Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
File:                     LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft (raw, json)
Hash identifier:          THQP5tuS6YOd9QR/d1cpiNXU7JuPpDzeHWEBUP3y+RQ=
Subject key identifier:   97:43:0D:30:C7:4A:ED:39:9E:FC:36:0E:4B:BF:29:A8:3A:0F:C7:A0
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Certificate issuer:       /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial:       018F874A4AEFFA26C22D9B9C667D023AC9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl (hash: rg80ldZrTtA+4b/3lrcdD9xgD/jHDjHZNCB+zJAkAgg=)
                          2: OsSBNm-xPNWGloxOhQyXFkAb-HU.roa (hash: Y4RYYz7rlU1V5xZFEFHdYXjo0o7YsDfG7x+DmLnhVLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4a:ef:fa:26:c2:2d:9b:9c:66:7d:02:3a:c9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=97430d30c74aed399efc360e4bbf29a83a0fc7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:4d:ae:1f:b6:dd:25:89:52:15:15:9a:99:
                    f3:ee:e7:de:97:53:01:4b:7f:3f:6b:ff:f2:cc:05:
                    6c:cc:90:4e:9d:50:1c:87:aa:85:8d:f6:05:58:97:
                    ec:c1:4c:65:30:ff:d8:19:d6:a3:ee:0a:8a:73:9f:
                    ec:aa:4f:27:1d:aa:f7:d2:a5:d8:0a:df:e3:94:a8:
                    86:46:19:98:11:9e:cc:27:de:31:19:cf:d0:ff:d3:
                    4d:64:25:4e:0c:e6:70:74:40:bf:7d:cc:1b:32:5f:
                    45:e3:f7:e1:6d:b8:fd:7d:d0:1f:f8:f1:ab:f8:c2:
                    09:fa:76:cf:bf:86:1a:85:07:b0:5c:aa:af:8e:fb:
                    55:a8:0a:a2:5a:c2:eb:c2:7e:7e:89:18:49:91:6f:
                    9c:3a:38:25:ec:5f:56:56:97:0a:b0:fa:7b:0a:56:
                    7c:97:08:24:14:d5:d7:7b:b2:cf:c1:82:15:56:42:
                    ca:43:7c:06:0b:75:16:4d:91:79:82:1f:f1:a1:cf:
                    cb:a1:a8:1c:0b:64:93:b6:3b:de:b0:46:32:70:77:
                    1a:a4:9e:e2:55:a4:12:95:8c:10:38:03:9e:2b:93:
                    8f:41:f8:66:b4:e6:78:cf:c0:45:2c:3e:eb:68:cb:
                    c6:7d:11:43:f8:83:b5:f6:50:c7:a5:a1:7d:7c:d3:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:0D:30:C7:4A:ED:39:9E:FC:36:0E:4B:BF:29:A8:3A:0F:C7:A0
            X509v3 Authority Key Identifier:
                keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:78:b6:54:1e:47:cf:4d:15:17:d0:0c:32:ca:2b:7b:99:
         23:74:b1:e5:6f:56:97:37:62:e3:bf:91:25:b0:ac:39:79:f8:
         d2:2c:fa:3d:16:6d:98:28:c2:0a:5c:af:01:40:02:94:1c:27:
         ff:99:9a:3d:de:fc:1a:e6:da:db:c9:d4:3a:d1:6b:58:9e:a6:
         c7:10:86:55:f6:49:1d:7d:7b:a4:e3:e7:a4:1c:ad:42:bf:33:
         e9:51:d2:bb:88:ba:d7:6b:50:91:5d:82:1e:8f:28:de:cd:25:
         75:b9:76:55:83:a1:39:74:51:f6:e2:e1:fc:a8:a4:69:88:d3:
         88:15:4c:0d:ce:fc:97:48:68:ba:97:42:31:b2:c2:e8:48:a8:
         4f:e0:17:bc:bd:9a:b9:a1:0b:96:4e:af:e5:6c:03:19:86:ff:
         0e:bd:e8:f1:e0:9d:fe:15:85:77:ff:67:aa:2d:70:a5:22:f1:
         b7:e3:e2:d1:62:fc:6c:04:f7:74:ce:b6:e4:3a:12:5c:db:93:
         76:80:3f:34:d1:8f:60:94:82:84:30:ee:a0:46:c9:8e:1d:21:
         c0:15:e3:ef:58:c3:59:d7:7a:ef:2a:ab:4a:c9:20:89:95:aa:
         8d:24:fa:be:89:46:a4:55:8f:79:7f:ab:e6:46:ba:b0:79:3c:
         03:47:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:47 2024 by rpki-client on console-ams.rpki-client.org