Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File:                     LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier:          RXwVO7LzquULc/tX6yGBxG5RxQNEav3OF5wBqTdjwGc=
Subject key identifier:   77:3C:A5:40:5A:95:EC:D1:01:2A:53:80:63:1D:F4:22:2D:0A:14:D1
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer:       /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial:       01901D4683D90ED2E6D2F0D056C4CC52364F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number:          0E56
Signing time:             Sat 15 Jun 2024 19:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:18 +0000
Files and hashes:         1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: CoyvD17nFpVT7B+X/LOrR4SnU79ryYDR4DQZ0gSKEew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:83:d9:0e:d2:e6:d2:f0:d0:56:c4:cc:52:36:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
        Validity
            Not Before: Jun 15 19:01:18 2024 GMT
            Not After : Jun 16 19:01:18 2024 GMT
        Subject: CN=773ca5405a95ecd1012a5380631df4222d0a14d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:c3:8e:78:b1:e6:05:64:01:d0:fe:c1:9d:
                    f7:b9:41:15:74:65:cf:be:51:5d:0b:2a:0d:44:ae:
                    5c:e6:34:b9:9d:5d:66:e8:a8:a2:b1:6a:9c:31:0c:
                    cb:c9:cd:e3:f2:82:b1:69:b8:59:54:ed:73:7c:0b:
                    fd:43:f0:05:35:08:24:2f:4e:25:25:8f:c7:bc:a0:
                    d3:a6:d6:97:c2:12:be:44:6e:b3:c8:cc:92:34:f0:
                    c2:6d:42:7e:fd:93:0e:41:00:90:70:11:aa:04:9d:
                    10:e9:06:74:55:b0:01:b7:30:eb:f8:cb:f0:ab:10:
                    ed:1f:b9:a3:34:2e:b1:ab:40:a0:1b:c4:78:7a:f2:
                    01:3c:a0:af:46:f8:c6:1e:70:15:21:ed:22:b7:70:
                    03:50:0b:85:46:9c:35:88:21:e6:b9:a7:18:64:3a:
                    99:19:4f:b4:30:89:7d:96:23:0e:6a:a2:4d:df:e0:
                    be:bd:57:8c:30:a9:70:82:2c:e9:cb:d8:64:54:8f:
                    25:f3:0d:1c:dd:67:49:46:25:05:28:c2:d1:ad:9f:
                    f0:93:b8:71:b6:6d:d6:dc:e9:3f:02:f1:a7:82:2a:
                    61:0c:60:00:68:dc:57:52:6f:ed:3e:f7:af:cf:fe:
                    2d:24:9d:f1:7e:99:41:40:17:b3:07:1a:36:32:4d:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:A5:40:5A:95:EC:D1:01:2A:53:80:63:1D:F4:22:2D:0A:14:D1
            X509v3 Authority Key Identifier:
                keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:e6:c2:24:a3:21:d9:59:21:6a:b8:98:8d:e7:04:0a:fe:
         96:4a:6a:bd:bf:01:ec:ad:70:83:59:c0:94:cf:97:13:75:df:
         aa:54:c1:25:b5:2e:46:36:a7:93:44:e9:8f:d7:d5:ff:d2:a4:
         4f:79:2e:10:2a:d9:e0:ae:25:0c:4b:43:59:b3:b9:82:98:f7:
         6f:e1:b5:10:2e:67:f6:57:04:5d:fe:85:0e:66:d7:19:0e:aa:
         5e:d0:6d:41:c2:99:19:56:24:6b:e5:1a:06:d8:76:0b:80:1c:
         c2:02:26:3d:2a:5e:1e:a5:d1:78:4c:40:08:90:f9:05:bc:0e:
         04:a7:7a:12:80:0b:5b:c1:7a:f7:bf:70:cb:2f:00:4d:07:be:
         45:09:b7:fc:53:b6:86:9c:8f:b3:45:89:26:2b:68:cb:ae:77:
         b5:25:28:38:bb:88:fd:d7:05:0c:64:2d:0c:0a:5d:85:ea:a2:
         41:ed:c6:36:40:d9:00:5d:f7:ff:58:7f:92:d7:8e:7c:67:3c:
         4f:65:96:d5:54:40:23:4a:b2:7d:63:37:27:18:49:e0:04:31:
         1b:ab:8b:63:70:61:68:37:8e:79:a6:ef:bd:6e:fd:a8:91:82:
         74:a1:d7:9c:2f:5b:d7:77:13:35:10:d8:51:f6:a5:cb:c5:14:
         5b:a2:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:07:28 2024 by rpki-client on console-fra.rpki-client.org