Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File:                     LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier:          mmSJeUR8PymNHx87DnWkCyqqJRdscUXHlk92E3MJU+o=
Subject key identifier:   26:9B:F2:EC:5A:B8:AB:FB:A9:80:74:59:55:B8:0F:DC:DB:60:95:80
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer:       /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial:       01969303BBF0AA414A588C913820BC331572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number:          14AD
Signing time:             Fri 02 May 2025 22:00:17 +0000
Manifest this update:     Fri 02 May 2025 22:00:17 +0000
Manifest next update:     Sat 03 May 2025 22:00:17 +0000
Files and hashes:         1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: 2/qFqZXcEF4dIunl/PBucb7w0J4QoUCHMCtEDUiyZoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:03:bb:f0:aa:41:4a:58:8c:91:38:20:bc:33:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
        Validity
            Not Before: May  2 22:00:17 2025 GMT
            Not After : May  3 22:00:17 2025 GMT
        Subject: CN=269bf2ec5ab8abfba980745955b80fdcdb609580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:36:4c:00:8d:2e:79:64:2f:72:97:ad:b2:
                    0e:59:bf:ed:7d:34:36:59:f8:aa:25:50:2b:cb:0e:
                    26:20:91:63:a7:4e:14:9d:86:3b:20:9c:a5:69:53:
                    ea:9e:d9:71:ff:fa:95:a9:bc:c1:50:05:2c:cc:5f:
                    4a:71:5d:98:9a:73:6a:09:09:1c:5d:75:f4:77:af:
                    2c:85:1d:d8:89:99:a8:e5:2e:97:40:2a:37:ca:d4:
                    e8:68:cd:0f:1e:77:ae:55:98:4a:8a:1a:a5:b6:14:
                    00:ec:14:4f:92:fd:7c:6c:be:24:d6:6f:4b:95:4a:
                    e0:dd:72:cb:41:3a:ec:20:88:a7:f1:8a:6b:1d:4c:
                    ab:56:9a:93:12:6d:e2:77:ac:ba:39:69:c5:c0:4b:
                    73:a8:82:ab:3c:9b:cd:43:6c:81:8a:c1:bd:97:3e:
                    ed:d9:b5:34:a2:af:19:ec:fe:73:ad:b4:c6:07:f6:
                    79:c8:99:22:a4:b9:3b:a9:f7:18:63:ff:f3:b2:40:
                    28:46:0b:f1:6e:69:78:2e:5a:45:f3:90:b0:06:96:
                    05:ad:71:d1:22:73:5e:d9:4a:c6:7b:33:64:0c:be:
                    36:76:01:35:46:ec:13:b7:71:31:c1:a2:47:c0:7a:
                    6f:ec:95:70:0b:b8:c5:8a:c2:45:0b:3d:01:b8:52:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:F2:EC:5A:B8:AB:FB:A9:80:74:59:55:B8:0F:DC:DB:60:95:80
            X509v3 Authority Key Identifier:
                keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:48:e3:8f:1a:94:5d:b3:3b:d4:cc:ab:b9:f3:bf:7e:0a:a9:
         2c:43:0b:3c:37:1c:b5:ec:c5:aa:ca:06:3b:47:38:63:b9:74:
         da:db:fa:51:c6:98:7a:50:ae:b8:83:58:2f:ce:7d:46:1a:7c:
         6b:be:c7:06:e2:33:c4:14:d9:22:de:0d:a4:8b:73:ec:bf:08:
         2a:34:07:79:3e:6a:2c:06:56:16:44:f6:57:f2:91:ea:c5:83:
         a5:22:ef:3a:48:c6:1f:9f:6f:4a:ba:5c:25:b7:7a:2a:bf:21:
         cc:7a:ac:a6:14:2d:08:71:32:c3:fa:d7:2e:b3:ac:d3:b2:f8:
         a9:b9:62:3a:d2:50:37:50:93:f3:06:58:2a:32:e1:5e:72:71:
         17:c0:fa:af:79:17:46:fb:8c:ad:0f:19:94:9c:e0:ba:6a:11:
         11:01:b2:68:14:b7:b8:f9:d1:0d:a6:eb:14:e9:bd:c4:75:2e:
         e1:9a:63:0e:ca:f7:42:28:81:0c:ba:f4:6f:cb:70:99:25:c7:
         1d:dc:3f:9b:f4:07:47:0b:72:b6:43:b0:70:55:24:83:ee:8b:
         14:b6:86:a3:a7:39:98:69:65:b3:05:a4:95:60:1a:7c:a8:6d:
         67:35:0c:8e:72:23:ab:c0:99:04:1c:42:e9:ba:2c:6d:1e:53:
         94:f2:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:13:32 2025 by rpki-client