Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File:                     LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier:          9+XUTtahnupc7XFJJzbBa3EGgR7IKYhF7BcVk1NhgaI=
Subject key identifier:   13:77:A4:17:8A:A6:B0:D6:AB:05:89:74:34:D2:40:B7:20:57:A2:95
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer:       /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial:       019673B06096F854B737FE9895ECE9756707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number:          01C3
Signing time:             Sat 26 Apr 2025 20:01:00 +0000
Manifest this update:     Sat 26 Apr 2025 20:01:00 +0000
Manifest next update:     Sun 27 Apr 2025 20:01:00 +0000
Files and hashes:         1: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: vyuViUha/J36RZkTjFNEETzrXTRlzDvqcs56yS5vxog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:60:96:f8:54:b7:37:fe:98:95:ec:e9:75:67:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
        Validity
            Not Before: Apr 26 20:01:00 2025 GMT
            Not After : Apr 27 20:01:00 2025 GMT
        Subject: CN=1377a4178aa6b0d6ab05897434d240b72057a295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:1a:3e:89:80:d9:3a:9b:b2:15:f8:12:91:
                    f6:1b:eb:9d:b1:15:4d:73:40:a5:1c:81:15:dd:bd:
                    82:df:8a:c8:49:a3:83:b2:63:bc:24:f0:35:d4:f0:
                    ea:f0:f7:56:a1:66:19:c9:2c:9c:1b:1d:2f:0e:c5:
                    75:6f:71:4f:f8:cc:1f:f5:e0:b7:4f:28:e5:3d:d9:
                    21:c0:36:41:80:d7:e2:1e:31:df:64:3b:dd:40:28:
                    f3:0d:32:ce:3e:8d:60:df:06:c0:2c:65:df:44:d1:
                    84:67:70:c6:69:71:1c:3f:dd:c2:b8:19:dc:1a:23:
                    30:05:6d:2d:ea:ac:ce:62:cb:8a:86:ac:8d:29:cd:
                    5d:80:6b:52:32:b6:be:77:15:fd:1d:95:07:ab:1b:
                    32:fb:7e:54:b8:86:2b:08:25:87:cf:22:44:4c:a3:
                    43:e3:1f:c2:91:57:15:8b:49:00:e9:53:bf:d3:60:
                    31:55:bf:5c:9d:80:8a:30:eb:c4:4a:c9:76:e3:e4:
                    ae:3a:32:03:76:69:4a:88:2e:39:a0:cd:46:c9:74:
                    b5:3a:55:45:fe:cf:f6:42:6c:1d:d0:e2:e1:a4:ff:
                    45:41:6d:3d:48:97:b2:ae:d3:50:67:9d:68:50:e6:
                    2c:a4:7f:86:99:3f:8a:19:99:18:2d:81:64:8c:6d:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:A4:17:8A:A6:B0:D6:AB:05:89:74:34:D2:40:B7:20:57:A2:95
            X509v3 Authority Key Identifier:
                keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:3f:da:a0:60:ab:ce:7b:31:50:38:1b:23:07:4a:1b:1f:
         45:ca:e6:84:3a:96:4b:6d:30:7b:a3:d8:5f:70:1c:14:df:07:
         01:b4:69:c3:eb:67:59:91:b4:ae:65:d8:10:cb:da:36:a1:9a:
         c3:b8:4c:7a:8b:fd:00:ba:9f:b4:6d:63:3c:ee:48:c5:a4:a0:
         09:0e:f0:ad:5c:8c:a0:4f:aa:7f:a5:63:ed:c4:d8:da:cd:ea:
         ff:3d:e6:23:0c:69:a0:f5:77:e0:29:3d:32:6f:30:6b:94:99:
         26:cb:64:27:b9:ce:f7:93:b4:ba:19:b7:f2:44:9b:76:b3:20:
         31:e6:f9:b3:73:6a:3a:e4:f2:cc:73:f5:44:3c:23:60:92:25:
         7e:31:7e:4a:67:c5:80:dc:92:3d:02:26:ae:d9:7b:3a:62:a0:
         5e:32:9f:38:29:2b:33:cc:64:7c:48:2f:13:5a:a5:f4:cd:6d:
         8c:1c:54:ee:d7:4c:eb:20:6e:59:b9:62:46:8c:c7:83:67:d3:
         21:7c:ca:4e:2c:8e:ae:89:d4:65:fb:b6:ac:b3:08:8e:fb:f5:
         82:69:3a:d3:75:2f:16:91:7a:06:0a:4d:fe:95:53:8c:cf:b1:
         9d:70:b6:a5:4b:80:4c:40:31:d9:14:87:c7:85:47:7b:fa:a9:
         27:d3:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:24 2025 by rpki-client