Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          mgvs46gSfheqNlADrAZUC3pvbMFyBCSaHz7ZfiktQeo=
Subject key identifier:   A6:5D:C4:8E:19:AC:43:8B:0C:4E:17:D5:41:1E:32:8E:D8:C2:B3:4C
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       0196507F71DDE187305FB43480904915927A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          031F
Signing time:             Sun 20 Apr 2025 00:00:51 +0000
Manifest this update:     Sun 20 Apr 2025 00:00:51 +0000
Manifest next update:     Mon 21 Apr 2025 00:00:51 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: TW6N7Oh9nX76JciTAUCv6e3B09KELKFpCJE2cdFXSIg=)
                          2: V8k0n9rqEarIEgNITkDx8oQ4w44.roa (hash: BkPM7QHIpoN+47+MwN2OB6x0pADkUYwi5FlR1ZsHikQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:7f:71:dd:e1:87:30:5f:b4:34:80:90:49:15:92:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Apr 20 00:00:51 2025 GMT
            Not After : Apr 21 00:00:51 2025 GMT
        Subject: CN=a65dc48e19ac438b0c4e17d5411e328ed8c2b34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:8e:fe:92:eb:70:e2:97:de:3d:0c:36:34:
                    1e:2b:b6:c9:b7:2e:d2:77:4d:f2:0a:92:2c:60:a1:
                    74:3b:e0:ec:e3:20:97:a7:29:45:91:9d:35:b0:cb:
                    25:fa:ad:44:b5:5a:73:87:d7:b6:06:27:19:67:bc:
                    1c:a9:11:bd:1a:1a:d7:56:20:8e:7f:9f:f9:22:6f:
                    62:73:42:41:e8:df:a0:5f:27:d2:21:4a:6f:dd:2b:
                    0a:42:05:01:2a:77:3d:1b:96:6c:4c:78:63:fd:7c:
                    e2:4d:49:ea:07:34:f8:98:db:8f:51:2c:e4:58:af:
                    c0:52:2b:1c:53:0d:f7:56:30:56:b1:47:e1:8c:eb:
                    e5:ec:73:e6:45:62:92:ea:7f:f7:b8:59:65:67:08:
                    b1:4e:a0:61:7d:9d:a5:29:d4:4c:3c:ad:4d:bd:42:
                    68:f8:f2:06:f4:69:39:f5:a2:ff:c6:f0:cb:db:32:
                    76:d3:b9:90:fd:98:40:69:63:1c:a4:e9:01:bb:21:
                    e5:c5:75:cc:e6:89:b9:a5:94:d3:ee:78:be:a3:8f:
                    a3:31:34:82:6d:bc:28:f5:81:a5:3e:8e:a0:7e:8a:
                    b9:d2:89:dd:33:af:fd:c2:55:c2:56:2e:06:b9:94:
                    b4:88:9b:d4:1a:7b:2c:fb:8f:e3:a7:cc:3e:35:51:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:C4:8E:19:AC:43:8B:0C:4E:17:D5:41:1E:32:8E:D8:C2:B3:4C
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:f9:47:81:5f:ad:af:bc:f8:07:01:7b:75:ef:af:96:de:
         eb:38:49:63:06:d9:1f:74:95:bd:f0:33:dc:fc:30:a4:1d:c1:
         7f:2b:f0:2b:24:9d:e3:69:6c:fc:2f:b9:4f:33:e1:bf:f1:a2:
         1c:7e:2b:04:39:f6:e2:15:0a:7f:e0:62:de:ba:b7:c7:ef:bd:
         02:08:d8:59:1a:5e:ec:dc:55:dc:1e:1a:91:25:49:70:54:8c:
         80:84:3d:47:01:95:1a:96:2f:aa:1f:c9:7b:c7:2f:e9:87:54:
         40:f5:b4:6a:a4:22:2b:d4:ff:b8:51:44:91:1d:89:12:49:62:
         5e:bd:ca:aa:ef:cc:dd:6e:c8:82:98:2c:06:40:b3:66:1d:4a:
         0b:c3:66:fc:17:53:11:f4:f1:a5:bc:48:87:13:30:fe:36:41:
         1c:1b:36:4f:08:63:d3:4f:bf:a8:fc:9b:f1:09:a7:09:d0:ed:
         2b:bb:b5:1e:7d:f1:65:45:43:1c:0d:d5:ae:99:61:ca:d1:07:
         5f:5a:73:7c:81:0e:c6:e8:e4:24:c0:a6:5b:f8:2f:ae:20:c2:
         d6:4d:8f:b5:84:90:74:f4:f2:99:46:ba:a5:69:c2:23:9a:c4:
         51:59:70:75:89:f6:ea:ff:15:cc:ce:1d:8a:6e:b7:fe:b1:3d:
         25:41:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:24:06 2025 by rpki-client