Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File:                     LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier:          Mu90XF5uBGC2pGyooDx2/eJFvDeaklb8/7IIiX4y6Co=
Subject key identifier:   A7:9D:E8:13:5B:D0:FE:C9:2F:99:A9:FF:9E:9E:D0:44:88:C3:BD:5F
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       018F87B6498AB1C5E9BCE1300D42434FEB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number:          08E9
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: Fo_41I57-mePodQ0q0_z5xOxnI4.roa (hash: K1aZreeX49DdvKGaWebvilTtUwK3jvLEezAbOhi+7rU=)
                          2: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: Y5ccbkwjj+SeO6j6Uy3HOFYLLP8LcMyTMxB6czKe2gk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:49:8a:b1:c5:e9:bc:e1:30:0d:42:43:4f:eb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=a79de8135bd0fec92f99a9ff9e9ed04488c3bd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:4f:aa:c6:64:60:59:05:30:d1:64:2d:92:
                    bb:e5:8e:7d:53:e4:d6:f9:51:0b:44:45:d4:b5:62:
                    f9:d5:16:e7:35:bc:98:9b:aa:d2:6e:3f:d6:c2:02:
                    f2:8a:36:83:35:cb:0e:28:48:4f:31:d3:90:c4:54:
                    af:14:5f:f6:fd:22:34:43:e6:e5:af:f3:7b:97:88:
                    ac:c4:f7:e7:0f:1a:37:a5:b1:20:2e:81:b1:7a:da:
                    b3:de:02:fc:c8:9f:43:df:48:cc:57:5d:74:7d:51:
                    08:ac:dc:33:9f:b8:96:31:c4:c6:78:92:3a:6e:ca:
                    e2:6f:21:c6:94:27:96:c3:d4:80:6c:dd:21:a2:7a:
                    39:23:c0:58:21:2f:25:58:da:0a:18:02:1c:2c:6b:
                    cb:76:75:29:16:33:a5:35:d4:a2:6a:43:5d:de:f7:
                    6e:7b:5f:83:c3:ae:ac:d8:8d:4a:3d:cd:98:bc:4b:
                    ce:2f:84:c5:03:ee:d2:01:ee:0f:09:5d:ab:ac:79:
                    ee:cc:6d:66:9a:01:2a:8c:f4:ec:9a:42:2d:f8:bd:
                    5e:fe:30:32:96:5a:fc:64:bf:7d:22:9a:29:ae:2d:
                    b0:2d:5c:5c:9f:08:d6:c0:77:90:16:d1:b9:4c:d4:
                    55:81:a8:54:88:57:d4:2f:2d:f1:40:be:c4:b8:94:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9D:E8:13:5B:D0:FE:C9:2F:99:A9:FF:9E:9E:D0:44:88:C3:BD:5F
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:90:7a:33:ff:ea:6d:c9:35:97:cc:99:72:73:ed:1b:74:
         3d:36:cf:2d:76:c7:ec:87:eb:8b:c9:73:77:99:a9:8a:7b:d7:
         a6:11:5f:87:2c:ca:6b:50:0e:89:ea:9e:90:6e:19:d9:78:94:
         45:c8:3c:77:4d:0d:8b:90:6b:c3:1c:ad:85:33:e3:fa:af:52:
         4a:7a:64:bd:78:9f:c0:78:10:c5:7f:fd:1c:bd:70:73:38:e9:
         bf:ca:7f:88:87:cb:11:32:a1:7e:9b:1c:04:a3:bf:b2:be:c4:
         25:0f:6a:fe:41:6e:59:ad:f9:5b:9f:ba:ab:e0:17:f9:11:70:
         0c:16:9f:4e:a9:57:6d:91:08:2c:30:fb:a6:81:f7:13:09:46:
         32:c5:a5:cb:6f:5e:15:85:d6:20:e1:54:99:15:33:be:9f:cd:
         8d:3b:4f:de:7d:f8:79:a0:5c:1d:0b:33:21:7a:46:cc:01:53:
         a7:db:8e:b6:6e:1d:e5:53:05:4b:f7:ef:c5:72:fa:c9:41:e8:
         a8:e5:a6:14:87:bd:83:52:28:e3:38:8d:0c:04:6e:c8:13:fd:
         a7:b1:d7:cc:90:e4:4a:47:57:90:ae:ed:7c:4f:d0:49:58:5b:
         97:d8:c3:ee:1c:b0:55:0b:12:0f:22:6b:be:63:b2:02:ea:63:
         b8:05:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:33 2024 by rpki-client on console-fra.rpki-client.org