Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File:                     LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier:          rDPC0oFw2VkUEm3qCQ66Ves8uJTh9iXTf9LKwQl0unE=
Subject key identifier:   25:B2:B7:0C:CB:75:6D:55:20:29:CF:DD:C6:E5:AB:BD:19:4C:D3:21
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer:       /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial:       0196B5902D45CBE91B26CA246C419F298E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 15:00:46 +0000
Manifest this update:     Fri 09 May 2025 15:00:46 +0000
Manifest next update:     Sat 10 May 2025 15:00:46 +0000
Files and hashes:         1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: bnJxC4VEUg22ujiX+6hP2oJ5zIfk8Bpy2p1Vxk4ye3g=)
                          2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:90:2d:45:cb:e9:1b:26:ca:24:6c:41:9f:29:8e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
        Validity
            Not Before: May  9 15:00:46 2025 GMT
            Not After : May 10 15:00:46 2025 GMT
        Subject: CN=25b2b70ccb756d552029cfddc6e5abbd194cd321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:17:f1:42:b5:fb:fd:64:3b:bf:3d:2f:b6:
                    a2:fb:9e:db:f7:7e:b5:2e:c2:71:6d:23:4e:eb:60:
                    7c:5c:38:53:46:b8:d4:a3:32:e8:ef:9d:ca:31:b1:
                    26:c3:d1:64:5b:03:38:c0:b3:eb:33:53:72:43:fe:
                    31:77:79:09:a5:d0:f5:6b:a6:ba:b4:70:42:48:df:
                    0e:4f:94:3b:d2:74:69:48:91:dd:33:97:29:ab:da:
                    24:19:74:a3:78:55:1d:4b:80:c0:d8:fe:fa:54:65:
                    88:f4:e8:a0:55:21:bf:10:36:ec:8d:88:99:0b:e2:
                    cc:f4:00:9d:8e:88:70:d6:0a:8f:a6:c3:f5:60:ea:
                    2d:87:a6:4d:2a:81:6f:c0:bb:cc:05:e2:e7:b2:34:
                    19:cd:e5:98:4a:c6:ca:c0:b3:6b:d5:fd:e0:b7:a3:
                    98:2d:3e:d8:8c:2e:f3:3e:fb:14:c1:b5:b1:b2:03:
                    2d:5e:0d:b0:96:69:09:fa:2e:09:b0:45:b8:20:d8:
                    3c:17:b1:00:29:24:94:9c:55:ae:f7:13:38:72:c2:
                    4b:9b:fa:69:c5:ba:09:6b:a5:1f:b5:42:2b:f7:c5:
                    e6:df:e2:50:ed:64:44:4f:33:58:51:56:67:e2:48:
                    54:b1:2c:6d:94:78:22:74:e2:3c:41:9e:74:a4:24:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:B7:0C:CB:75:6D:55:20:29:CF:DD:C6:E5:AB:BD:19:4C:D3:21
            X509v3 Authority Key Identifier:
                keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:f7:9a:84:ae:b5:9d:c0:f4:b0:ca:ec:51:a4:d1:86:c7:
         17:ef:46:4a:c7:33:a1:60:99:11:b4:92:1b:bc:27:d6:38:7f:
         ef:16:1e:9e:b8:b3:f2:97:4c:39:df:b2:b5:ca:23:a4:b0:d0:
         ac:35:5a:ae:ff:92:17:b1:8f:38:9e:11:db:df:7f:8f:32:df:
         34:58:e1:e9:82:2a:57:e0:43:55:a3:02:a7:ac:16:e7:c1:c7:
         81:f6:43:9f:9b:13:cd:84:13:4c:98:40:41:1f:ed:7f:b7:33:
         46:5f:eb:98:97:4e:cb:41:18:48:13:3e:41:54:59:1b:c9:7b:
         21:99:c7:ed:29:40:c6:94:00:16:f9:4e:85:72:56:9f:74:40:
         d5:ff:34:dd:6e:08:49:b4:1f:0a:f9:dc:40:8e:c1:67:8c:9e:
         e8:69:bc:7a:00:36:45:57:a5:b7:47:db:22:1d:8d:6a:d4:86:
         8e:71:c0:40:01:5d:dd:e9:08:dd:e0:13:cf:d4:7f:1f:50:87:
         6d:3e:ef:1d:49:f7:65:8b:9a:da:58:db:c7:cf:0f:48:8c:3e:
         14:1a:42:a0:33:af:b8:af:ac:9d:b1:8d:2b:ea:41:22:1d:cf:
         c5:6f:70:54:f1:99:1a:a7:8b:7f:af:a8:f8:7e:7f:6f:2b:57:
         9a:d9:b2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1kC1Fy+kbJsokbEGfKY5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZWZkZTMwYjhhNThiMzIyYTQzMWYwODI5ZWQ0ZmYzM2I1
YWFjMTgwHhcNMjUwNTA5MTUwMDQ2WhcNMjUwNTEwMTUwMDQ2WjAzMTEwLwYDVQQD
EygyNWIyYjcwY2NiNzU2ZDU1MjAyOWNmZGRjNmU1YWJiZDE5NGNkMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEX8UK1+/1kO789L7ai+57b9361
LsJxbSNO62B8XDhTRrjUozLo753KMbEmw9FkWwM4wLPrM1NyQ/4xd3kJpdD1a6a6
tHBCSN8OT5Q70nRpSJHdM5cpq9okGXSjeFUdS4DA2P76VGWI9OigVSG/EDbsjYiZ
C+LM9ACdjohw1gqPpsP1YOoth6ZNKoFvwLvMBeLnsjQZzeWYSsbKwLNr1f3gt6OY
LT7YjC7zPvsUwbWxsgMtXg2wlmkJ+i4JsEW4INg8F7EAKSSUnFWu9xM4csJLm/pp
xboJa6UftUIr98Xm3+JQ7WRETzNYUVZn4khUsSxtlHgidOI8QZ50pCRQvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWytwzLdW1VICnP3cblq70ZTNMhMB8GA1UdIwQY
MBaAFCzv3jC4pYsyKkMfCCntT/M7WqwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQt
ZmY3NjVmODUzMWQ1LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zM2EwZjktMTE3OC00YTZkLWI5NjQtZmY3NjVmODUzMWQ1
LzEvTE9fZU1MaWxpeklxUXg4SUtlMVA4enRhckJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANy73moSu
tZ3A9LDK7FGk0YbHF+9GSsczoWCZEbSSG7wn1jh/7xYenriz8pdMOd+ytcojpLDQ
rDVarv+SF7GPOJ4R299/jzLfNFjh6YIqV+BDVaMCp6wW58HHgfZDn5sTzYQTTJhA
QR/tf7czRl/rmJdOy0EYSBM+QVRZG8l7IZnH7SlAxpQAFvlOhXJWn3RA1f803W4I
SbQfCvncQI7BZ4ye6Gm8egA2RVelt0fbIh2NatSGjnHAQAFd3ekI3eATz9R/H1CH
bT7vHUn3ZYua2ljbx88PSIw+FBpCoDOvuK+snbGNK+pBIh3PxW9wVPGZGqeLf6+o
+H5/bytXmtmylw==
-----END CERTIFICATE-----
Generated at Sat May 10 00:29:08 2025 by rpki-client