Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          NAQk/RZkhMgKjtXsliXsQTP6FeGzNsQQY6zZWP/WfK4=
Subject key identifier:   82:09:FE:8F:CE:0C:5F:16:12:F7:39:35:E4:A9:B1:A9:F6:9C:13:6B
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       0196A8B02C30D6FBCE31904A0906CD159DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          1524
Signing time:             Wed 07 May 2025 03:00:39 +0000
Manifest this update:     Wed 07 May 2025 03:00:39 +0000
Manifest next update:     Thu 08 May 2025 03:00:39 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: +UKfOvSJ6a4E8M/xpNVJVBt6A3pby2UxvHf/foFBnOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:b0:2c:30:d6:fb:ce:31:90:4a:09:06:cd:15:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: May  7 03:00:39 2025 GMT
            Not After : May  8 03:00:39 2025 GMT
        Subject: CN=8209fe8fce0c5f1612f73935e4a9b1a9f69c136b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:69:5a:31:c8:cb:1d:53:b6:5a:b7:9e:5a:0d:
                    23:9b:de:3a:03:8d:3a:ad:b0:00:62:44:1f:f9:ec:
                    15:00:67:dd:fc:3b:a1:e9:99:0f:25:18:42:66:f5:
                    8c:60:86:1b:43:80:f2:59:c1:fb:ed:48:01:bb:4f:
                    fe:3c:11:15:c1:6e:30:20:99:48:a5:f6:3b:d0:dc:
                    d5:a5:e0:ed:63:65:12:a5:d3:e4:95:0c:e9:90:17:
                    a5:73:c7:4a:54:0e:c1:98:8e:6e:a3:1d:fb:54:24:
                    bf:b5:8c:e2:34:ea:6d:e9:b7:77:8b:e1:14:12:ce:
                    db:36:3d:cf:49:32:9f:9e:8f:7f:be:fe:50:90:8a:
                    e1:87:0d:85:c7:5a:cf:0c:c0:1a:29:c9:b5:a6:d3:
                    6f:9f:17:6b:70:d5:f0:a8:3f:d8:de:bb:23:f7:9c:
                    07:54:64:42:ef:97:67:0b:b0:8a:4d:f2:a6:7e:54:
                    23:a3:06:10:6b:2d:a7:07:5b:28:05:18:05:85:8a:
                    2c:cd:99:0c:e8:ec:51:7b:0e:e2:59:6b:08:da:75:
                    a5:20:f8:ae:c5:71:56:a8:58:02:00:04:f1:0c:67:
                    e0:c7:a9:ff:f3:21:af:2b:54:61:d4:25:af:2f:39:
                    bc:5b:53:ba:ec:57:73:9d:07:49:c5:95:7f:a2:51:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:FE:8F:CE:0C:5F:16:12:F7:39:35:E4:A9:B1:A9:F6:9C:13:6B
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:e8:70:41:a0:a1:bf:6b:75:06:0e:e1:7a:d3:61:f7:ac:
         50:ec:0c:a8:fb:8f:07:45:dd:c9:28:7b:46:1f:54:b6:c3:f1:
         17:2d:8d:b8:a2:7c:e8:96:69:ff:fa:ea:ed:d4:6d:5f:b3:b3:
         eb:2c:1a:bd:53:90:ed:36:2b:bf:cc:87:17:9f:92:38:20:4b:
         18:83:19:ff:a4:84:45:17:cf:ca:72:e2:ce:6c:78:a5:99:3d:
         c3:98:86:77:dc:66:f4:d4:78:88:8a:47:55:4d:68:85:91:11:
         7e:63:9d:63:2c:ce:3c:58:2c:06:c7:0a:bf:7b:53:10:20:02:
         8c:10:fd:20:34:09:ee:e5:70:2b:82:28:2c:9d:45:89:cf:03:
         1b:cf:c5:c1:d9:76:2e:a7:a9:c3:9b:70:2a:74:60:08:b8:52:
         99:b8:1e:2e:67:4f:c8:4f:2f:24:e3:42:20:95:ab:40:dd:8f:
         59:96:da:38:31:5b:4f:d8:2b:93:e4:e1:f3:7d:d9:fc:f9:d4:
         f3:c6:b4:8a:bb:6f:3b:74:21:31:0c:54:74:15:26:df:0f:4c:
         62:fc:30:ca:63:69:db:a3:ca:1e:72:af:37:76:21:e6:3a:bf:
         70:83:ea:a2:17:6e:19:82:13:f7:02:6e:a8:f1:b9:c4:cf:7e:
         c9:b5:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:17:51 2025 by rpki-client