Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File:                     LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier:          5JKti/ikfGteRT4NB0B0aRCiAs++Vg0dSiuoIBlojxA=
Subject key identifier:   E2:65:CD:7C:B7:1F:A2:08:DF:64:F4:18:6F:B9:C5:69:87:7D:43:A3
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer:       /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial:       018F87ED7792F1547FBF6A66F9ABCB1C6828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number:          0378
Signing time:             Fri 17 May 2024 19:00:37 +0000
Manifest this update:     Fri 17 May 2024 19:00:37 +0000
Manifest next update:     Sat 18 May 2024 19:00:37 +0000
Files and hashes:         1: 1CXnzfOy47KvPIa6daczh_yfjG8.roa (hash: HinPgThi413iqbXHQEvOYiXn1T1uWgfpK9/tQdhN4Lk=)
                          2: 33MZhkUBvuIy6EH9F04biBrx2pw.roa (hash: HpiW7n518CeDN+mGWFdsdYbcmVaJosF5LDx5Rad2sok=)
                          3: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 1P/TDT/jvzmWyCwtNadjravIcc9Kwp/yPAdMYac7yck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:77:92:f1:54:7f:bf:6a:66:f9:ab:cb:1c:68:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
        Validity
            Not Before: May 17 19:00:37 2024 GMT
            Not After : May 18 19:00:37 2024 GMT
        Subject: CN=e265cd7cb71fa208df64f4186fb9c569877d43a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:54:38:dd:5c:28:a9:55:25:66:f8:6d:a1:
                    86:a1:f2:bc:d6:9f:39:dd:b9:46:94:5a:93:60:ea:
                    d2:ae:11:00:2a:71:2b:c6:62:d4:61:41:a6:90:f8:
                    ae:90:43:3b:79:4b:9f:d9:b5:2e:26:bf:2b:c5:f9:
                    59:d5:89:f3:94:7d:ef:62:a7:c7:cf:aa:23:d3:3f:
                    51:4a:b5:a9:9e:8e:d4:1f:e3:69:29:29:c5:0c:8a:
                    52:25:75:2a:3d:d5:97:44:3a:1e:a0:98:ee:15:a5:
                    64:ea:78:26:e9:9c:8a:90:85:77:bc:ea:bb:1d:1c:
                    2b:f6:cf:44:7d:ee:e4:74:df:df:17:2a:57:af:14:
                    ed:47:e1:e4:11:40:0a:14:3b:12:83:39:d7:73:7b:
                    50:82:fb:0d:1b:7d:d4:67:d7:52:89:bd:f0:9b:aa:
                    3d:90:66:ec:d2:b2:09:ca:24:cf:34:5d:83:33:08:
                    4a:39:ca:ba:89:94:3a:8c:89:63:b8:cf:d5:85:49:
                    fd:5b:c3:20:2e:63:1a:32:37:c5:c4:d3:2d:7e:b4:
                    ac:61:13:eb:27:e7:97:10:2d:48:c3:4d:4c:a5:a4:
                    70:f4:67:86:5a:0b:ec:a1:dd:b8:0a:42:30:76:2e:
                    fb:2e:b5:b2:d0:de:5e:67:47:34:15:12:0a:9d:8c:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:65:CD:7C:B7:1F:A2:08:DF:64:F4:18:6F:B9:C5:69:87:7D:43:A3
            X509v3 Authority Key Identifier:
                keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:7b:d5:3e:d5:4f:45:fa:17:6d:8a:84:44:49:38:e0:70:
         8b:0f:12:a0:6b:88:50:d1:00:fc:c9:91:f6:82:57:93:b0:09:
         24:6c:ac:17:8a:d5:3f:a3:65:1b:04:39:4e:2c:0b:dc:eb:05:
         bd:f3:54:ab:b9:a5:73:5f:a9:cc:d6:ed:45:8e:72:4f:39:f3:
         cb:3c:ec:fb:21:75:e9:9b:0f:91:43:3f:b1:93:31:1b:e4:3a:
         47:76:80:bf:0d:db:d3:77:96:a9:c1:00:59:63:80:36:4f:13:
         6f:23:86:ed:b2:dc:67:1b:b5:ce:7c:26:d4:05:e2:6f:4c:8d:
         36:de:3b:13:72:ae:2a:aa:0e:93:09:9a:a2:d7:e6:dc:60:97:
         1b:62:5d:fd:13:1b:15:2c:80:31:08:aa:a3:ae:8c:04:a9:46:
         bb:da:ff:c7:71:a9:31:d0:a5:55:1d:7b:11:2d:c0:d4:c6:0a:
         ed:17:f7:2d:9b:e7:0c:49:4d:c8:be:c6:d0:25:13:d3:cc:cd:
         2d:79:c5:4b:f3:3d:bb:ec:80:75:84:d3:f8:e8:ac:0f:5b:95:
         be:85:7b:e8:b5:40:67:c9:78:e1:ed:66:6a:66:95:89:9a:9d:
         1a:94:b0:3b:31:18:8d:dc:40:b6:c1:5f:e0:2e:84:ac:de:3c:
         ed:17:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:58 2024 by rpki-client on console-ams.rpki-client.org