Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          MwQpsy7tVliAKOcdaMDRcvVYyrbZRaAdwtM1qCVblUM=
Subject key identifier:   FC:8F:AE:B8:F5:E4:C6:0B:E2:74:39:69:B9:F0:43:7A:36:BE:A3:1D
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       018F885B0F54FF65253CF8CC6345E0FBA2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: 2K4wfaJqRq6R87ibmYvNzkGT0tLt/62UqsV4U9cvlCQ=)
                          2: TRoXRGLcIDzfQAvyPAIFh6qDCq8.roa (hash: qQzjDsjm6SJWb3OyC2EMEuth0w/KD0r4GZLIT085SBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:0f:54:ff:65:25:3c:f8:cc:63:45:e0:fb:a2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=fc8faeb8f5e4c60be2743969b9f0437a36bea31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:4f:4d:fb:0a:1e:51:43:b2:a6:2f:df:8a:
                    38:88:51:28:10:d7:02:ee:a1:0d:d6:8b:7f:72:17:
                    c5:b4:d8:f3:cd:01:61:14:0d:22:98:2e:db:7f:97:
                    d9:1e:cb:fc:7b:73:48:68:b0:bb:5c:bf:19:31:10:
                    40:43:2b:47:84:85:d6:ac:b6:be:ff:8f:a2:c6:cc:
                    1e:4a:d8:93:98:a2:61:e0:87:6c:57:2b:a6:43:5f:
                    30:3b:9d:ed:6a:17:e0:43:c3:b0:e8:c8:d0:41:20:
                    28:8f:e0:47:16:e8:de:51:1a:09:f0:2c:5d:0f:b5:
                    6b:ee:f8:61:50:e2:e5:d9:41:f8:a2:88:eb:cb:01:
                    74:a6:90:d3:86:35:64:02:d8:0f:de:31:26:fd:3b:
                    74:23:05:6a:4a:3d:ae:07:60:95:57:9e:e8:c2:f8:
                    88:cc:a5:00:8c:d6:72:a3:8e:37:0b:54:e0:b6:58:
                    c2:5e:97:d7:0b:e0:c5:1b:f0:1f:6b:86:a5:76:23:
                    f9:08:ab:d5:89:d7:5c:a1:0e:f9:d6:90:d7:31:de:
                    11:5c:a0:4a:62:55:0a:7a:ec:11:08:db:6a:69:87:
                    21:ea:c7:29:31:56:6c:3b:5a:33:0c:12:9f:ec:ea:
                    6b:64:27:4c:d6:2c:46:93:1d:b7:36:b4:eb:db:48:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:AE:B8:F5:E4:C6:0B:E2:74:39:69:B9:F0:43:7A:36:BE:A3:1D
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:86:da:f0:b1:bd:2a:f4:94:18:64:d0:0d:63:68:4c:f3:0e:
         93:b3:0b:fb:ae:65:27:bc:4f:e2:98:70:77:a5:42:f7:0b:87:
         33:5e:ef:91:44:a6:29:50:ca:c7:d6:21:49:2d:3a:a8:a6:2f:
         0b:73:17:3b:ba:2b:ac:bd:aa:95:1d:4c:89:ab:ca:40:55:ab:
         60:45:f3:77:3c:5a:91:a3:e6:7b:80:f6:10:1b:d6:65:f3:bd:
         35:d7:60:6b:92:67:eb:e6:a7:75:72:21:a5:6d:e9:a7:a5:c4:
         c2:53:dd:86:7f:93:3d:89:a5:82:70:2e:0b:b6:92:ae:ac:be:
         b4:56:f9:25:16:9b:29:75:c0:c9:41:a4:29:35:d5:3c:08:61:
         8d:3b:b3:3b:d9:c2:29:da:d4:68:d4:77:24:4f:c6:e9:5c:c2:
         f8:64:fd:ad:f2:be:0b:3c:c4:19:d3:55:3e:66:7c:50:19:f7:
         bd:f2:af:56:43:9f:27:da:34:3a:79:65:ff:d4:33:70:7e:af:
         3f:da:cf:eb:cc:67:bb:f8:76:3c:ce:f0:9b:c4:6f:9e:c6:3e:
         39:7d:5d:f3:c6:bb:87:a2:88:71:1c:0a:63:db:ff:13:a2:d6:
         58:62:38:29:c3:5e:43:b6:17:dc:f8:43:47:08:98:bb:f0:a6:
         46:71:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:17:35 2024 by rpki-client on console-ams.rpki-client.org