Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File:                     LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier:          Tqr4rXChk2UbXMIGXB5rNmDIG3JW4F9/OhSje/0a2RU=
Subject key identifier:   E5:D2:61:9D:ED:F7:AD:C5:BD:A1:2C:A1:4B:29:08:78:69:33:C3:85
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer:       /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial:       018F87489B79453BB7DA4FBF652A7415F66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: Gvu4DE8lIqAI1nIHN6rPEMy40JlxAQTzTZz2WKooBk0=)
                          2: MnTQatX3Z5f1YTUexVg6Tp3Jgek.roa (hash: nUAyt/otSI+mM+CXJtWBSCfPZxXPUw8iK6ivErF6HPU=)
                          3: eVRnMk_zP8xnXsXz6mfuwyzqKd0.roa (hash: fuTrwRFmElJu75EHQ4WpsSpOduIeZqG8CF/wKQR2awU=)
                          4: uB9fCIeOu3mwAIqxXwWREpcaaTc.roa (hash: fgrqHxowg0dxy5WZLlfbVObA4mXuLeYDLPBnPGoCj2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9b:79:45:3b:b7:da:4f:bf:65:2a:74:15:f6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=e5d2619dedf7adc5bda12ca14b2908786933c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:6b:91:fc:04:64:36:e7:4e:fd:79:c6:31:
                    10:f1:2d:9b:02:7e:c5:b8:9f:b0:c3:9a:0e:c7:f2:
                    fa:e2:41:bd:ff:ea:81:0f:d3:f9:c6:05:aa:e4:99:
                    39:1e:b2:25:25:c9:2f:27:f8:ba:8b:ac:3d:d8:1d:
                    ce:5c:ef:7a:8f:53:8d:a6:3f:b8:10:5f:6b:62:7b:
                    ad:59:7d:1c:d0:ed:64:81:0e:b8:1f:2e:62:62:51:
                    79:de:e9:ca:52:bf:4e:c2:5d:d0:be:ed:98:39:75:
                    cc:ca:36:00:fd:19:b7:28:e4:0b:2e:7f:fc:40:04:
                    69:26:a1:7d:2d:44:5f:81:65:ef:38:6f:f6:0e:e0:
                    a3:94:39:1e:f6:47:91:10:b9:a7:5b:fb:c1:8e:83:
                    e2:07:53:91:81:d0:3f:85:59:dd:62:8a:a6:51:70:
                    59:40:40:0d:a6:91:53:bf:9e:c5:5a:8e:bf:7f:7d:
                    e4:c9:05:4a:7e:e5:9d:5b:5c:80:79:3f:94:19:e8:
                    c0:d5:fd:c4:23:ad:0f:e8:f0:0f:cf:5c:4b:4e:d0:
                    0b:2b:1c:15:17:ee:c2:df:a0:16:29:7b:91:b2:4a:
                    dd:6a:10:9d:58:9c:98:2a:5c:df:43:7a:34:93:cc:
                    94:e5:3f:a4:31:d6:1c:a7:2f:be:7b:91:d5:29:b3:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:61:9D:ED:F7:AD:C5:BD:A1:2C:A1:4B:29:08:78:69:33:C3:85
            X509v3 Authority Key Identifier:
                keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:9e:80:21:c9:e1:e1:64:c4:cb:b3:e1:30:5f:c0:30:50:
         d0:a3:a6:27:2a:af:4a:29:99:02:08:5d:94:7d:8f:40:a1:39:
         db:95:b7:2b:c6:61:6a:54:29:31:a1:f4:3d:90:84:c7:52:5b:
         2b:1e:9a:d4:f0:53:9d:a3:b3:87:60:4f:65:68:3e:27:b3:f8:
         ad:33:a2:b4:93:f4:fa:7f:90:20:5f:a3:54:8e:ea:61:af:bb:
         77:92:67:ad:99:0b:9d:e3:29:31:6e:3e:3e:c9:a6:eb:d5:13:
         fa:36:fb:34:8e:b8:e9:a3:f5:36:ea:e4:6f:d0:82:b4:2a:4a:
         3e:e8:06:ff:db:c1:fa:87:18:80:18:12:75:56:f0:66:78:f1:
         1e:db:98:f8:64:42:f1:51:28:2a:bc:5a:fe:fe:4d:e2:4d:04:
         bd:bd:9a:70:2e:13:e6:db:31:9f:dc:02:05:b1:6c:f1:db:76:
         cb:74:d7:99:3a:e6:18:ad:51:d9:f9:ba:5a:b9:cd:63:23:43:
         ae:70:1f:e3:be:67:d7:d6:88:65:cc:85:2c:bd:66:03:89:d9:
         29:d1:21:e6:43:a9:6d:64:46:7a:b5:ba:d3:6a:09:b9:98:4e:
         c3:06:ce:77:43:a5:19:10:5d:4a:6e:3a:32:06:95:eb:72:d5:
         ce:2c:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:17 2024 by rpki-client on console-fra.rpki-client.org