Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File:                     LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier:          ylv8cjNCqztBUMcO8NxCrCbWDSPO0AqTVhzlUDWZfK0=
Subject key identifier:   3C:0D:8E:7D:5E:67:6C:58:8E:88:E8:8E:50:A0:36:67:F3:58:76:44
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer:       /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial:       018F874A3A04A7590DE76943EF2228B99FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number:          0AAC
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: jPkUUCM2JSuDfMdzBq7UAdk4azoOzkp/Znx31+2kGeI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3a:04:a7:59:0d:e7:69:43:ef:22:28:b9:9f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=3c0d8e7d5e676c588e88e88e50a03667f3587644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:e3:db:78:02:dd:b2:74:a5:14:18:2c:42:
                    d8:bd:c3:dd:7a:47:39:ff:45:f4:c1:56:40:42:7c:
                    8c:c8:0c:02:45:1e:cc:cf:41:b3:ce:d3:1e:da:02:
                    b9:31:0c:97:ca:3e:63:2b:2f:2d:93:22:10:81:cf:
                    80:9c:1b:5b:96:8d:f5:f9:e3:3c:8d:08:94:c9:48:
                    d7:76:8a:e8:3b:cc:90:75:96:fd:bd:b0:20:a0:67:
                    bb:79:8a:b3:8d:ac:48:8a:5b:ee:d6:3d:2d:dd:0b:
                    9e:ec:ef:b2:43:2b:cf:90:1c:58:7f:b7:76:a8:3e:
                    6f:c1:90:36:7c:d2:28:9c:c1:20:2b:1f:a8:7f:e3:
                    ad:3d:e7:cb:b5:9d:ff:c9:5a:f2:d8:90:35:1a:46:
                    95:46:3d:bf:b6:f3:47:e3:bb:ee:cb:c4:21:7b:1f:
                    4e:52:3e:32:ff:a8:b1:46:38:28:26:49:d1:f8:ce:
                    55:66:d3:38:63:32:f6:e5:fa:9f:4c:50:41:f0:31:
                    0e:8a:16:5b:bf:3c:15:50:57:1a:f9:6b:bb:9d:c5:
                    e4:12:4b:33:cc:00:0a:92:cc:01:8c:55:78:0b:02:
                    14:b6:b3:70:54:e6:62:3b:d4:7b:46:92:6a:f1:d5:
                    ad:be:b0:da:b9:5f:be:b5:2e:44:f1:d2:bd:f9:04:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:8E:7D:5E:67:6C:58:8E:88:E8:8E:50:A0:36:67:F3:58:76:44
            X509v3 Authority Key Identifier:
                keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:c7:88:c1:10:3a:75:c3:73:ca:10:ae:53:bd:b3:d4:0c:
         63:c1:59:6e:ac:74:02:35:16:37:d4:ef:d1:19:f8:86:68:3a:
         42:31:c0:fa:d4:52:82:a3:67:4a:87:8b:d0:68:43:6e:ec:1b:
         97:03:d9:c6:5e:12:a9:3c:29:f5:e6:80:36:79:45:57:f5:ae:
         ef:80:73:75:95:10:13:8c:2a:36:8d:59:50:3e:de:83:5c:0d:
         4d:f5:2f:31:d5:7a:cc:ca:95:ae:42:2d:f1:fc:c3:e8:73:09:
         ed:8e:70:37:79:f2:a0:f2:db:c7:1f:3e:70:f0:d0:df:75:55:
         e7:65:12:56:9f:60:a5:6b:e5:91:e9:e7:32:a8:dd:c8:cc:ea:
         b9:e4:6f:14:ae:1a:d9:f2:16:5f:ee:41:b4:04:81:9e:ee:09:
         45:ab:2b:27:6c:3b:0f:2d:a5:d8:ed:f7:dd:98:ed:b2:dc:8d:
         23:51:4f:bf:07:3c:8b:41:9f:35:70:8a:4b:73:78:61:37:df:
         53:34:af:ad:bd:2d:18:74:37:47:c7:97:47:9e:14:88:08:8f:
         3a:e1:56:65:cd:ba:af:02:e8:d0:3b:88:67:b0:00:bd:e4:76:
         f5:f7:ee:c6:28:b9:3c:bc:57:6d:68:2b:38:bd:95:1f:04:fc:
         a1:29:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:49 2024 by rpki-client on console-fra.rpki-client.org