Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File:                     LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier:          EF1bLWCQ4l7Igd32ULKMGyUqIct+z0BbPD7u0CdxxzA=
Subject key identifier:   DE:12:70:5C:53:3F:D4:4C:8E:73:34:7E:16:8E:5F:86:11:CB:A3:D1
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer:       /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial:       0196771E85DBB777D340BF5F031022545049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number:          0797
Signing time:             Sun 27 Apr 2025 12:00:10 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:10 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:10 +0000
Files and hashes:         1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: wwGiqEFTQ1pjDFeW/Tpj8EQx8Chvu9YGite1Sh9xjEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:85:db:b7:77:d3:40:bf:5f:03:10:22:54:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
        Validity
            Not Before: Apr 27 12:00:10 2025 GMT
            Not After : Apr 28 12:00:10 2025 GMT
        Subject: CN=de12705c533fd44c8e73347e168e5f8611cba3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:29:03:2d:a3:3d:7f:81:8f:95:08:d0:07:
                    c6:b6:54:8a:51:a2:c2:3e:4c:12:ab:5c:ac:f5:3d:
                    44:fc:ec:8d:f6:80:c9:71:42:79:ec:d7:72:eb:ec:
                    83:78:e3:f2:e5:0c:34:65:62:8a:26:01:25:67:e0:
                    cf:f5:98:7f:8c:ff:0f:e1:0c:77:30:c2:39:3f:11:
                    94:3d:c9:55:f5:d8:14:14:5c:32:18:ff:97:48:9c:
                    c1:c9:62:b6:eb:5c:dd:c1:35:eb:27:0e:94:2f:a6:
                    44:ea:ff:82:29:37:fc:5a:99:9f:12:95:e0:93:83:
                    01:f5:d1:f4:9b:18:86:10:80:fc:cf:1d:bb:3c:ff:
                    16:6f:1a:72:c7:04:8f:85:aa:13:52:81:f0:68:d7:
                    13:fc:b3:00:e5:e1:0e:98:74:5d:3d:2d:6c:af:78:
                    c8:aa:a4:ba:d9:2d:92:02:66:74:16:4d:cf:6b:c6:
                    c4:03:37:eb:ae:ea:11:0e:51:32:a4:9f:fc:fb:cb:
                    b7:9a:eb:c9:3c:14:04:dc:bc:96:9f:89:2b:28:b9:
                    e3:8b:eb:11:3f:07:4d:21:42:68:5b:fd:68:5c:bf:
                    c6:08:ef:9b:af:7d:1a:83:b4:a4:ec:84:51:32:75:
                    ae:c6:5c:b9:ea:22:5f:64:4d:81:94:e6:f8:0e:6e:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:12:70:5C:53:3F:D4:4C:8E:73:34:7E:16:8E:5F:86:11:CB:A3:D1
            X509v3 Authority Key Identifier:
                keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:2a:2c:64:29:48:5d:3f:32:0d:49:23:86:60:37:de:73:53:
         32:ba:9b:a5:b8:bc:f6:4c:c5:f8:a2:b0:3a:0b:8f:30:01:7f:
         31:e2:a8:4f:b3:82:2f:b9:3a:29:9d:b1:6e:fc:69:48:aa:93:
         d6:97:3d:09:81:4d:fa:9b:42:22:51:5d:d1:0d:15:e6:c4:6c:
         a9:95:86:88:9e:ac:49:76:19:86:6f:29:61:4c:ec:ca:20:cd:
         a2:b0:0b:32:8d:0e:97:eb:7a:d5:c3:ba:90:d1:20:1c:66:08:
         fc:ea:18:31:6f:43:f6:48:a5:ac:b2:0c:35:15:f7:66:45:95:
         53:0a:35:94:3a:67:5d:d8:54:2d:50:3e:dd:d3:6e:69:1f:a4:
         70:46:57:27:5f:01:b9:bd:81:b8:dd:4f:6c:7e:71:5b:54:2e:
         bc:b8:16:2e:d6:eb:20:3e:d5:ca:b4:f7:0a:6f:94:9a:06:c3:
         e2:e0:4c:3d:00:a4:c9:a1:10:c0:1d:1e:57:4e:98:e9:f7:26:
         2d:f3:0f:c0:8e:64:a6:0b:f0:50:58:b4:e6:c9:fe:cb:2b:26:
         5f:92:dc:e8:2a:53:3c:22:dc:63:d2:7f:ab:d2:ba:a7:54:63:
         8f:fd:94:99:10:e8:3b:7a:71:c1:ec:a1:a2:aa:c7:99:75:5c:
         c7:e8:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:28:13 2025 by rpki-client