Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File:                     L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier:          3p23F96r/7GN/GkpVYH+RH2o1sw5ozhQ6aZa7iwdr1s=
Subject key identifier:   88:7F:E1:ED:A1:44:56:86:2F:4F:91:9A:6D:D7:F5:D3:42:12:8D:5E
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer:       /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial:       018F874A92F1A753FCFBD76839783590D2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number:          0D82
Signing time:             Fri 17 May 2024 16:02:42 +0000
Manifest this update:     Fri 17 May 2024 16:02:42 +0000
Manifest next update:     Sat 18 May 2024 16:02:42 +0000
Files and hashes:         1: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: UJsdAj+22pVA0jb2pdM1MGmVcSd1rHxcKN67nEhx6mM=)
                          2: aNT6wimkshbqVB1V5Q1pXcWrHPA.roa (hash: ZtCk0Ml1mg37SovzS8O5xFvW8o5qnap7odDixLSgaeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:92:f1:a7:53:fc:fb:d7:68:39:78:35:90:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
        Validity
            Not Before: May 17 16:02:42 2024 GMT
            Not After : May 18 16:02:42 2024 GMT
        Subject: CN=887fe1eda14456862f4f919a6dd7f5d342128d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:d2:6b:85:b3:de:77:6f:af:06:b2:30:53:
                    cb:2c:4c:56:42:e2:09:4e:8f:2b:4b:d5:ef:eb:88:
                    64:ba:6a:6f:d8:18:ff:8b:29:4a:13:32:fd:95:0a:
                    d6:97:ee:79:da:5a:ec:f4:e1:f2:23:66:38:81:6c:
                    98:2a:6e:a7:00:bd:21:20:27:4c:f7:99:6e:14:68:
                    ba:95:68:6c:a0:97:13:a7:f1:bd:12:d6:f3:c5:d5:
                    ea:68:7e:82:dd:1c:9a:89:be:f1:90:9d:ae:3b:03:
                    e3:5b:73:29:29:3e:cb:66:61:4c:e8:b9:dd:38:4b:
                    dd:23:f4:b0:03:24:49:98:2e:97:2f:c2:29:dd:61:
                    ba:3e:69:c3:eb:c4:16:35:bb:dd:cf:c7:ae:a6:b7:
                    4e:ac:5a:21:6b:1f:6e:8a:c4:d0:01:60:9f:4d:4b:
                    d7:b0:cb:26:df:e9:2d:cf:e3:ad:b3:68:a2:26:94:
                    a7:7e:b1:6b:84:34:95:d4:b9:21:ec:9e:25:1f:ff:
                    b1:0a:a8:55:5f:66:e1:08:0d:3a:c8:fe:6f:8e:1f:
                    5d:a6:ac:da:2b:31:cd:6b:f0:cb:e6:4f:5f:47:10:
                    63:5a:1a:b1:76:2f:3a:98:58:72:84:85:ad:e7:93:
                    e7:99:c1:64:5d:32:18:c7:20:f3:b1:c7:df:e9:62:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7F:E1:ED:A1:44:56:86:2F:4F:91:9A:6D:D7:F5:D3:42:12:8D:5E
            X509v3 Authority Key Identifier:
                keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:60:45:fc:dd:08:0d:ea:d8:37:ba:b4:fe:48:b7:6c:a4:d8:
         f0:ad:fb:a6:3e:f1:72:35:e6:1c:b1:d4:f1:63:12:2d:76:4b:
         10:35:8b:06:5a:80:19:de:b0:08:20:4d:5d:b9:89:9b:e5:b8:
         23:6d:35:f9:d6:26:f7:c0:20:74:d1:da:ad:7a:60:b6:5e:9a:
         78:26:9e:73:05:69:36:15:a5:46:bb:50:5b:cd:b1:ba:0f:88:
         cd:42:12:36:8b:03:e6:5e:c4:4f:e6:c3:74:08:ec:af:78:39:
         a3:21:16:58:7a:e1:33:b6:53:8f:8d:37:fb:3d:2b:52:79:57:
         3a:e5:3b:b9:04:45:5d:d8:88:21:a6:2d:f6:c2:36:89:ee:ea:
         cf:13:af:39:57:41:f8:39:9a:97:aa:37:c1:e3:6a:98:e8:01:
         20:fc:48:e4:8b:b1:97:b8:c3:3b:af:56:62:b4:9c:3f:2d:4c:
         7f:89:5b:47:55:5a:16:b4:17:9e:1a:0f:66:78:ec:b1:70:fd:
         75:45:25:af:2f:17:12:79:c3:b1:9c:e4:16:e9:87:a6:41:17:
         8a:38:47:0c:58:e8:ad:e4:59:7f:d5:0f:3b:5f:2a:a6:49:0d:
         d5:5d:2c:94:51:5f:af:59:01:4a:56:fb:cf:c0:b6:d6:d9:4d:
         fb:4f:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:59:42 2024 by rpki-client on console-ams.rpki-client.org