Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          NxMvNGCXitzBVmEBkIWEWsqXW/KOA3KsyX8iK4nfyqA=
Subject key identifier:   8F:54:CF:47:83:5A:E8:13:1F:78:8C:35:99:80:56:1F:D1:D3:D4:90
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       01963B09CFD40AE4589FBAF66254AD0ACFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          1457
Signing time:             Tue 15 Apr 2025 20:00:20 +0000
Manifest this update:     Tue 15 Apr 2025 20:00:20 +0000
Manifest next update:     Wed 16 Apr 2025 20:00:20 +0000
Files and hashes:         1: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: 6cK5wcibB81ja3XTXI6oP2QH84smnkMZ0wCJ6iFShn8=)
                          2: LhfwTdWFWStLfcssza7_4OeUEq0.roa (hash: 733IJ4DXj92/axm7cq0je/9e/z1H6N96iBs0WMeqrVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:09:cf:d4:0a:e4:58:9f:ba:f6:62:54:ad:0a:cf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Apr 15 20:00:20 2025 GMT
            Not After : Apr 16 20:00:20 2025 GMT
        Subject: CN=8f54cf47835ae8131f788c359980561fd1d3d490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:62:aa:12:7f:01:57:f0:4d:01:39:e7:6b:
                    fa:84:49:72:bd:22:e8:4c:60:03:b4:77:ed:51:29:
                    b8:fe:73:bd:0b:91:6d:58:82:04:e0:b3:2c:89:be:
                    8d:67:39:d1:8d:ed:38:2f:c6:57:ac:ad:f3:d4:ce:
                    83:43:34:33:49:dc:79:7d:57:de:21:f6:c9:84:9b:
                    01:c6:3b:b4:5b:f0:d5:74:2d:72:26:7a:4c:ca:fe:
                    91:0f:a4:05:bb:f8:c2:76:d1:14:d1:77:e1:a6:a9:
                    27:a4:a1:bb:9a:00:ab:f5:7f:99:ba:06:74:c3:4c:
                    95:3f:6d:fc:3a:c0:ad:93:0b:5f:11:91:8c:b2:95:
                    77:ad:4b:f1:30:8f:b2:9f:1f:37:5f:a4:c3:6a:df:
                    c6:48:bf:b3:bf:5d:7c:f4:45:dd:d3:72:0a:e8:8c:
                    ab:63:21:03:42:34:de:f8:97:ac:cb:66:d6:33:a9:
                    c3:1a:27:3b:3e:e4:a3:94:03:d2:99:cc:4b:a5:fd:
                    39:61:c6:40:de:12:d8:97:9f:d0:80:20:ee:a1:8f:
                    cd:66:23:c5:44:c5:69:26:ec:7f:b9:09:fc:c4:45:
                    a9:d5:85:03:39:ba:e0:f2:32:5b:46:6e:86:9e:33:
                    ab:41:ce:03:02:0d:fe:fa:c1:80:22:9c:f6:0f:b9:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:CF:47:83:5A:E8:13:1F:78:8C:35:99:80:56:1F:D1:D3:D4:90
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a2:90:ee:1b:24:f6:58:2c:9e:b4:2c:9b:fa:78:26:36:d1:
         c0:e4:18:c5:47:44:44:ab:7c:6e:92:0f:cc:cf:a3:d5:d9:25:
         b1:10:47:0c:bf:25:80:8d:fd:b7:6f:4e:06:94:a3:62:82:c5:
         53:42:a8:12:e2:bd:7d:eb:c3:d9:a0:e4:32:59:91:4e:47:b6:
         e8:d3:a7:bb:22:3b:70:81:b9:1f:81:26:17:6c:ea:0e:da:75:
         09:bb:32:cc:3f:25:05:ec:ba:0f:a5:77:66:5b:f5:d0:93:de:
         d7:6b:50:ef:53:98:d5:96:b3:4a:5d:80:da:e3:a9:8b:69:ef:
         8a:f3:cb:c8:a6:43:ce:a8:86:a5:2d:db:76:d1:5f:51:53:8d:
         66:d7:91:3a:39:cd:79:d6:f3:e5:8c:57:53:b3:97:22:bf:65:
         61:a5:25:c3:6f:6c:4b:af:1c:f4:8a:51:d5:06:8b:47:89:c7:
         d8:d6:09:56:1f:4d:8b:1f:f4:13:ee:ef:76:10:5c:8c:d0:35:
         56:39:cb:52:49:bf:35:e0:1a:92:df:20:9f:11:90:70:a1:41:
         72:9d:b6:8b:1f:32:e6:d7:ee:20:76:34:8e:7c:20:fd:05:11:
         d4:ca:20:f1:0b:0e:5e:46:f2:ac:33:79:94:49:0d:ee:f2:41:
         5b:dd:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:24:30 2025 by rpki-client