Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File:                     LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier:          kxZZAKf7OQP/Z6hdbIikUFE1IZQpR7pOBcT3FaWj/hg=
Subject key identifier:   CD:6A:9D:74:F1:03:D7:48:19:B3:6D:60:32:56:E4:59:04:65:09:21
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer:       /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial:       018F87ED33FF2796FF99762111D32E73496D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number:          0C6B
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: H7NryRhsTB88AEPA7-axy1B9Bnw.roa (hash: Y/QFTaELz4QTjODxY0Ox7LKUb8C7z/HSVMsOaA/36ak=)
                          2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: T5zcHIJXaQ1MBBPHjoDUx/fuqCM5R6mNOHi4kLEZySs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:33:ff:27:96:ff:99:76:21:11:d3:2e:73:49:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=cd6a9d74f103d74819b36d603256e45904650921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:88:6d:19:59:b8:4c:ac:29:d2:f7:76:b9:
                    af:27:1b:03:27:50:f9:c7:51:0f:b9:b9:ca:a4:0b:
                    87:15:70:5f:73:92:a5:9f:0f:ca:f2:70:66:19:30:
                    49:33:d3:c6:06:cb:67:25:dd:df:3e:aa:ae:59:99:
                    e4:46:12:c1:fb:93:e1:a8:08:d8:18:e0:c0:48:33:
                    12:4f:5c:00:b5:cb:a8:4a:00:25:55:ff:a4:a8:83:
                    f7:d3:10:26:5b:9c:a2:c3:a2:e7:9e:f4:53:05:3f:
                    00:0c:51:40:ba:60:16:15:e1:80:73:81:80:4f:88:
                    86:42:41:83:ee:61:a7:aa:f0:a1:76:c1:22:f0:31:
                    f9:ce:f0:97:ac:df:82:35:f4:d1:f2:b8:02:73:af:
                    d6:76:c9:4d:9e:8a:9e:8f:f4:8f:50:f1:17:64:e1:
                    18:a7:3b:7b:2d:ac:e0:c1:c6:0f:3d:3a:8d:02:ef:
                    75:0e:a5:97:11:fc:33:4c:be:19:4b:de:86:2d:f1:
                    c5:05:1f:d0:0a:e6:5e:07:b4:21:81:97:ef:38:6f:
                    48:93:bb:64:0e:ed:3c:9d:de:75:5a:4b:a4:40:01:
                    54:c1:59:16:18:39:bb:53:b4:08:70:f8:c4:f4:b1:
                    31:70:52:b7:39:90:ef:38:da:ab:d9:ed:f7:dd:2a:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:9D:74:F1:03:D7:48:19:B3:6D:60:32:56:E4:59:04:65:09:21
            X509v3 Authority Key Identifier:
                keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:9d:90:1f:72:c3:4d:d3:16:19:f5:66:2f:27:ef:eb:39:
         57:8d:62:e3:64:d6:c6:f8:d3:0f:f0:d3:b1:5f:81:84:75:dc:
         27:8e:e5:d2:90:f0:ac:ac:bb:03:ec:b3:e8:01:74:22:b4:c2:
         5c:fc:60:1b:e2:93:e8:ee:08:7a:68:88:13:31:37:2c:0c:15:
         bc:ae:65:5b:5c:d2:36:c3:c3:6c:e0:90:9d:9d:3a:ea:5d:14:
         ae:6b:61:2a:07:f4:bb:ac:23:39:ad:f6:5b:ea:32:c0:f0:70:
         13:6c:c8:17:19:44:aa:10:19:1d:fc:f5:9c:0d:08:23:51:16:
         b7:56:a1:7d:09:f4:5f:2d:0a:31:27:c5:73:54:9e:f3:94:bc:
         6b:85:75:41:38:5b:9b:65:9d:c2:14:61:95:21:39:d5:da:b0:
         ee:57:15:08:f6:92:20:61:a3:b8:61:c8:95:71:f2:97:33:dc:
         b4:ca:53:be:55:01:d6:8c:cf:7e:da:fe:ef:c0:d0:18:a2:c7:
         b5:a3:05:3b:f3:84:94:fe:59:8c:9c:de:93:1f:5d:67:08:03:
         72:a6:04:2e:e5:1f:c9:d0:70:19:2e:13:1f:ce:8e:cf:ed:0e:
         9d:15:8c:a3:06:ab:52:67:1a:c5:88:c1:ce:09:c7:40:3f:5a:
         24:35:68:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7TP/J5b/mXYhEdMuc0ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjQwNTE3MTkwMDIwWhcNMjQwNTE4MTkwMDIwWjAzMTEwLwYDVQQD
EyhjZDZhOWQ3NGYxMDNkNzQ4MTliMzZkNjAzMjU2ZTQ1OTA0NjUwOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1KIbRlZuEysKdL3drmvJxsDJ1D5
x1EPubnKpAuHFXBfc5Klnw/K8nBmGTBJM9PGBstnJd3fPqquWZnkRhLB+5PhqAjY
GODASDMST1wAtcuoSgAlVf+kqIP30xAmW5yiw6LnnvRTBT8ADFFAumAWFeGAc4GA
T4iGQkGD7mGnqvChdsEi8DH5zvCXrN+CNfTR8rgCc6/WdslNnoqej/SPUPEXZOEY
pzt7LazgwcYPPTqNAu91DqWXEfwzTL4ZS96GLfHFBR/QCuZeB7QhgZfvOG9Ik7tk
Du08nd51WkukQAFUwVkWGDm7U7QIcPjE9LExcFK3OZDvONqr2e333SpRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1qnXTxA9dIGbNtYDJW5FkEZQkhMB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0edkB9y
w03TFhn1Zi8n7+s5V41i42TWxvjTD/DTsV+BhHXcJ47l0pDwrKy7A+yz6AF0IrTC
XPxgG+KT6O4IemiIEzE3LAwVvK5lW1zSNsPDbOCQnZ066l0UrmthKgf0u6wjOa32
W+oywPBwE2zIFxlEqhAZHfz1nA0II1EWt1ahfQn0Xy0KMSfFc1Se85S8a4V1QThb
m2WdwhRhlSE51dqw7lcVCPaSIGGjuGHIlXHylzPctMpTvlUB1ozPftr+78DQGKLH
taMFO/OElP5ZjJzekx9dZwgDcqYELuUfydBwGS4TH86Oz+0OnRWMowarUmcaxYjB
zgnHQD9aJDVodw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:55 2024 by rpki-client on console-fra.rpki-client.org