Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          Ik9bUgJay/kXgNnGxO+uWulSpnblCgjdkCCHvkv2bww=
Subject key identifier:   CD:E1:61:B4:55:B6:D9:FA:02:D6:C7:56:B2:9B:E4:27:D7:B0:5A:90
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019678D68FFE6C265148D134603A06B6C66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0786
Signing time:             Sun 27 Apr 2025 20:00:49 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:49 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:49 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: CsAv0PMNWQMLnLM5M0R7d6v58fAUg4hXDntny3Vzi94=)
                          2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:8f:fe:6c:26:51:48:d1:34:60:3a:06:b6:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Apr 27 20:00:49 2025 GMT
            Not After : Apr 28 20:00:49 2025 GMT
        Subject: CN=cde161b455b6d9fa02d6c756b29be427d7b05a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:65:f5:c5:bc:e5:74:5d:87:f8:91:56:bb:
                    2a:06:a9:46:9c:39:40:a8:a6:c8:05:0f:86:01:e8:
                    73:37:8d:05:b1:23:f4:ab:ac:27:77:f2:6b:15:e2:
                    94:9a:59:12:59:a6:87:6a:7e:84:36:34:12:46:40:
                    8d:27:e5:09:ad:89:54:40:62:d1:b1:7a:00:20:67:
                    ca:1b:00:58:a6:b0:c1:57:fa:f5:cc:69:09:0f:b4:
                    14:35:d5:d4:78:86:42:1e:90:bd:59:ec:dc:6b:84:
                    4e:76:1b:0b:54:a6:8e:45:8d:10:ec:1f:27:bd:cc:
                    df:ee:2e:1c:d7:e0:a6:8d:89:aa:03:d8:a5:a7:7d:
                    92:ec:33:4b:c5:ac:79:04:7c:4a:df:06:17:ba:d3:
                    83:e5:92:94:c8:56:fb:0f:d4:07:3d:de:d4:d0:04:
                    4c:d6:21:e2:39:ca:6b:0d:51:55:4c:c4:1d:dd:6b:
                    08:c6:c2:a6:43:24:9f:d5:70:5c:52:2c:2e:dd:ba:
                    11:69:8a:26:43:b6:0e:db:b4:50:e6:2f:45:2f:f9:
                    1f:aa:73:0d:52:b8:c6:58:ee:b2:cb:db:f5:14:89:
                    1a:5c:02:d9:2a:58:4a:01:1c:45:07:7e:a8:62:6c:
                    2e:b8:38:75:7b:be:74:16:8d:d7:0d:56:11:31:f8:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:61:B4:55:B6:D9:FA:02:D6:C7:56:B2:9B:E4:27:D7:B0:5A:90
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:fb:b3:40:62:02:5a:36:f4:fb:fc:71:3a:31:0e:2c:ba:
         07:cf:1e:8b:23:60:6e:19:ea:8e:95:84:dc:0a:32:36:d0:0b:
         cf:6b:d0:c3:51:94:e5:f5:f9:c8:4c:42:7c:bb:f9:33:f2:bd:
         62:f0:73:27:02:81:c8:39:7a:97:24:77:1c:fe:38:eb:7a:85:
         dc:40:6e:6e:1d:c0:d8:8b:ec:15:2c:d0:b0:01:76:91:ff:84:
         a1:2f:97:52:6f:b4:ce:cc:d0:ef:93:a3:6e:23:0b:47:1a:a4:
         7a:a4:29:8f:30:54:2b:a5:49:00:97:59:f3:91:84:1c:4d:cc:
         01:af:d1:63:ec:6e:61:41:42:7e:de:08:3d:84:bd:07:7d:d6:
         12:58:d5:44:6a:5b:ac:9f:7e:31:7d:bf:68:c6:9d:6f:b8:5f:
         3d:60:97:fb:e7:ed:00:ea:a2:81:38:56:38:ba:c3:e3:13:cd:
         dd:34:a8:33:a3:7f:ae:e8:79:ea:9a:ab:d6:33:d8:82:f8:af:
         61:fd:a9:79:17:5a:12:70:4b:56:7d:64:f6:f4:3e:17:eb:f6:
         1f:f7:a8:0a:59:96:db:88:4a:b1:3d:59:d0:84:e3:fe:e5:db:
         f6:0b:bf:59:b9:e4:73:86:ad:f0:c8:44:15:c3:96:b1:40:80:
         3f:c4:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:02:12 2025 by rpki-client