Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
File:                     l2aFR6QzND3em7NllbyQO08UlgQ.mft (raw, json)
Hash identifier:          1DgKmmKOX4rm1Ne6p2Et+SRTpQ8PBMYT0R1T7Qa7OBc=
Subject key identifier:   9A:B4:53:17:DB:78:B6:DE:98:6A:8F:79:85:4F:2C:6E:DD:10:25:D8
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Certificate issuer:       /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial:       018F87ED384C693384A84A918655F439DC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: l2aFR6QzND3em7NllbyQO08UlgQ.crl (hash: DWQRiFRT18G/1HlSxgEVW0sz6fRgkWmQKv8fVWaU+10=)
                          2: ocUMd3KJFQvMeadkesrvD5x1X3I.roa (hash: YdLvMRUfJVXGsJDP8+S1kyg+9xnX2u5V6l0hAHiX4Uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:38:4c:69:33:84:a8:4a:91:86:55:f4:39:dc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=9ab45317db78b6de986a8f79854f2c6edd1025d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:78:f1:d2:0f:6b:88:4b:7c:ed:18:d0:f7:
                    f3:37:ea:49:fe:4b:7e:52:a9:61:e7:56:bf:52:bd:
                    57:1e:53:33:04:eb:38:75:6e:37:c0:93:f2:22:5b:
                    18:66:7a:78:85:5c:ad:c8:32:3b:d7:22:ce:24:80:
                    63:23:2d:4d:28:c6:8f:d6:44:1a:9a:7c:32:bf:81:
                    95:8e:79:33:38:dd:e3:4c:b0:2e:2a:77:d2:3a:f4:
                    86:d5:85:83:6e:5b:49:ff:c4:50:bc:3d:70:51:f7:
                    c0:a7:16:5d:fb:11:30:23:37:f4:2b:67:ef:f1:16:
                    50:26:41:cf:1a:5d:f3:48:aa:23:cf:a4:54:ea:76:
                    62:8a:e3:2c:f0:1e:33:fe:c4:e4:fa:4c:f6:89:db:
                    c7:9b:6c:07:3f:5d:7b:c6:3f:0f:6a:b1:88:31:19:
                    71:fd:06:e8:16:c4:0c:fe:c0:f8:ff:7a:79:e3:61:
                    16:28:84:c1:87:5d:9a:25:8e:0c:bb:0f:3c:55:43:
                    71:5a:cb:b7:80:a0:95:4a:17:ad:03:17:ca:60:1f:
                    d3:cd:d5:4f:96:52:30:76:b2:14:b0:b6:ef:da:72:
                    f7:f1:f7:6e:ea:06:26:17:53:c0:09:b8:a4:7a:23:
                    15:53:81:93:48:6f:53:be:8c:75:a2:15:f4:f0:0e:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:53:17:DB:78:B6:DE:98:6A:8F:79:85:4F:2C:6E:DD:10:25:D8
            X509v3 Authority Key Identifier:
                keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:c9:44:c0:6f:f3:15:16:68:3a:d2:db:90:1b:bf:1e:fb:
         ac:4f:52:14:cf:da:04:61:c3:d5:d8:56:6d:1a:88:4c:88:6f:
         5f:f3:aa:8f:38:d0:d3:3e:52:11:95:ab:d0:54:f4:c3:42:4a:
         e1:35:8b:5a:7f:bb:a6:62:48:d2:6d:6d:34:de:e4:86:96:12:
         38:b5:f3:6a:73:6b:50:53:bc:4f:e6:58:fe:a5:28:b3:12:9f:
         b7:fc:39:45:56:53:5d:e1:af:f8:24:f3:0d:80:1e:3d:55:96:
         94:1d:54:22:ba:9e:63:8b:17:fd:e7:7f:b7:0a:bc:ba:50:b7:
         42:dd:c7:d4:40:9d:a3:81:6d:c0:67:f8:e6:37:7c:86:4a:83:
         5e:c3:ee:6a:f7:d6:6b:4f:d5:df:17:8c:59:18:07:49:5e:38:
         6b:f4:4d:60:10:f7:f3:73:57:48:38:89:24:6b:d9:be:58:ca:
         64:bd:a5:bf:8e:04:0a:50:3d:21:3a:05:9e:79:3a:60:3a:2b:
         31:d5:51:e0:b4:57:20:9e:0a:91:0b:be:29:ba:72:c1:72:86:
         d3:ec:8e:2f:89:27:c2:0e:8a:76:ae:68:54:b7:b1:f2:d9:ee:
         19:de:02:c9:a1:c5:5f:ce:25:66:ca:ef:c5:ab:9a:e5:a9:60:
         00:93:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:13 2024 by rpki-client on console-fra.rpki-client.org