Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          4AWia7jsd2ThLBKIEnE7LXUYgNf3s+oG7U2F+SyVbbg=
Subject key identifier:   34:D4:D9:C9:2E:A8:A4:3A:58:14:C0:C3:57:9C:18:F6:EC:FE:9B:A9
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       0196873663E4321AFD4B93AF4DB10105872B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0333
Signing time:             Wed 30 Apr 2025 15:00:10 +0000
Manifest this update:     Wed 30 Apr 2025 15:00:10 +0000
Manifest next update:     Thu 01 May 2025 15:00:10 +0000
Files and hashes:         1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: vfvZQ1f1m0mVl3YBYBRQP/fq5hBPNN+35n4x3Dcbo6U=)
                          2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:36:63:e4:32:1a:fd:4b:93:af:4d:b1:01:05:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Apr 30 15:00:10 2025 GMT
            Not After : May  1 15:00:10 2025 GMT
        Subject: CN=34d4d9c92ea8a43a5814c0c3579c18f6ecfe9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:30:8e:51:7f:e1:4f:ee:bb:f6:aa:4f:94:
                    c5:1d:d7:a9:14:44:6b:4c:a9:f7:25:43:9f:db:13:
                    44:24:1c:5e:16:2c:3f:53:76:9f:78:e5:f7:dc:7d:
                    f5:a0:3f:8f:7d:dc:86:9b:b0:60:3a:62:e3:4c:85:
                    8b:5c:13:a3:46:61:b9:86:bf:29:97:13:3b:85:fe:
                    8c:0c:11:b3:b3:1a:aa:5f:9b:23:e8:20:05:27:ae:
                    7c:99:82:16:3c:69:61:18:91:3d:da:9e:7d:01:02:
                    0e:83:97:a9:b3:38:06:ba:d5:26:ef:ee:29:a8:f0:
                    58:ef:6c:92:86:b9:02:9f:85:6b:77:73:19:e3:7c:
                    70:bb:20:2e:5f:02:18:85:c7:4e:3e:d7:fc:88:80:
                    79:74:e1:74:17:5b:c8:cd:4c:fe:91:de:6d:7a:7d:
                    72:45:94:27:ac:b2:01:69:d5:c4:81:f5:40:c3:88:
                    2b:98:a6:51:f6:03:1c:3e:7d:88:a8:6b:79:3e:6c:
                    6f:55:55:36:f1:bf:2f:c9:42:e9:cd:e3:11:79:c2:
                    6b:2e:d2:21:9c:55:79:0b:ef:e9:cc:5c:ed:79:e7:
                    7f:91:1e:a0:6b:20:45:f5:ac:bf:a5:ad:da:e1:c5:
                    5e:c8:67:9c:3e:71:b4:bb:9e:a3:2e:bc:26:f2:99:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:D9:C9:2E:A8:A4:3A:58:14:C0:C3:57:9C:18:F6:EC:FE:9B:A9
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:d2:39:5f:fd:68:57:a1:35:7f:19:ef:a6:12:53:f2:9c:
         e0:88:36:65:40:80:4f:e3:30:b3:c7:a8:02:67:5c:89:48:ee:
         9c:5c:23:f9:7d:c1:d2:60:89:6a:45:a2:fb:89:15:7a:ab:c8:
         84:09:8c:ad:2f:33:51:ce:6c:0f:d2:64:de:74:a3:8b:0c:9b:
         11:2e:8a:fa:98:51:e9:0c:2f:12:68:cf:d2:64:e1:c3:20:aa:
         e3:a4:34:e3:55:a4:b7:ea:b0:c6:25:3b:d4:78:99:84:0d:b1:
         60:de:25:9c:6e:7f:00:03:92:b6:fa:1c:a4:fe:7b:84:07:fe:
         7e:96:78:0d:4f:35:c5:ff:c1:93:e5:e8:ee:73:d1:f4:e0:fb:
         e2:d7:0c:df:6d:a2:10:86:34:17:67:98:f2:39:92:9d:d7:2f:
         a4:d7:1a:ad:eb:92:a2:69:88:f9:fc:1d:f6:dd:07:22:72:7f:
         6d:ac:e4:b2:03:b6:e9:4b:7e:62:14:52:c7:15:03:58:7e:3c:
         15:83:d3:1e:69:e3:a1:14:ac:be:94:44:13:62:97:c3:61:71:
         9b:87:bf:65:18:8a:7d:0d:74:a7:e6:a1:77:60:98:74:ce:4e:
         6d:74:00:6d:1d:70:c8:36:48:72:5f:99:94:2c:e7:76:56:9d:
         c2:30:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:30:40 2025 by rpki-client