Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File:                     lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier:          Jy6xyCzz9Vnh1DwgljPzXTBggsRU1eELqOnzhjdTpjQ=
Subject key identifier:   5C:90:7C:04:96:29:B3:B5:8F:D5:D8:E6:E4:11:32:6A:AD:20:0E:E2
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer:       /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial:       019651C96DCFCC95F240A893EE72973655BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number:          03C6
Signing time:             Sun 20 Apr 2025 06:01:17 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:17 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:17 +0000
Files and hashes:         1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: 9rWXMZwDFtJazu/3UynZd0/p6HwTTDlb+Gdr2/hcFmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:6d:cf:cc:95:f2:40:a8:93:ee:72:97:36:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
        Validity
            Not Before: Apr 20 06:01:17 2025 GMT
            Not After : Apr 21 06:01:17 2025 GMT
        Subject: CN=5c907c049629b3b58fd5d8e6e411326aad200ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:7f:20:8a:9c:e1:fe:10:a5:03:02:a5:28:
                    cd:19:c3:19:6d:9f:82:b1:89:99:59:da:d8:3d:f9:
                    17:05:f8:73:d8:24:18:6f:65:e6:73:8d:9d:55:69:
                    22:14:2c:03:00:b2:ad:08:f3:37:23:54:29:39:28:
                    b1:ba:33:f7:da:d5:75:74:0e:ab:64:f3:77:48:8e:
                    a6:f3:8d:76:bb:73:51:57:e2:bd:e7:d5:a3:ad:83:
                    ee:f7:8a:2f:e1:15:29:d3:63:4e:9a:fa:86:69:6c:
                    8d:d8:ab:43:92:ce:61:20:7d:23:f6:90:db:ed:b2:
                    05:16:c1:4a:20:b6:e5:f2:bd:ac:4c:f2:35:90:42:
                    52:8a:c9:bc:a2:5e:1d:57:f1:dd:0b:84:38:65:50:
                    48:4f:2e:91:89:f5:af:66:7a:87:59:bd:33:af:63:
                    2a:e7:9b:06:93:f9:00:d9:14:fb:39:8b:08:4f:41:
                    33:ed:56:1a:d0:40:da:04:bc:b8:75:94:28:99:13:
                    05:a6:2e:87:83:a8:43:cd:b3:e0:3e:5c:d3:b4:a7:
                    98:23:db:9a:b4:e1:7b:70:65:84:ab:bd:4c:75:0f:
                    32:c3:76:16:50:32:1a:0f:ed:73:0e:91:d3:0c:77:
                    7d:de:01:f6:c3:8e:61:b2:39:13:18:5e:00:5b:74:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:90:7C:04:96:29:B3:B5:8F:D5:D8:E6:E4:11:32:6A:AD:20:0E:E2
            X509v3 Authority Key Identifier:
                keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:73:f8:aa:f7:05:2c:43:e2:2f:31:2c:64:97:22:2a:06:23:
         1d:7b:85:d8:0a:be:65:ed:8f:e2:0b:5e:53:84:7e:fc:24:ed:
         98:33:33:30:aa:5a:e5:d7:6e:00:7e:1b:48:2a:27:fe:5d:1b:
         f5:03:0b:e6:4f:26:95:5e:ec:dd:c5:8b:c8:5d:f3:07:eb:92:
         03:58:e3:6b:82:04:6b:e2:02:b6:ec:a5:d5:14:cb:1c:e4:bc:
         d3:b2:a3:b2:70:b4:7f:70:97:f0:f3:3c:e6:4c:13:c1:16:1d:
         b9:94:14:95:bc:6a:ce:6a:49:a2:29:6e:e8:90:97:2a:33:63:
         7a:10:14:49:90:c1:a9:14:5b:18:5b:cd:51:fa:e0:a0:0d:c8:
         36:7c:b1:96:f7:e7:df:cd:63:38:70:c4:f8:ed:92:d5:df:2f:
         07:f7:1d:c8:35:54:f4:80:1f:8d:69:f7:1a:d0:9b:7e:06:53:
         f4:28:3f:8d:af:62:99:8c:19:b1:09:a4:a9:fc:6e:a8:4e:dc:
         53:49:ed:2c:f0:8d:76:8d:6b:b8:6e:2d:96:b6:1a:ba:c6:b5:
         93:74:23:9e:91:3e:c2:88:33:7d:47:56:43:04:77:08:1a:01:
         67:54:c9:c5:7c:1f:a2:f0:4e:c6:b8:eb:84:a9:be:fa:dc:e5:
         a8:3c:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:02 2025 by rpki-client