Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File:                     LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier:          KNzOI6JFSGAipVpLBfl6PR2oE75Kdx2d0cCDS9vH/cA=
Subject key identifier:   E6:CD:17:03:46:8A:E6:96:50:90:24:2E:E1:C6:D0:27:40:D0:38:90
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer:       /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial:       0196C26FC24DED47ECDDA136277F5D77031F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number:          0518
Signing time:             Mon 12 May 2025 03:00:26 +0000
Manifest this update:     Mon 12 May 2025 03:00:26 +0000
Manifest next update:     Tue 13 May 2025 03:00:26 +0000
Files and hashes:         1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: SXzlTTHhjPKm/oKVywgYy6H+sYcFdrgXvI3QRxyuoqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:6f:c2:4d:ed:47:ec:dd:a1:36:27:7f:5d:77:03:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
        Validity
            Not Before: May 12 03:00:26 2025 GMT
            Not After : May 13 03:00:26 2025 GMT
        Subject: CN=e6cd1703468ae6965090242ee1c6d02740d03890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:3d:bd:c5:96:95:6d:e9:b2:26:8b:42:28:
                    45:b5:85:f6:64:e3:a4:d7:a9:9f:3b:7f:dc:e3:5a:
                    fc:f9:33:78:42:bd:36:68:fb:41:92:67:62:b9:5f:
                    f1:ba:3b:09:78:7c:46:0e:bd:92:b0:76:4b:fa:43:
                    d8:87:95:48:2c:84:7d:ca:86:e4:ed:05:b0:0e:42:
                    be:ae:c1:50:8e:c3:6a:5c:1e:31:07:d4:de:04:e5:
                    79:e7:66:45:31:10:35:37:21:30:e8:52:bb:82:80:
                    0e:95:74:61:03:b4:04:df:82:26:e7:d7:c9:7d:13:
                    56:aa:9c:c0:39:86:2f:15:0e:93:d1:2d:28:f5:ac:
                    02:7c:4e:7c:54:01:3c:99:2f:24:cb:87:32:72:f5:
                    16:18:61:92:0f:2c:d4:5c:79:c6:66:25:1c:f4:e0:
                    0d:9a:66:86:66:38:96:03:7a:35:2b:be:1e:d8:14:
                    c1:14:0b:70:b5:fc:01:13:14:e0:29:fa:24:62:2a:
                    ef:52:94:c0:26:9f:ac:23:3f:71:de:61:3e:0f:a8:
                    53:d0:cf:05:c4:b0:03:a0:99:2f:e5:ab:e9:f8:9d:
                    7c:45:94:3a:e8:c6:3c:1b:77:7f:e2:4b:b7:59:5f:
                    02:ed:93:de:68:f0:2d:cc:76:6e:b7:89:be:dc:f0:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:17:03:46:8A:E6:96:50:90:24:2E:E1:C6:D0:27:40:D0:38:90
            X509v3 Authority Key Identifier:
                keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:e6:35:e1:4a:f2:36:e7:f1:1a:7d:7b:94:f0:d1:65:b8:
         19:91:8b:f4:b7:8a:83:82:b8:58:78:fc:ea:62:f7:b1:f1:49:
         0f:bb:eb:9d:6c:f9:fb:5f:92:8f:bc:83:a9:ba:2c:13:f3:f2:
         2c:69:86:c0:04:ad:4c:e2:35:7f:fc:94:4b:ac:7d:fe:37:59:
         dd:66:75:61:21:0c:68:7f:08:c6:7f:4e:9f:35:73:77:58:18:
         44:26:df:a4:2d:19:e3:5a:66:13:93:ad:0d:2a:d9:3f:9d:2c:
         b1:98:85:ea:43:6b:9d:8d:5c:f9:1b:a7:b6:e9:53:ca:f2:34:
         2a:5c:ab:0e:96:1e:37:92:34:c2:3d:cc:e5:65:d5:ee:9a:82:
         7b:5e:83:1d:f6:a2:27:4c:93:f5:b2:73:88:a3:7f:6b:37:9e:
         c1:94:75:1b:56:87:2a:5f:50:77:86:08:dc:a3:c7:47:e6:02:
         6f:67:13:68:4e:a4:11:56:63:4d:20:be:bf:4f:4b:99:ef:22:
         f2:da:08:51:ac:7d:47:44:f5:46:70:90:6d:cd:86:4e:d3:cf:
         28:0b:d8:7f:53:c7:b5:66:83:d0:bd:8f:fb:62:57:7f:a9:6e:
         b6:ad:af:4a:27:15:df:dd:5e:59:d1:c2:b7:93:70:c3:11:bb:
         0d:1c:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:55:43 2025 by rpki-client