Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          mv0PkXAf6T0pEYNJTwUYnbMyA8oJBHH+kv6N1qlLVJ0=
Subject key identifier:   45:00:38:09:97:42:9F:84:49:D7:EC:12:48:D6:7A:38:94:CC:71:53
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       0196760D2FD8009FE024A386AE754E75E746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:37 +0000
Files and hashes:         1: L7Ga4vuHYQeZfIto9Yq8tgXI9O0.roa (hash: teLoUEZvE4nl+9Xvo/9jLeTnZ41UIdxLpAcgTrbJ4sA=)
                          2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: JmZtX7ccIymQQD/v9x9SpmXyMrhWvAJo4qQezHzPz2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0d:2f:d8:00:9f:e0:24:a3:86:ae:75:4e:75:e7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Apr 27 07:01:37 2025 GMT
            Not After : Apr 28 07:01:37 2025 GMT
        Subject: CN=4500380997429f8449d7ec1248d67a3894cc7153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:4a:31:db:fa:9d:fc:2d:23:22:fa:92:96:
                    c2:c0:b6:99:e2:4a:38:74:69:3c:45:08:4f:90:af:
                    82:1f:72:dc:5e:cf:28:88:23:61:a3:72:99:1c:a1:
                    cb:55:69:ba:38:1a:37:43:f7:a5:84:0c:cc:d1:b3:
                    5d:d6:61:9b:de:8e:32:58:bc:23:98:e6:44:49:18:
                    9a:8a:d4:e4:2d:ca:18:2b:c1:b9:5d:7c:94:72:3a:
                    5e:5a:b3:e4:4e:65:96:18:a0:4c:31:0d:ac:84:d8:
                    ac:9d:45:7c:ec:9d:c6:53:ec:ee:90:6b:7b:a5:5c:
                    51:44:17:6a:fd:49:7f:bc:c1:95:fa:78:de:47:6e:
                    bc:15:bf:33:58:b4:3e:a2:11:5e:71:98:4f:e8:3b:
                    30:6a:8e:cf:13:ec:d7:dd:e1:ea:68:2d:2e:b4:ae:
                    5e:87:f7:a1:a8:d8:a0:05:df:cc:17:dd:d3:d3:bb:
                    67:4f:5d:4c:ca:78:a7:6a:fa:82:38:90:f1:f9:11:
                    7e:20:b6:80:4d:26:3b:e9:a8:4d:5a:5a:44:cd:25:
                    a8:6d:65:46:f2:31:2d:14:24:88:65:1a:9f:64:bc:
                    55:14:2c:e2:7f:a4:79:3f:39:dd:18:62:58:3c:4b:
                    44:a2:be:ad:13:7f:98:fd:00:46:53:0f:ab:92:ff:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:38:09:97:42:9F:84:49:D7:EC:12:48:D6:7A:38:94:CC:71:53
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:83:e0:79:6e:8f:d7:36:de:2c:4f:8f:12:6e:b8:07:91:
         db:27:3d:1a:f1:5e:1e:5f:26:35:34:fd:f4:17:14:ac:b4:8b:
         5f:cb:bc:b4:42:f4:d7:09:3e:f3:64:59:cb:0e:b9:c7:f6:3b:
         50:0d:0b:22:7a:ba:87:14:f0:d9:a6:93:d5:11:5a:1c:3e:15:
         22:71:fc:74:c1:8b:f6:be:4b:f7:d8:7f:1d:f9:f2:9b:9e:01:
         c5:05:8c:e0:46:68:18:46:28:dc:75:a2:14:f1:de:3c:df:73:
         7b:ed:b4:03:59:89:08:db:ee:8c:eb:ca:f2:c9:1b:92:ed:cd:
         3c:93:a1:48:50:58:d8:db:2f:7f:41:60:df:8f:4b:31:a3:49:
         91:c1:8b:bc:9b:2b:ee:4a:ea:17:83:f5:30:b3:a7:5a:91:4b:
         ae:81:87:1c:5e:43:51:e1:72:b4:a3:c2:07:fa:af:9a:f6:1d:
         ef:ee:6f:5d:91:9d:ca:a1:9a:92:a1:bd:62:28:60:b9:eb:82:
         bf:ec:92:e1:ab:89:06:86:05:10:b5:89:47:1e:fe:b7:16:7e:
         04:fb:ce:1a:85:16:4f:d2:96:f0:56:2c:26:70:2d:b1:70:9b:
         38:5f:2b:48:4b:fd:82:51:8c:9c:7f:e4:b5:b6:33:a2:3f:c6:
         0d:3b:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:12 2025 by rpki-client