:F4:A4:2C:DC:DF:C9:1E:0D:81:6F:87
            X509v3 Authority Key Identifier:
                keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:33:af:6e:25:20:40:1b:d5:43:80:2b:5d:60:2f:be:4a:
         40:23:95:16:11:21:4e:44:81:78:08:12:c5:7a:ba:9d:9d:26:
         e2:d2:8d:ba:bf:c9:16:d2:91:de:ee:3c:d6:1d:04:cd:58:b7:
         8b:d2:11:ab:ae:c3:2c:aa:94:54:32:e9:57:64:0f:10:be:79:
         41:4e:bc:4c:d5:f7:a1:e4:20:b0:91:75:2b:b4:b5:79:4c:4f:
         64:5e:32:92:91:d4:00:7a:56:1d:d5:23:e0:f4:31:77:52:0f:
         06:2c:32:5a:b5:48:e9:8d:34:09:14:a5:ce:c1:79:51:19:9b:
         54:a2:ba:32:f0:62:70:98:41:ee:99:1d:e0:45:c3:fe:2e:1a:
         e2:eb:a0:dd:04:a6:f5:7a:fe:b8:77:05:cc:f9:f5:d7:03:81:
         29:d4:a2:34:b1:0d:d8:b5:3e:ad:42:85:68:85:17:88:20:ad:
         46:ef:23:80:8c:f1:00:c7:5d:f0:5b:ef:37:c9:25:50:77:0e:
         fb:61:04:ef:da:5b:3f:22:e5:48:fe:69:50:c7:98:9c:2e:15:
         f3:da:1f:71:f0:6c:d4:3a:53:11:47:2a:92:ed:e9:ea:2d:45:
         56:b6:8c:66:58:da:ee:3e:b1:56:d1:30:1a:04:98:2d:36:0a:
         e1:dc:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:46 2025 by rpki-client