Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File:                     1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier:          BK/9WiOTSiTDWcezgzdiY6aaB0PrdMJ6ZMHrGeuKqMY=
Subject key identifier:   41:45:2A:90:E5:F1:19:08:F1:C2:2E:11:A8:E7:B0:A3:24:C3:A1:5D
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer:       /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial:       0196C53AC396F29DAFFE367160C45111213C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number:          1535
Signing time:             Mon 12 May 2025 16:01:24 +0000
Manifest this update:     Mon 12 May 2025 16:01:24 +0000
Manifest next update:     Tue 13 May 2025 16:01:24 +0000
Files and hashes:         1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: n2kWLM6Z//XzH9hhOsYFEPe3/YqNqmHEfZQm1cyXL/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:c3:96:f2:9d:af:fe:36:71:60:c4:51:11:21:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
        Validity
            Not Before: May 12 16:01:24 2025 GMT
            Not After : May 13 16:01:24 2025 GMT
        Subject: CN=41452a90e5f11908f1c22e11a8e7b0a324c3a15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:cb:49:2c:87:4b:ce:dd:dd:99:fa:69:13:
                    29:f2:fa:f4:e4:ad:16:ec:dc:de:e3:62:26:2a:45:
                    8f:07:6d:7b:a8:43:ef:cf:76:1d:b2:b5:6c:4d:43:
                    d0:ad:5a:00:7a:1e:83:54:0e:d8:56:80:d3:51:7b:
                    3b:bc:25:e8:1c:df:67:67:47:fc:9d:12:74:b5:ae:
                    bb:a3:8d:3f:49:a4:ab:d8:de:21:f7:e4:72:70:77:
                    1f:89:57:af:9b:92:65:54:6c:9b:87:34:52:9b:ee:
                    49:73:bc:44:24:d0:03:61:28:bb:51:24:a9:fa:1a:
                    34:ab:00:ae:2e:ff:dc:41:f5:23:c3:6f:69:d3:e0:
                    b4:1e:49:5f:d1:ae:df:9a:0f:e7:5b:32:f5:88:8a:
                    74:b6:01:c2:a8:d6:f4:6e:40:72:d4:5f:f7:61:91:
                    44:e5:a2:cf:74:5f:68:81:b6:41:40:0d:9a:b1:37:
                    0f:9f:65:98:74:df:cc:97:3c:2b:50:56:a1:67:3e:
                    02:5c:cb:49:19:6b:c0:6f:08:3a:fc:64:34:a6:34:
                    ec:f5:4e:02:27:a3:3f:1d:35:69:47:1d:91:d4:d9:
                    18:ec:1b:6d:72:ac:8c:74:a6:58:62:44:bf:f7:87:
                    b7:c1:46:3f:ee:7a:ce:a0:07:37:63:16:15:ed:ce:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:45:2A:90:E5:F1:19:08:F1:C2:2E:11:A8:E7:B0:A3:24:C3:A1:5D
            X509v3 Authority Key Identifier:
                keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:82:13:01:db:20:b1:25:c1:d3:d4:93:51:40:3f:38:56:a2:
         82:64:be:06:f6:a9:bf:a5:e2:05:d2:59:3d:27:7d:c4:a1:1b:
         4d:85:73:7f:38:98:71:d2:11:c8:81:f5:4b:25:a0:a2:d5:3f:
         56:b9:d3:d4:f2:a1:7e:20:4c:14:ce:a4:80:a5:7e:63:dc:6e:
         95:2f:18:3f:70:aa:bf:ca:3b:0f:11:5d:3b:7b:88:dd:18:28:
         f3:6d:8a:7d:43:f8:01:37:32:a1:6e:d0:16:05:20:26:eb:56:
         32:37:65:83:ad:c2:1c:30:ed:80:91:43:69:8d:e2:77:2b:1b:
         23:e5:a0:ba:ff:82:51:68:9e:21:c1:cf:c5:f8:56:d0:3b:d3:
         dd:3c:e0:ac:8a:18:ff:78:76:c6:65:66:3b:6d:a9:63:f9:bb:
         d3:02:a8:24:be:e0:12:5c:38:d8:ee:76:8e:18:8d:3e:02:d6:
         63:35:d6:e0:5b:91:83:5f:89:04:77:10:48:6e:7f:00:87:b6:
         78:c0:a0:af:12:c3:fb:35:88:04:d2:b7:4f:7b:c8:fa:38:c8:
         c3:0b:11:0e:9e:92:e6:df:59:b8:2e:e5:af:99:4b:82:2d:cd:
         f8:1a:12:00:97:90:cd:72:bb:83:3d:1e:57:19:c7:d3:5f:0a:
         26:a6:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----