Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
File:                     LosErWkLczj3wP51zzs6eFabquU.mft (raw, json)
Hash identifier:          0mebEEgleZ93hl832Rr+B6BHbhNoL5T76cOHZo2Ph/g=
Subject key identifier:   DA:F1:0E:61:C9:46:E2:CE:AF:37:C1:DA:00:66:DF:CB:1D:CD:12:F3
Authority key identifier: 2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5
Certificate issuer:       /CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
Certificate serial:       0196895C44140C518FD03E9C6D4603550EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
Manifest number:          0FA7
Signing time:             Thu 01 May 2025 01:00:47 +0000
Manifest this update:     Thu 01 May 2025 01:00:47 +0000
Manifest next update:     Fri 02 May 2025 01:00:47 +0000
Files and hashes:         1: LosErWkLczj3wP51zzs6eFabquU.crl (hash: KwdlmgIipIJx/GmgMzlN14SOAEoByfi+7uYw/pvMbb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:44:14:0c:51:8f:d0:3e:9c:6d:46:03:55:0e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b04ad690b7338f7c0fe75cf3b3a78569baae5
        Validity
            Not Before: May  1 01:00:47 2025 GMT
            Not After : May  2 01:00:47 2025 GMT
        Subject: CN=daf10e61c946e2ceaf37c1da0066dfcb1dcd12f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:32:9e:14:de:d2:ae:34:05:df:29:0a:01:
                    0e:67:50:86:52:4a:16:d6:d8:c7:92:cc:ac:52:c7:
                    1f:b3:1c:10:d4:59:ea:82:e9:e8:fd:ef:2f:12:5b:
                    dc:ba:42:ae:f9:75:fb:5a:d7:86:e5:5c:ef:e5:17:
                    67:96:86:57:ba:62:63:4a:d7:f3:06:04:b8:17:6e:
                    71:c4:ec:fc:e6:26:3c:2a:eb:06:de:e0:b5:10:92:
                    2f:d1:9c:35:60:7a:11:de:a9:52:c7:36:16:3d:fa:
                    ae:aa:58:56:25:13:ac:13:e3:8f:d7:bf:a9:c1:17:
                    8a:1a:22:f7:d1:54:e8:c8:04:35:93:a0:38:aa:31:
                    31:e3:bf:81:aa:62:cd:5f:77:1a:d0:35:e9:71:3e:
                    99:5a:cc:7b:40:8c:05:51:f4:df:91:fb:ad:50:bb:
                    f7:87:31:b3:64:37:33:e5:c8:02:12:73:6b:95:70:
                    3a:b7:6f:32:33:ce:57:d2:9a:b0:6a:f9:b7:31:c5:
                    49:c1:e9:2f:09:71:09:2e:02:a7:1f:00:cf:78:19:
                    d9:82:70:ff:bc:ee:49:29:ef:f3:0d:4f:93:93:26:
                    b6:75:16:d5:d5:91:fe:65:47:2d:e3:f9:b7:2c:1e:
                    9d:e7:77:0a:78:e6:be:c8:d9:ed:3c:35:66:16:a8:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:0E:61:C9:46:E2:CE:AF:37:C1:DA:00:66:DF:CB:1D:CD:12:F3
            X509v3 Authority Key Identifier:
                keyid:2E:8B:04:AD:69:0B:73:38:F7:C0:FE:75:CF:3B:3A:78:56:9B:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LosErWkLczj3wP51zzs6eFabquU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/LosErWkLczj3wP51zzs6eFabquU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:41:73:29:44:38:78:df:43:b6:cb:c2:14:af:36:c4:90:ce:
         cd:97:d2:53:46:42:bc:22:65:0b:bf:a7:9b:fc:7f:ad:9f:22:
         7b:bd:66:e6:f0:38:58:39:4f:03:4d:94:7e:85:c6:c5:17:f6:
         24:83:bd:6c:92:b2:84:74:a4:15:10:df:1e:b1:85:73:c9:e4:
         ad:f8:86:c5:84:f0:25:e8:1d:79:36:e4:9d:74:0a:9f:01:b6:
         d9:70:35:b7:48:d1:e4:76:47:42:6c:b8:a9:9a:de:fc:19:57:
         73:29:a0:25:3a:a9:d9:81:ff:38:ea:a8:c1:c0:1a:fc:d4:cb:
         f0:fd:53:87:30:80:34:2d:b4:7f:d2:b3:df:6d:82:06:75:b5:
         6a:e1:27:a4:b3:ac:00:27:73:ac:30:21:e7:4e:3d:6b:a0:cc:
         77:a6:54:89:17:9b:8a:3b:9f:a8:a5:6c:4f:21:ea:0b:0e:7b:
         74:1c:e8:2e:76:05:b9:22:7c:e8:02:79:83:c7:3e:28:68:40:
         b4:90:6d:fb:38:4b:e8:4b:e7:3f:e6:50:cc:3b:b5:37:88:2e:
         9f:e0:b5:88:cb:11:8c:5f:b0:dc:bb:1c:14:03:72:d7:42:c2:
         d3:72:d3:fa:ca:95:6b:bf:67:b9:f3:d0:92:4f:3e:f8:a6:ab:
         0b:97:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:59 2025 by rpki-client