Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File:                     4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier:          KsNyOM/LLIV9jVmBBQAxckgIopy0vJPDw6YjihpjNVM=
Subject key identifier:   A0:99:D9:6C:F0:46:37:D9:6B:17:CA:B9:A4:94:D9:02:20:8B:64:72
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer:       /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial:       018F45A260E830931BBB369ABF474F67E349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number:          0462
Signing time:             Sat 04 May 2024 22:03:40 +0000
Manifest this update:     Sat 04 May 2024 22:03:40 +0000
Manifest next update:     Sun 05 May 2024 22:03:40 +0000
Files and hashes:         1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: MzuQGaG23TSMWNKEzBSJ/Umjk98yce3pOBvO1CrWTuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:60:e8:30:93:1b:bb:36:9a:bf:47:4f:67:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
        Validity
            Not Before: May  4 22:03:40 2024 GMT
            Not After : May  5 22:03:40 2024 GMT
        Subject: CN=a099d96cf04637d96b17cab9a494d902208b6472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:f6:07:89:3d:92:6a:41:03:36:90:b5:44:
                    f8:a6:ce:a3:36:4c:0e:eb:3b:40:7c:13:87:73:69:
                    0f:ab:9d:d5:c8:76:f5:b7:02:58:86:e4:11:96:16:
                    80:44:58:a3:1f:45:7a:23:d2:83:fb:d8:55:d4:46:
                    d8:e0:82:86:66:2f:06:a0:e8:c1:8b:9a:0f:3e:0c:
                    b4:89:c5:01:71:0f:b3:26:d5:66:51:c9:26:08:de:
                    51:22:9e:3f:b7:c5:79:35:78:42:aa:6a:a8:27:f4:
                    3a:70:4c:5c:23:5f:83:5a:b1:32:24:6a:79:27:71:
                    c3:e3:e3:69:c5:44:d7:6e:d8:09:83:92:8d:48:fb:
                    4a:8d:7b:fd:c9:72:96:9f:86:e1:ca:f9:a9:5c:ea:
                    de:d8:21:8b:f1:89:ea:75:a1:a4:4e:d5:da:d9:9e:
                    3d:45:3f:11:79:a6:bd:21:1b:65:3a:cd:e7:50:b1:
                    aa:9b:76:8d:aa:79:41:aa:8f:0c:29:48:65:73:ea:
                    c1:61:27:64:e6:cf:df:98:eb:b0:a0:1a:2b:69:6c:
                    25:a6:e5:78:d3:43:08:d3:d6:55:6f:70:83:db:be:
                    8a:a5:b4:b2:5f:bf:6a:55:4a:96:bb:19:2b:ba:cc:
                    a0:eb:5d:92:aa:98:2f:e5:5e:c2:57:5f:c8:75:8f:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:D9:6C:F0:46:37:D9:6B:17:CA:B9:A4:94:D9:02:20:8B:64:72
            X509v3 Authority Key Identifier:
                keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:be:95:4b:50:62:2e:f1:79:72:9e:43:cb:fd:26:ac:36:
         8f:b7:d1:1d:53:12:4e:42:fe:ff:88:48:1d:52:69:14:17:72:
         52:7c:60:78:11:1c:22:52:13:e5:d0:7c:be:c4:49:49:00:d1:
         75:4d:6b:1b:ee:2c:05:1a:b5:63:c4:63:24:d0:57:d8:e0:8e:
         0f:17:92:0d:f5:e6:60:de:4f:ae:f5:90:8c:fa:54:40:ca:fe:
         8a:af:81:87:49:c1:19:b2:15:3b:df:1c:ad:1c:a7:90:b4:c8:
         5c:4c:a5:c8:9e:1d:f4:af:b3:09:5d:ad:d1:7a:a6:cd:c8:cd:
         f2:94:2b:57:55:48:17:e2:b2:84:a4:d0:f8:b8:50:d3:b3:4c:
         3e:44:86:b5:2d:e5:36:94:ba:7a:fb:8c:99:b9:3e:e3:92:15:
         1d:56:fd:71:f4:c9:e7:30:cb:e8:95:31:36:7e:51:24:66:e7:
         2c:be:69:8c:ce:43:db:87:78:a5:a4:7d:56:8b:ad:a6:b4:e1:
         03:dc:7c:0f:3c:3c:1c:a3:d1:83:09:37:2b:78:96:f4:bd:4f:
         35:bc:80:45:4a:94:33:94:64:32:67:eb:f9:63:5e:1f:04:fe:
         66:56:63:c8:9c:d4:d9:01:b6:10:67:46:d9:6c:29:ec:8a:33:
         b6:9e:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:29 2024 by rpki-client on console-ams.rpki-client.org