Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File:                     LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier:          qRJnOo1ON/mjE6ERMK6LZRTtybMgqHMZKTqRtlTITbc=
Subject key identifier:   5C:97:CF:16:36:93:80:6D:85:7C:4F:90:35:40:6F:93:03:A3:06:07
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer:       /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial:       0196D8F77383B209C0484593516E4093DF37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number:          0C38
Signing time:             Fri 16 May 2025 12:00:17 +0000
Manifest this update:     Fri 16 May 2025 12:00:17 +0000
Manifest next update:     Sat 17 May 2025 12:00:17 +0000
Files and hashes:         1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: W2qbjsTR04bhllJGFuhnHSByXZOUuYMe+CtDFNM7i24=)
                          2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d8:f7:73:83:b2:09:c0:48:45:93:51:6e:40:93:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
        Validity
            Not Before: May 16 12:00:17 2025 GMT
            Not After : May 17 12:00:17 2025 GMT
        Subject: CN=5c97cf163693806d857c4f9035406f9303a30607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:7a:8a:30:5c:52:3f:99:9f:ad:81:42:b1:
                    e6:7a:ee:e9:37:b1:6b:23:0a:7f:32:42:08:dc:8a:
                    67:7f:0a:12:e5:20:d3:57:7f:95:c7:74:1a:c5:e9:
                    81:c5:a1:b5:fa:c9:19:fb:d2:c0:26:20:19:a8:21:
                    ae:f3:7f:6a:70:08:73:6d:fc:1e:d0:34:9e:67:41:
                    b9:c6:57:78:25:08:97:06:28:e1:c0:1b:71:7b:31:
                    9b:7a:ab:7b:48:24:8c:0a:fe:46:9d:bf:df:22:3f:
                    5f:2b:15:6f:ea:ab:18:b4:1b:b9:e7:48:25:8f:c3:
                    52:05:e5:76:c8:29:69:ab:59:72:26:81:55:11:11:
                    80:b4:2e:d0:17:a3:21:7c:52:47:70:97:37:51:c2:
                    96:2a:b7:fc:09:c6:88:ef:f9:e9:bc:af:87:ad:c0:
                    fb:00:44:90:18:f4:c9:10:1a:de:fb:e4:a1:1a:da:
                    74:b3:72:8c:88:ea:86:43:2c:77:bf:3c:3d:e8:ae:
                    47:22:6e:29:5f:e2:16:a5:bd:d0:26:e4:31:69:bb:
                    60:f8:57:e2:02:dc:6e:16:fa:b2:15:75:f8:dd:07:
                    26:82:4c:b4:01:88:fd:6c:30:8a:8b:8c:95:6d:8c:
                    64:cf:fc:59:a7:5b:fc:34:c9:40:af:64:f7:4c:ec:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:CF:16:36:93:80:6D:85:7C:4F:90:35:40:6F:93:03:A3:06:07
            X509v3 Authority Key Identifier:
                keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:6d:ee:20:82:0e:ba:13:32:de:a0:d0:96:24:60:8e:d4:
         e7:69:b6:f3:01:47:5b:7c:28:d4:01:13:0e:7a:c4:7c:c2:a8:
         d2:ed:11:4b:c0:1e:25:8d:96:b8:dc:37:a8:45:f3:41:53:b6:
         5f:90:cf:92:d7:e6:1c:9c:89:3e:71:de:68:ed:58:67:02:50:
         12:62:71:a4:36:1e:53:52:ba:52:9b:d1:20:03:92:2f:e2:1e:
         a8:1a:cc:d4:b4:f7:4e:94:ca:f2:20:ad:42:83:5e:11:a6:e0:
         7d:84:0a:7d:e0:ae:f5:3b:ef:fa:1f:6b:32:00:d6:6e:44:ed:
         e4:3e:29:30:75:bd:db:7d:c5:60:47:4e:70:65:4c:14:e2:9c:
         0b:fe:6a:6a:32:3d:c9:02:e6:fb:cd:76:9f:19:dd:5f:7d:2c:
         55:57:06:e6:b7:84:e1:33:00:6c:e1:db:95:f8:3b:5e:e4:f1:
         c2:46:90:2f:a5:51:e0:38:96:a6:6f:a0:28:1f:38:a3:3e:a6:
         04:a0:da:b9:d7:69:3b:d7:54:18:43:55:95:b4:cc:f8:44:54:
         c0:a3:a8:5a:bd:93:66:53:a5:d2:31:23:1c:fc:08:f3:27:27:
         b1:75:24:62:f8:3a:9b:c7:af:f2:6c:d2:7e:a4:62:5c:fb:d3:
         3e:38:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:45:51 2025 by rpki-client