Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
File:                     LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft (raw, json)
Hash identifier:          dFRC8Wd4eOdLsU8e9jcNmF83c0QFrO4/iyU+FACn9ag=
Subject key identifier:   52:49:C4:5E:8D:9D:30:AA:50:D1:EF:0B:AC:4B:F8:81:F2:8C:18:10
Authority key identifier: 2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37
Certificate issuer:       /CN=2e872826fce02bd9485ef276641d2b584f599b37
Certificate serial:       01967AC4A1A112C3D19AF392650A0EAC4D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
Manifest number:          0165
Signing time:             Mon 28 Apr 2025 05:00:28 +0000
Manifest this update:     Mon 28 Apr 2025 05:00:28 +0000
Manifest next update:     Tue 29 Apr 2025 05:00:28 +0000
Files and hashes:         1: LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl (hash: Vt5wOxzFgoFjaQV1XKrWVpd0+2gbP7KKbYT4zuDDXnQ=)
                          2: Mzj29HFabYUUzd0b2x71rCWYxpc.roa (hash: CtBd18sCBkrUSbVpakXbp+UYL2hKAze7NhB+GbMH/4U=)
                          3: Sdx0s8uspLK2JEfxE0Zqq-P7qdc.roa (hash: SB/yO/98dSqVsNjGD6z9bUudXfStWVjKdpjSXqLPG2I=)
                          4: VOPfsPLo2qD6WzGvi49ZWNyWRCQ.roa (hash: U4NKV1QaU6X7/z8jYu2ZN8ojJKZniu0yv+LX0DQZ7Lw=)
                          5: sXkk9RexS8Df6sg2xdkc7cVwBT0.roa (hash: EPX6TU1BjJqVBea1HkWMPFI7ngY4YBybKK+v3369Nok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:c4:a1:a1:12:c3:d1:9a:f3:92:65:0a:0e:ac:4d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e872826fce02bd9485ef276641d2b584f599b37
        Validity
            Not Before: Apr 28 05:00:28 2025 GMT
            Not After : Apr 29 05:00:28 2025 GMT
        Subject: CN=5249c45e8d9d30aa50d1ef0bac4bf881f28c1810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:12:a6:66:d4:bc:4d:ec:d1:81:a5:9f:0a:
                    1e:6c:ad:8e:c3:06:dd:0f:93:45:db:59:89:a9:ac:
                    1c:a6:df:28:f8:01:75:4d:fd:86:63:0f:4d:6c:b7:
                    52:59:f7:65:5a:a9:f5:94:ac:2c:14:d5:56:9d:a7:
                    3b:81:1a:b8:ae:85:b0:c6:8f:13:a3:87:97:c6:57:
                    7f:bf:8b:d3:c5:e2:9f:8a:c1:ba:dc:25:ad:1c:69:
                    94:e6:92:8b:b7:e6:65:44:d3:f4:2f:94:d9:ed:1e:
                    5c:b9:65:c2:69:e6:33:3f:73:e4:89:b9:c0:c7:fc:
                    c8:3f:09:9c:f7:5a:0f:ff:e0:ad:73:7c:ef:0e:bf:
                    40:c4:c6:e5:46:80:43:bc:42:22:8b:13:3a:e0:6d:
                    74:aa:01:73:9a:22:fe:6c:5b:18:d5:30:3f:ad:d2:
                    e2:0b:b6:f5:6e:0b:94:be:2a:2a:12:e1:a9:51:6b:
                    24:7d:8a:83:8e:f8:a4:57:d0:92:4a:04:ac:8d:54:
                    6e:e0:94:a2:d4:e7:fa:b3:3e:bc:d5:00:0c:89:25:
                    a7:64:13:87:f2:c9:2c:e1:53:44:e9:b1:bf:22:5f:
                    3f:90:17:9c:6f:f1:2f:1e:de:4e:a1:01:35:74:03:
                    e9:56:f0:24:77:b1:c8:72:4a:9f:43:cb:31:be:8e:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:C4:5E:8D:9D:30:AA:50:D1:EF:0B:AC:4B:F8:81:F2:8C:18:10
            X509v3 Authority Key Identifier:
                keyid:2E:87:28:26:FC:E0:2B:D9:48:5E:F2:76:64:1D:2B:58:4F:59:9B:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1bcef4-131d-4db5-94c7-24c79b1cb4da/1/LocoJvzgK9lIXvJ2ZB0rWE9Zmzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:76:bc:04:c9:0a:67:c9:6f:f7:a9:b6:29:a6:d5:34:27:0f:
         1b:9c:79:bf:07:4a:73:58:ed:66:4d:01:10:9a:08:b2:5b:37:
         f5:38:77:1e:77:4f:84:27:db:15:29:61:b0:8a:36:fa:46:c3:
         bd:d2:7d:e3:23:71:db:bc:e6:24:d2:2c:d4:cf:b4:5e:69:48:
         b5:3c:09:69:ca:f9:66:54:2c:d6:95:52:1a:9b:aa:3d:a6:e9:
         67:ee:20:a7:71:30:65:f0:98:2e:03:5b:d7:b9:a4:b1:73:27:
         94:0d:22:54:7b:05:14:c5:ab:cf:7e:e9:46:e7:e2:ae:a7:0f:
         03:6d:42:83:d1:2b:4d:6e:bf:c9:12:06:4a:1b:35:ea:ac:65:
         f6:95:09:d8:cd:ad:9d:18:bc:53:1e:cf:bb:23:ae:d4:26:9b:
         a8:45:71:24:86:89:50:49:f6:fb:1f:d4:54:06:76:00:9d:8e:
         4c:4f:d4:8c:56:f5:9e:8f:e7:20:f5:ca:00:9f:5f:a7:0f:b7:
         7e:47:d0:a0:5b:0e:04:37:4b:6e:7e:73:ad:24:1e:bb:b4:fd:
         78:17:85:f0:bc:ae:a1:66:b5:15:9b:c8:cf:3f:1b:24:49:52:
         05:2c:56:90:85:6d:4d:c4:06:7e:74:63:b9:7a:95:35:3a:9f:
         14:7b:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:35 2025 by rpki-client