Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
File:                     lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json)
Hash identifier:          8tc0uYEwilndo6Pr2CdI4DhsFhd9vtKkDkw/O/tOzR0=
Subject key identifier:   60:7D:74:BD:E5:27:63:B0:C7:88:66:BF:90:98:8B:7B:9F:67:5F:04
Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
Certificate issuer:       /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Certificate serial:       01901DEDB9656D63E0E8233398D4888366EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
Manifest number:          0292
Signing time:             Sat 15 Jun 2024 22:03:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:57 +0000
Files and hashes:         1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: vzXbuE5WUV2ve5rc2IoYMNx5qTGujzdwbhbVYYvpWec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b9:65:6d:63:e0:e8:23:33:98:d4:88:83:66:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
        Validity
            Not Before: Jun 15 22:03:57 2024 GMT
            Not After : Jun 16 22:03:57 2024 GMT
        Subject: CN=607d74bde52763b0c78866bf90988b7b9f675f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:6f:13:1f:03:19:1a:0e:cf:06:82:ee:57:
                    02:2b:33:a3:68:c3:be:91:ca:b2:cc:0e:f2:64:41:
                    02:98:1e:8f:38:fe:c7:d5:39:aa:7d:e5:bc:b1:14:
                    49:11:41:05:46:9c:ae:43:38:f0:bf:73:74:ac:ca:
                    51:a0:57:72:47:b2:35:3c:03:c2:33:8a:d3:77:1f:
                    fc:eb:71:4a:e4:4b:81:0f:ce:86:19:cf:00:d7:13:
                    5e:28:84:af:a2:fe:cb:cc:bc:e8:a2:50:f5:d5:16:
                    75:97:c0:8e:25:3c:07:ea:7c:ad:42:12:2a:38:14:
                    4e:16:ed:04:e8:a2:68:9a:74:61:91:41:7b:54:04:
                    4a:1e:5c:1d:99:9d:57:82:ce:86:68:27:cd:48:39:
                    28:58:1d:af:34:06:3d:d0:0b:05:1b:1e:3e:2f:1a:
                    41:60:8d:5a:be:42:6c:dc:d3:11:ed:98:ca:74:7c:
                    bc:68:4e:d2:5f:ab:f8:40:bb:7d:64:77:70:3b:f2:
                    7c:b5:71:2a:e7:cb:bd:d6:40:76:6c:2e:bf:39:4b:
                    03:2d:57:46:00:84:b2:d3:75:f1:d0:cf:6b:98:ec:
                    a3:49:0d:79:c6:78:5f:13:c4:51:55:c3:25:76:96:
                    89:e6:cd:00:a7:7d:fa:7c:2a:39:10:ce:88:ad:09:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:74:BD:E5:27:63:B0:C7:88:66:BF:90:98:8B:7B:9F:67:5F:04
            X509v3 Authority Key Identifier:
                keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f8:1e:25:fc:78:b7:81:a7:e5:e4:1e:23:86:d3:ab:43:3f:
         80:e7:38:38:c0:60:c5:33:4e:d6:32:c5:fe:04:29:2a:17:10:
         9f:91:fa:02:ec:c1:bd:02:f1:1d:dd:9e:77:48:c3:0c:aa:1f:
         88:ef:92:5a:0a:0a:d6:7e:fd:7f:05:bb:2a:71:fa:ab:e8:1b:
         8a:b0:23:e0:aa:cc:33:21:7d:c6:18:3d:7e:6e:ee:29:ae:be:
         b1:de:43:f5:7a:d2:d4:38:04:99:ca:60:73:0d:42:68:07:04:
         d3:e3:fa:4b:d4:44:64:d4:aa:ff:9d:92:17:ae:86:1d:13:e6:
         bc:c7:44:b8:bc:4c:5a:09:1c:3c:8e:88:3b:85:81:da:f7:db:
         45:aa:0a:5f:ad:ef:e7:37:b5:fe:e9:4a:d3:98:fa:56:a8:14:
         da:f7:99:ac:da:62:9d:17:a1:39:1d:cf:3a:fe:f7:92:99:47:
         ef:85:6e:dd:ca:5f:e5:00:76:73:90:cd:4d:e8:4f:5b:c2:46:
         c4:97:88:4f:cd:3e:28:bc:36:f0:34:44:40:07:94:69:b4:0a:
         b5:0e:ea:1c:ba:1a:b3:73:f2:ea:ec:50:af:65:e5:88:d5:37:
         de:a1:9d:73:92:fa:16:b4:6e:cb:5c:67:63:d2:a7:a1:26:5e:
         91:ae:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:36 2024 by rpki-client on console-fra.rpki-client.org