Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          79+czE/ofb9da1v9STfhP+5dAeL4p0g4hbGqk0b3d1k=
Subject key identifier:   2C:15:BB:2A:AA:26:97:A3:38:2F:A3:21:BD:9F:BC:B5:FE:4E:65:25
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019511A2A1C5690AF51F2EB5C1AD04E61327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          13BD
Signing time:             Mon 17 Feb 2025 02:00:25 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:25 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:25 +0000
Files and hashes:         1: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: bEpWFJvlxQRWDpouH412sJP8NfKIKNSs5APPem5bAx0=)
                          2: LhfwTdWFWStLfcssza7_4OeUEq0.roa (hash: 733IJ4DXj92/axm7cq0je/9e/z1H6N96iBs0WMeqrVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:a1:c5:69:0a:f5:1f:2e:b5:c1:ad:04:e6:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Feb 17 02:00:25 2025 GMT
            Not After : Feb 18 02:00:25 2025 GMT
        Subject: CN=2c15bb2aaa2697a3382fa321bd9fbcb5fe4e6525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:95:c3:d1:fc:f1:5c:76:a9:95:52:39:de:
                    cd:27:66:ab:15:67:e3:c2:3e:ac:34:e1:8f:d4:5b:
                    14:ab:29:69:01:b4:c7:7f:5c:1d:ad:67:c1:3e:32:
                    31:4e:5f:30:2d:ac:7b:86:c2:21:04:ff:ec:65:d8:
                    80:89:30:8d:89:57:39:26:f6:f2:55:30:33:69:ec:
                    7e:c3:90:13:3f:99:05:fe:89:14:aa:19:47:84:74:
                    65:d7:6b:34:57:28:58:56:82:b2:0a:f3:4f:3a:15:
                    3f:5e:4f:8c:f3:b7:4c:4d:f5:eb:56:76:8f:4a:4d:
                    a6:58:76:c8:61:95:8a:60:a7:cd:db:30:3f:f6:d2:
                    07:11:ce:ac:6e:33:f1:c5:60:98:76:01:0c:84:e2:
                    6e:4b:53:f2:76:a9:c1:96:fd:fb:37:93:22:59:6a:
                    d6:1f:e8:25:f0:84:66:01:ea:ca:38:32:a9:18:fd:
                    dd:6b:57:92:2a:72:9b:4f:4e:fa:a5:95:84:36:2d:
                    ef:b8:e3:9a:6b:60:fd:5d:24:65:cd:96:1a:4a:5f:
                    06:7c:e1:c4:71:ec:bf:40:09:ef:8e:2f:aa:6f:28:
                    bd:5f:5e:64:6e:ff:1b:ca:99:70:5c:f7:13:44:8a:
                    ca:bd:12:24:e2:e7:1a:db:17:07:8d:e9:c6:d9:2c:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:BB:2A:AA:26:97:A3:38:2F:A3:21:BD:9F:BC:B5:FE:4E:65:25
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:ab:64:38:70:98:41:65:52:aa:8f:4f:0f:ed:ac:eb:4b:
         30:4d:5d:f3:f7:a1:e4:19:94:0d:3a:c1:a4:39:e0:ba:3e:06:
         82:b8:ba:be:27:79:f9:e4:a9:0b:64:18:e0:8e:eb:c0:bd:f0:
         da:04:6b:a6:02:2a:aa:93:3f:83:8c:ab:ae:c7:2f:3e:20:68:
         79:16:5e:47:b9:72:57:04:55:b8:5d:eb:4c:da:3a:d0:d9:1a:
         8d:46:5b:c7:29:63:d6:3d:5f:97:eb:1f:f4:83:5a:1f:4b:45:
         d9:45:5a:63:55:aa:6c:eb:3e:84:0d:51:2d:0e:8c:63:15:5b:
         56:69:a4:2c:9e:82:a9:13:6d:37:76:b2:b3:ee:cb:aa:ef:99:
         68:00:1c:ab:a7:52:de:3f:08:8b:53:4a:4d:bb:9f:63:2e:42:
         c2:89:db:05:3d:24:20:b5:23:a7:17:64:44:f2:87:62:c4:1e:
         c7:b3:4e:96:b1:12:74:73:68:34:9e:aa:eb:c0:9d:29:d5:2c:
         b1:e5:49:8f:17:55:86:83:f2:3f:c4:3c:04:31:2c:81:67:a7:
         bb:8e:15:d6:c9:b6:87:bc:06:0c:0e:3c:9d:e6:4b:90:ce:c8:
         9b:54:94:ac:af:c5:92:14:73:11:47:6b:95:a4:b9:79:2b:ff:
         1e:cc:ae:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoqHFaQr1Hy61wa0E5hMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky
OGU5YjIwHhcNMjUwMjE3MDIwMDI1WhcNMjUwMjE4MDIwMDI1WjAzMTEwLwYDVQQD
EygyYzE1YmIyYWFhMjY5N2EzMzgyZmEzMjFiZDlmYmNiNWZlNGU2NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjqVw9H88Vx2qZVSOd7NJ2arFWfj
wj6sNOGP1FsUqylpAbTHf1wdrWfBPjIxTl8wLax7hsIhBP/sZdiAiTCNiVc5Jvby
VTAzaex+w5ATP5kF/okUqhlHhHRl12s0VyhYVoKyCvNPOhU/Xk+M87dMTfXrVnaP
Sk2mWHbIYZWKYKfN2zA/9tIHEc6sbjPxxWCYdgEMhOJuS1PydqnBlv37N5MiWWrW
H+gl8IRmAerKODKpGP3da1eSKnKbT076pZWENi3vuOOaa2D9XSRlzZYaSl8GfOHE
cey/QAnvji+qbyi9X15kbv8byplwXPcTRIrKvRIk4uca2xcHjenG2SxakwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwVuyqqJpejOC+jIb2fvLX+TmUlMB8GA1UdIwQY
MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt
OWU1ZjkwNTM4MzM2LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2
LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj2rZDhw
mEFlUqqPTw/trOtLME1d8/eh5BmUDTrBpDnguj4Ggri6vid5+eSpC2QY4I7rwL3w
2gRrpgIqqpM/g4yrrscvPiBoeRZeR7lyVwRVuF3rTNo60NkajUZbxylj1j1fl+sf
9INaH0tF2UVaY1WqbOs+hA1RLQ6MYxVbVmmkLJ6CqRNtN3ays+7Lqu+ZaAAcq6dS
3j8Ii1NKTbufYy5CwonbBT0kILUjpxdkRPKHYsQex7NOlrESdHNoNJ6q68CdKdUs
seVJjxdVhoPyP8Q8BDEsgWenu44V1sm2h7wGDA48neZLkM7Im1SUrK/FkhRzEUdr
laS5eSv/HsyuyA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:50 2025 by rpki-client