Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File:                     LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier:          kv9IVh1jMtJPHOpQKxRxQIvP4ukb/pbnJ6OZfwZRuUQ=
Subject key identifier:   35:A1:94:81:3E:A5:D2:A2:22:A4:C1:DE:76:4D:A9:F1:3E:BB:AF:4F
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer:       /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial:       018F87EDA7649BFEEBAFAB45D4939F638221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number:          0E86
Signing time:             Fri 17 May 2024 19:00:49 +0000
Manifest this update:     Fri 17 May 2024 19:00:49 +0000
Manifest next update:     Sat 18 May 2024 19:00:49 +0000
Files and hashes:         1: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: s4fQGqMV5hvvesRRpku54lG1v7jW8wrBfBo9IoNB27s=)
                          2: PbfRMjn3WsIZO0-DCZfHvSvJXGI.roa (hash: kH52aKaA0KTQA496SgsgW9wWcM6fuzNiW60ZLGn9ZY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a7:64:9b:fe:eb:af:ab:45:d4:93:9f:63:82:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
        Validity
            Not Before: May 17 19:00:49 2024 GMT
            Not After : May 18 19:00:49 2024 GMT
        Subject: CN=35a194813ea5d2a222a4c1de764da9f13ebbaf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:82:13:92:02:0b:de:d5:b4:19:c4:ad:e6:
                    1a:8a:ec:06:e4:fd:e1:69:25:25:ec:3d:97:73:64:
                    a1:51:6d:74:0b:20:1c:de:e2:c8:d6:64:2e:72:90:
                    e1:3e:b3:e4:1f:7d:b4:62:eb:d6:eb:aa:8e:1a:74:
                    c0:7f:67:01:a5:7a:4d:5d:ee:b4:8c:3f:3c:88:b5:
                    04:61:4b:58:b8:f6:17:88:dd:53:01:97:9a:b3:45:
                    f6:bd:06:35:c7:96:3b:d0:88:8e:bd:8f:61:28:d3:
                    71:bd:ac:b2:a3:f7:f4:ff:3d:03:d1:ab:d8:c4:de:
                    3c:34:0c:e4:54:38:ea:7a:57:00:52:f0:04:fa:3a:
                    90:11:a4:c1:ba:ca:5b:93:59:84:f0:c5:2b:a6:2e:
                    47:3a:dc:c2:fe:42:43:62:02:c9:ba:da:8b:f4:3c:
                    87:9a:c6:4d:8b:53:f6:9f:5d:74:b9:8a:31:ce:64:
                    dd:69:3c:f7:b9:1a:f7:21:de:2c:d5:79:cb:43:b5:
                    f2:48:1e:eb:51:d0:e2:00:27:f4:42:78:42:a9:e8:
                    fd:6f:5b:b2:3a:7c:25:4d:0b:4d:66:8c:14:d2:4b:
                    94:9a:58:22:1d:02:e1:31:dc:be:68:b9:69:74:1d:
                    ed:fa:3f:a4:9b:a0:47:ec:55:aa:1c:d8:33:d0:60:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:94:81:3E:A5:D2:A2:22:A4:C1:DE:76:4D:A9:F1:3E:BB:AF:4F
            X509v3 Authority Key Identifier:
                keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:76:a7:95:f3:87:3c:3a:99:ba:58:13:48:ac:ae:62:71:
         37:ea:a1:51:26:43:04:b3:73:91:29:4e:9e:f7:97:a2:ca:5f:
         7d:ac:fc:8e:68:55:71:39:03:43:05:9e:f7:04:46:df:c4:c2:
         10:fe:a7:57:b8:bd:57:4a:6e:45:3a:29:67:cf:b1:3d:c3:c3:
         37:36:0b:e0:35:ff:51:cf:58:ce:12:58:b3:b7:b5:25:d4:05:
         35:56:20:2f:f0:88:c4:f4:9c:6e:74:0a:7a:a7:d3:67:a6:12:
         14:4e:4d:8b:65:54:7d:3f:3b:e6:f3:23:31:37:3e:3d:02:1d:
         26:f0:5d:e9:c5:63:3b:3c:00:d0:d7:8b:75:3a:67:13:b1:2f:
         67:2a:f5:4e:aa:77:51:09:ab:68:12:6d:c5:af:0a:80:fa:38:
         9e:86:41:36:01:30:68:8e:f9:b2:60:c1:a9:1f:b3:d5:9e:9f:
         76:38:83:b9:a1:5d:19:5d:2b:33:75:05:d0:b4:fb:55:70:06:
         dd:ce:ee:06:d2:9f:80:cf:4e:38:fe:06:39:b1:67:f2:6a:7a:
         bf:dd:f8:aa:18:36:8a:50:dc:51:79:49:4c:94:aa:9e:28:57:
         bf:3e:ad:77:d2:0f:6e:3e:7a:34:97:aa:b9:19:bc:4e:40:af:
         6b:57:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----