Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          8TvOejGtDUvnyLiulbaYrBdCuGwAbYeVjxKwiE+pYQc=
Subject key identifier:   1E:03:7E:33:11:B3:76:43:75:49:60:04:BE:84:3B:8B:4F:A9:43:42
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       019040ADDF2199660754B8B57BBABC44942B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          0421
Signing time:             Sat 22 Jun 2024 16:00:54 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:54 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:54 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: 1GhqWgS0jTNAxsVFso3q0FQ2EgAT0NJCfVe/KMzpbdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:df:21:99:66:07:54:b8:b5:7b:ba:bc:44:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: Jun 22 16:00:54 2024 GMT
            Not After : Jun 23 16:00:54 2024 GMT
        Subject: CN=1e037e3311b3764375496004be843b8b4fa94342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:92:82:cf:38:86:e3:94:a6:0d:01:b7:27:
                    27:4f:9a:88:0c:26:95:a7:5f:e3:78:17:69:54:d8:
                    3d:94:e7:8a:f6:33:48:12:1b:c1:23:2d:af:8c:47:
                    f7:fb:bc:00:c7:4b:37:52:3f:53:b2:6a:35:f2:e8:
                    46:31:68:12:d9:76:4c:d8:e2:16:67:c0:9c:cc:ec:
                    fe:70:15:85:7e:ce:45:a5:ab:d7:82:e5:a5:ac:26:
                    b4:b2:76:62:28:34:48:07:89:e2:d3:b2:00:be:5a:
                    b8:2d:64:2c:fa:1f:38:cf:cb:06:a1:34:37:7e:95:
                    5c:49:5f:c0:6d:b5:17:40:93:d6:3d:c5:59:6e:2b:
                    80:08:80:54:da:e3:42:b5:23:82:71:be:bc:9e:6f:
                    22:b2:1c:e3:21:ca:6b:db:26:32:f5:1c:f2:3e:f3:
                    f4:bb:91:7f:a4:b2:f0:42:ca:c4:17:92:b6:4b:8c:
                    39:04:08:ee:4b:30:b8:6f:c3:0e:7a:c9:25:bb:a3:
                    34:fb:ef:b2:1a:16:e1:2e:f4:c9:f4:25:0d:af:b3:
                    8d:d5:5f:e1:ad:ee:57:1c:2d:b5:d7:1d:62:86:e2:
                    49:2e:31:b4:ad:cf:70:a4:9a:d6:3d:4b:3a:bf:c3:
                    a7:5f:19:ca:77:ed:af:ff:c4:6d:3d:f4:25:a5:4d:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:03:7E:33:11:B3:76:43:75:49:60:04:BE:84:3B:8B:4F:A9:43:42
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:53:b1:91:38:3d:6c:c4:3f:55:11:15:5e:1f:2d:d6:97:
         69:40:be:c9:90:85:67:ac:53:60:e7:dd:72:71:26:0b:86:41:
         17:3e:1d:f7:48:fe:99:5b:a4:02:56:12:38:3e:02:4a:52:ca:
         ee:f1:27:26:5d:58:b9:7c:a0:d9:0f:0d:bd:21:92:12:d3:fb:
         32:7f:1a:ed:a9:96:be:60:d7:00:37:98:f7:59:f8:25:49:64:
         df:c4:17:47:39:d9:c5:11:5d:6a:cf:54:2e:7b:63:31:46:90:
         95:29:43:ab:6c:86:11:4d:79:29:6f:c5:30:0e:c1:ea:9a:e6:
         65:00:10:e2:91:c9:e8:16:9b:b3:cb:80:f3:9a:66:14:99:79:
         c8:d9:bc:ca:8d:4e:68:36:e4:52:26:3a:ac:ca:d5:39:55:7e:
         1a:12:2a:80:93:38:e0:76:84:8a:d0:d8:7d:48:41:97:7c:d1:
         92:fe:97:f5:6e:1e:dd:a7:92:67:e2:82:ca:52:06:1f:aa:3b:
         49:3e:4b:d7:7d:8c:da:f3:9c:8f:11:37:ca:68:e4:94:48:96:
         f5:8e:d1:37:d7:9e:69:68:52:05:91:56:93:2a:75:4b:f7:be:
         cc:f6:e1:a4:97:0c:d7:4a:c3:80:42:91:b8:42:b4:25:05:46:
         bb:95:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:22:47 2024 by rpki-client on console-ams.rpki-client.org