Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File:                     LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier:          KUT+yJ0y+U7ra8iJoaq88Pm87HmWiFWz5Ki1f70KMRM=
Subject key identifier:   32:06:00:BC:E6:31:74:25:78:C9:46:EC:59:AD:F4:47:A9:BF:85:66
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer:       /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial:       019652A5043D1E31126AEB720E6BC2841A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number:          14C0
Signing time:             Sun 20 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 20 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 21 Apr 2025 10:01:08 +0000
Files and hashes:         1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: 7UhndWoMNPIhZUjh5QsMDN86D9x18OWYL3QaH0RHCuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a5:04:3d:1e:31:12:6a:eb:72:0e:6b:c2:84:1a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
        Validity
            Not Before: Apr 20 10:01:08 2025 GMT
            Not After : Apr 21 10:01:08 2025 GMT
        Subject: CN=320600bce631742578c946ec59adf447a9bf8566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:86:39:43:ed:4d:37:6b:7d:45:dc:47:24:
                    44:2e:28:18:08:41:60:30:e4:a5:b4:f0:f1:6c:69:
                    67:86:fb:26:29:87:65:49:a4:1d:48:c9:47:a8:c3:
                    3e:90:62:d6:49:01:55:2c:88:15:2c:af:93:89:0b:
                    06:fb:01:ad:42:ba:9b:e4:8d:30:17:dd:b4:58:16:
                    0e:34:b4:03:7d:f3:3d:b3:42:cc:ad:23:ec:6e:d9:
                    3c:75:78:7e:93:c8:37:a5:29:ab:aa:bd:b7:99:f7:
                    17:31:ec:fa:a1:c8:b6:e8:cc:07:13:c0:f4:42:15:
                    44:20:f0:7c:f2:f8:ce:ef:f3:fb:0e:40:ff:f9:68:
                    9c:a7:f9:00:aa:52:2c:0b:52:ab:08:c7:f8:1d:94:
                    5c:97:33:92:e6:a3:2b:25:c9:26:67:2c:a9:26:5b:
                    27:6a:2d:0a:17:66:17:f7:34:54:aa:ea:66:cc:42:
                    23:bf:37:b1:60:35:5f:78:f6:9f:cb:41:35:67:c7:
                    15:eb:29:77:ba:00:be:01:24:dd:40:5e:07:92:96:
                    f8:1c:aa:42:33:f4:74:10:b2:89:31:94:95:1a:08:
                    fd:fe:0b:6a:8f:6b:c9:54:1c:05:74:5b:cc:b5:58:
                    e4:d8:56:0e:b9:a6:9d:bb:59:6f:b4:eb:f6:3e:b0:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:06:00:BC:E6:31:74:25:78:C9:46:EC:59:AD:F4:47:A9:BF:85:66
            X509v3 Authority Key Identifier:
                keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:84:a1:6a:7c:5e:36:0e:12:d6:37:c0:62:2c:66:e4:f6:52:
         3f:02:29:c0:b8:e8:9e:a1:a5:23:8a:ed:ac:44:50:bf:1d:fd:
         ac:b9:72:19:99:4b:f9:c4:2d:56:64:10:3b:a5:8e:b5:74:44:
         20:05:c9:b6:6d:cb:62:59:2d:ea:75:be:1d:e4:a8:a5:d1:67:
         40:c3:93:59:e6:64:27:0b:a1:4c:b3:bb:4d:0a:4c:1d:6a:9b:
         64:d7:2a:b9:6b:3c:8c:5f:cb:c4:31:a8:1e:fa:b1:01:8d:55:
         64:fe:fd:5a:08:74:38:79:60:7a:73:00:6e:f2:79:47:88:98:
         68:5d:2e:31:a4:9a:01:5f:37:ca:5d:2d:7d:31:15:d1:9c:12:
         39:86:55:80:0d:2a:cf:bc:e4:45:4b:ce:e7:9f:37:9f:c6:6d:
         4e:7d:bb:dc:90:1e:1c:ba:6b:84:e6:97:3b:ae:9e:f4:5b:0e:
         e9:7c:22:ee:bf:b8:d6:f9:d6:49:46:db:ad:6c:3e:34:0f:55:
         bc:8f:e9:8c:23:40:92:b0:1c:90:a6:a7:1b:fc:6a:8d:fb:c1:
         54:58:30:ae:eb:da:39:4a:85:79:70:f2:ed:80:27:1e:42:4e:
         a3:a0:a4:d1:43:86:f4:73:bf:23:01:a1:a4:d1:42:84:b2:b3:
         33:8d:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:44:31 2025 by rpki-client