Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          GdYHt9+vDqv41SL3Kz+yJcktoDKIUb/Gf4qDH+Xpz/U=
Subject key identifier:   A6:DF:E8:83:2F:33:1C:0B:A0:6A:62:45:C4:F8:A6:30:6C:61:FA:EA
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       0196A65421C1116004B1EADE0D64D9FDE8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          0771
Signing time:             Tue 06 May 2025 16:00:53 +0000
Manifest this update:     Tue 06 May 2025 16:00:53 +0000
Manifest next update:     Wed 07 May 2025 16:00:53 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: N/Dkkwa6Ha/KE0DCYa1HHAM//AYOrokmAp4ows45y4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:21:c1:11:60:04:b1:ea:de:0d:64:d9:fd:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: May  6 16:00:53 2025 GMT
            Not After : May  7 16:00:53 2025 GMT
        Subject: CN=a6dfe8832f331c0ba06a6245c4f8a6306c61faea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:08:10:cb:27:17:38:19:4f:63:52:d3:f0:
                    53:39:06:1d:c5:ef:c5:a5:d5:71:67:0e:20:94:23:
                    b1:f4:90:86:ef:5c:a4:35:a5:27:76:92:d3:73:99:
                    2b:32:49:95:ad:1b:61:d4:cd:f0:71:ff:2d:d1:1c:
                    77:3f:4f:d7:18:6d:d4:eb:45:7a:ed:06:33:9d:b2:
                    00:50:c2:e6:0a:8c:51:8e:d5:ab:8e:da:dc:af:15:
                    2b:36:c5:d0:37:e4:b5:21:a3:29:75:34:20:cb:c1:
                    f3:17:33:f3:79:b1:1d:ba:55:70:89:9c:d6:10:7a:
                    90:10:02:f6:ba:2d:61:14:3c:2c:8a:b9:89:64:46:
                    a1:b7:57:cb:b3:6d:e5:00:4b:3b:f4:55:3c:86:21:
                    51:41:c5:2b:48:e1:b3:77:9d:51:85:03:ce:a9:26:
                    59:d4:85:8e:58:37:e3:d4:4f:6e:82:0a:43:40:d7:
                    f5:b3:33:7d:80:4d:67:31:77:b1:6e:2c:4a:d9:13:
                    a0:ef:cd:49:3b:1e:4b:7c:04:24:72:54:e5:33:d4:
                    65:c0:c7:66:40:3e:ff:02:7a:71:76:c9:9b:9c:5a:
                    89:3f:85:2d:b4:8f:91:a4:e3:1b:23:ca:96:80:92:
                    c5:a4:0f:f6:17:d4:b7:f9:74:aa:4f:b7:b6:d9:e2:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:E8:83:2F:33:1C:0B:A0:6A:62:45:C4:F8:A6:30:6C:61:FA:EA
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:25:59:73:8d:b3:53:38:2b:f5:20:eb:49:dc:6f:06:f1:3b:
         fa:f3:43:d2:af:3b:68:83:7f:46:52:ae:91:b9:04:b4:26:e0:
         8b:58:92:82:47:60:15:0b:79:0d:72:8f:78:05:69:14:57:e9:
         da:ee:25:8b:25:80:56:8d:f9:16:3f:88:f4:27:98:23:0b:da:
         1b:64:e0:bb:ed:35:65:ea:5c:39:5b:fa:9f:54:24:a3:4f:7b:
         cb:5d:aa:d7:35:1a:e5:e4:f4:05:f0:c9:dc:9d:43:23:d4:38:
         41:0a:5a:b1:a6:3d:de:b8:65:18:18:b0:13:df:7c:75:00:94:
         74:51:4a:a8:4b:1b:08:53:3f:88:e4:84:57:d9:b8:95:e1:a0:
         c6:1a:29:c1:48:c1:51:fa:75:40:cd:e6:7a:32:a3:dd:af:7b:
         ac:93:bc:0b:21:3c:27:01:d0:7f:1a:fe:37:9a:68:be:4e:dd:
         cc:1f:48:74:08:3f:6c:69:84:e6:34:27:67:ee:60:41:fb:9e:
         a5:c8:85:ac:42:0f:6d:56:76:be:8e:fd:34:d9:b7:f8:2d:16:
         7f:0d:95:5a:60:21:5f:37:40:50:73:2c:2a:98:a7:a5:9c:d2:
         d6:98:df:8f:87:9e:cf:5c:38:f8:98:50:32:f0:ba:28:dd:e8:
         40:5d:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:22:11 2025 by rpki-client