Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          CUuB+J6E14Di4lwv9InYbfTUN0sSg5YamPrgf3eDEBw=
Subject key identifier:   89:DF:81:11:FD:AD:69:B5:AD:8B:AF:60:82:56:3A:11:15:AF:1F:F8
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       018F87ED458797F4658CE734F53B4BCAC79F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: 8c-C1cKrS9vrEHHyduDpxBWUdn0.roa (hash: FTOpIZK5tyefkmNU2LUaQ9tagbXfcmBK67esQmwstIE=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: /CwXA32938CJHbsBoE02qcxArI//Z7PkOOebxRVWh64=)
                          3: ZufIpc7G6i1yaL3-5k4QZrH_ph0.roa (hash: qbpJ6bh7yEDQoqQeaTJ4ekYqK3GZH52c16k3SYjk8g8=)
                          4: oXWVnmJVPgQu7tYCRVP_Riz2tC8.roa (hash: Vra6ZtuRNWER8Z47nMNL3Hg9cK8g/olmppxuGUHOWDs=)
                          5: wgyjhCNshYCcVKomHzpklsvPA24.roa (hash: WY5/3Vd1DR7DnGQ/aFI6KDnRe6d8eyBfGEEn6RIVOdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:87:97:f4:65:8c:e7:34:f5:3b:4b:ca:c7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=89df8111fdad69b5ad8baf6082563a1115af1ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:ee:b5:c3:af:e6:d3:c9:f7:30:c8:47:f5:
                    d0:6d:f9:d6:36:fe:7f:59:14:90:19:80:d9:2f:41:
                    f2:b9:1e:d1:09:da:fe:84:c3:f9:fd:10:5c:c0:28:
                    bc:4c:55:41:e6:5c:5b:7e:40:84:ff:d8:99:38:15:
                    29:03:92:e1:86:07:65:93:74:af:69:ee:77:ae:c1:
                    8e:63:32:72:6c:3c:d3:e5:7a:9f:fd:a9:2c:f7:92:
                    17:b2:ca:de:4e:b2:55:99:21:22:84:df:90:50:ce:
                    91:8b:c9:fa:ba:d8:93:69:3d:71:22:59:06:2a:c6:
                    d1:43:a7:ed:d1:4a:15:42:d0:92:58:33:83:80:17:
                    2d:0d:08:93:39:27:db:81:d8:43:af:82:a8:0e:67:
                    7c:ca:bf:7c:96:9a:8c:a9:33:82:f3:28:1e:e5:01:
                    f8:0c:78:76:90:e8:ee:20:91:e4:5c:26:47:be:9d:
                    99:78:f1:55:56:54:ec:39:d9:af:ae:d8:a4:80:b1:
                    87:dd:dd:ef:d5:2d:b9:99:fb:ea:3a:5a:b3:f6:0d:
                    36:c1:ef:66:99:3e:6c:68:b4:91:f6:fe:ec:7b:f4:
                    04:e8:9b:c8:ff:c8:40:86:37:bd:0d:80:a1:f3:ad:
                    fc:ce:e0:d3:b7:56:13:fe:71:d3:13:4d:70:55:7f:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DF:81:11:FD:AD:69:B5:AD:8B:AF:60:82:56:3A:11:15:AF:1F:F8
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:8e:7e:00:b0:93:55:11:7e:06:da:e2:46:9b:ba:d9:6a:
         07:f9:56:26:31:72:64:3c:86:00:b7:9b:3f:16:ec:f8:3f:29:
         34:75:b4:c6:ab:66:6d:fb:be:93:bc:93:46:13:b2:fe:79:c3:
         8f:86:dd:dc:1b:0c:0e:27:26:7b:0d:cf:81:e4:1c:50:6b:85:
         7e:22:43:30:f3:c2:6f:0d:87:4a:c7:8f:08:33:75:78:1a:f8:
         65:1b:28:6b:a1:c8:8a:40:53:0a:ab:2a:f1:13:90:58:58:e9:
         3a:8f:e8:f1:28:d6:93:5b:39:ab:5f:ff:4c:21:e3:c5:38:32:
         e5:be:92:84:19:ea:e4:19:8c:e7:ac:0d:1e:45:33:62:04:d3:
         67:a0:76:6a:07:fc:07:a0:5e:a9:91:30:a1:9a:d9:9f:9c:a0:
         c5:f8:d9:c5:e6:35:22:c5:7d:06:61:c6:9c:07:c6:fa:5f:bf:
         82:24:a8:4b:be:d7:2c:c9:96:4a:fa:6d:ed:fe:8b:0f:de:a0:
         7b:fd:10:41:e8:57:57:32:33:5c:e4:d0:30:2b:4d:42:46:1e:
         35:55:a3:5c:2c:37:56:4d:1a:c5:52:a6:77:61:42:60:a2:33:
         a2:f4:81:65:e2:25:a1:d7:84:d5:e9:7e:41:a0:c6:05:75:8d:
         d0:5b:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:38 2024 by rpki-client on console-fra.rpki-client.org