Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File:                     LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier:          FO+xfu9uJ8YR/x0ROYkgWGIFFTIswbKtfL9isuvlBVI=
Subject key identifier:   1C:72:AD:D6:11:FD:01:C8:7E:0E:DE:20:13:DE:86:C2:2A:82:49:28
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer:       /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial:       018F874AD0214272608A9DE1EC79954171BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number:          01F7
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: 7hZfH9MEa9Plu1SecQjaRDivxmxEFBLPZfju176xGvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d0:21:42:72:60:8a:9d:e1:ec:79:95:41:71:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=1c72add611fd01c87e0ede2013de86c22a824928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f9:cc:43:77:5d:06:eb:5f:f3:24:d3:23:1b:
                    9a:56:1f:50:17:c2:5b:c2:47:8f:54:57:fa:1d:f2:
                    48:fa:83:af:ca:9f:88:4f:17:b6:9f:a9:a5:5b:68:
                    fb:6a:35:92:dc:20:59:7a:e5:75:35:d8:34:26:0b:
                    7a:24:29:51:46:82:a4:bd:3d:46:fd:f9:a3:f9:65:
                    11:40:a5:78:fa:f7:71:3f:0a:ea:6b:85:11:37:52:
                    37:8d:bf:1b:76:b9:3b:8b:90:08:5e:a2:fd:68:d6:
                    ef:d7:e8:3e:6e:21:0d:aa:79:cf:bf:66:92:c7:90:
                    3e:1d:2b:bc:d2:bd:ce:de:01:31:38:ac:ed:3e:f9:
                    78:a3:b8:ae:91:d9:81:3a:72:87:b8:36:74:fe:5b:
                    db:5a:19:ee:28:ea:46:29:76:75:43:66:1e:ca:5a:
                    1b:fa:d6:9f:ca:2e:99:22:32:16:49:e4:ca:13:3a:
                    b0:ba:f7:32:2d:e2:3c:46:bd:16:2a:c4:6e:30:f0:
                    43:66:47:07:99:45:25:2f:82:a0:fa:ed:1d:31:6d:
                    db:9e:48:d4:c9:20:60:92:79:c3:a9:f4:d9:ba:26:
                    23:c6:10:6d:d6:9d:91:92:45:1d:b8:52:24:4b:ac:
                    2b:c1:2c:49:68:c7:eb:ee:8b:a5:73:ab:c9:b6:09:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:72:AD:D6:11:FD:01:C8:7E:0E:DE:20:13:DE:86:C2:2A:82:49:28
            X509v3 Authority Key Identifier:
                keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:e5:d7:6f:c9:42:05:91:eb:67:6a:3c:83:0c:5e:a4:5e:
         0a:12:28:4a:11:66:f4:68:c0:eb:8e:62:9e:e0:95:5e:e6:7b:
         e9:99:1c:72:bf:a4:91:d9:c4:fa:78:b5:86:44:ad:51:c4:de:
         0a:34:c2:c4:8e:77:be:9f:f5:e5:ca:67:23:58:6b:b5:a0:6c:
         8a:17:95:58:7e:2e:36:6b:74:22:51:6c:23:67:ce:ff:c5:ff:
         aa:50:b2:3d:af:e3:2b:0d:81:56:a7:af:40:4e:db:61:eb:56:
         e9:4d:c5:28:d0:5f:73:27:a0:bd:58:25:8a:95:bb:c1:d5:25:
         ec:d7:55:87:b5:2b:c5:93:31:6b:68:31:ef:d9:0a:d1:43:35:
         f3:ee:25:10:2c:82:04:5e:7c:92:e8:17:18:a5:44:eb:96:58:
         cc:04:6f:81:78:c7:de:03:c5:35:37:8a:77:a4:d9:cd:c4:aa:
         07:9a:b2:d9:f9:ec:13:c6:2c:5d:ff:e1:9f:4a:25:e5:6d:93:
         98:3a:6c:e8:50:9a:36:db:32:56:b1:42:fc:d7:5e:73:62:b7:
         16:5e:15:f1:33:6a:16:09:7e:40:f6:1d:84:17:16:19:08:cb:
         f6:10:bc:f5:6f:81:8a:68:16:18:64:83:23:b7:ae:cf:eb:56:
         86:b7:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:07 2024 by rpki-client on console-fra.rpki-client.org