Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          uWPsyGCVb2m5RkzR7W1WSGKFo3X1s5l/vFSY0pC4Ygk=
Subject key identifier:   F4:C2:5B:EE:D0:AA:6A:7C:E1:A4:37:6D:CE:5C:CA:AB:19:54:97:BB
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       018F87483BBEE5698011CE80BFF5F577FEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          108A
Signing time:             Fri 17 May 2024 16:00:08 +0000
Manifest this update:     Fri 17 May 2024 16:00:08 +0000
Manifest next update:     Sat 18 May 2024 16:00:08 +0000
Files and hashes:         1: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: JfTU56kHm80VBRlrL+buLniNXpxvwQM3xxlzp0+v36U=)
                          2: jeb2EJ_6IRMewdaFk3RNYJlxTcY.roa (hash: tmRgLgrl+/5S+YJf5sXC+tp2iaM9jnDGNJY2RBurEFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3b:be:e5:69:80:11:ce:80:bf:f5:f5:77:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: May 17 16:00:08 2024 GMT
            Not After : May 18 16:00:08 2024 GMT
        Subject: CN=f4c25beed0aa6a7ce1a4376dce5ccaab195497bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:b5:e0:5f:84:ed:78:e7:ad:0f:7f:fb:88:
                    2c:d3:6c:9a:dc:1a:a6:82:0f:af:26:b3:ab:0e:3c:
                    60:5a:0c:aa:ce:f1:25:2c:cb:7a:71:ce:8a:15:a9:
                    3e:38:19:82:4b:9a:3a:b2:73:03:01:b2:61:2a:af:
                    72:6b:0f:2a:77:2e:a3:db:80:2d:c7:bc:8e:9a:c2:
                    33:d8:5e:5e:20:49:fc:65:69:03:68:ab:44:a9:fb:
                    1b:ff:b8:b8:01:84:d0:22:8d:df:1b:6d:eb:3a:83:
                    67:39:a0:79:59:56:9a:d8:4f:5c:02:b4:89:9a:2b:
                    ec:af:86:d6:1f:d3:5c:9e:1a:34:fa:78:af:ad:e9:
                    b6:6a:94:54:af:fe:35:a9:9c:5b:ff:3d:cb:cd:88:
                    13:90:da:d7:c4:b4:70:8d:d1:a7:f0:29:df:fd:0f:
                    d5:dc:e4:c1:f8:03:14:50:08:ac:56:11:6f:bf:bb:
                    ee:c2:0f:03:31:38:f7:45:3a:5c:a4:3a:e6:c2:37:
                    c1:0d:e0:40:26:1d:b7:f4:a6:6a:4b:72:ee:97:63:
                    fe:70:b1:be:08:e7:29:82:f2:70:5b:6c:86:e2:d0:
                    34:5a:69:b9:43:dd:d1:5d:fc:4d:56:70:3a:ec:f2:
                    e2:c0:51:27:93:c6:11:0f:7f:14:23:f2:6d:c9:50:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:5B:EE:D0:AA:6A:7C:E1:A4:37:6D:CE:5C:CA:AB:19:54:97:BB
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:81:f6:9f:5f:4b:0c:7f:b2:30:95:df:c4:c3:fd:8c:e1:
         e7:09:28:67:7e:a4:c5:1f:f3:3e:01:91:ff:3a:b8:9a:7b:55:
         2f:65:a9:6f:00:63:47:f6:77:48:97:c4:b8:4e:73:20:d3:c1:
         ef:ff:78:f1:4a:cb:e6:63:58:44:ec:0e:ad:0a:0b:97:c1:d3:
         ea:e4:a9:76:36:de:46:80:1e:56:c2:92:9c:4b:cc:d9:db:bb:
         40:68:d4:37:4e:db:53:1f:3c:44:44:10:35:ec:ab:2b:d5:0d:
         a0:91:9e:38:18:e8:85:af:87:30:e4:24:53:f0:84:57:94:9f:
         c1:71:f8:17:6a:b1:09:27:19:89:11:21:a5:8c:12:5e:94:cf:
         bd:fe:0d:94:5a:20:2c:cc:17:2c:4c:c6:ac:8f:6a:ed:53:ec:
         af:9c:bf:22:5b:73:0d:a0:dc:49:ac:56:e0:94:60:c9:a1:b9:
         e9:c7:c0:33:f5:a8:fc:e2:ae:c7:fd:9f:36:18:e7:43:00:a5:
         a2:8e:63:8a:da:a7:3f:6b:9b:bc:a1:ec:f9:1a:f0:58:0e:bc:
         c7:e9:47:b9:af:f2:8a:ee:22:f2:63:18:ef:6e:5a:df:9d:79:
         a8:88:61:a1:6b:e7:1e:8c:3c:0a:64:19:9f:a0:9a:ea:e5:7e:
         db:fe:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:03 2024 by rpki-client on console-ams.rpki-client.org