Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File:                     LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier:          f6M/wfZ0kXylD6r1I4skQU4QtbFt01QX8v7gpJKTLkM=
Subject key identifier:   03:0A:E2:C7:8E:BF:95:37:0C:DF:C7:E6:BF:42:1C:F3:0D:27:67:D4
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer:       /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial:       018F87B6654B073C59C5090238F8AE8B2D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: 8NjJU46aDvxzsPCrzfYfbaxogQ/K9HYzlOhH92n8P80=)
                          2: aaAuG80p-fsbddrUCAY6zdpIu2U.roa (hash: //PH+yE/fL9qNitAHOL58hqoTJq7jYgpNUaHELqP+jQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:65:4b:07:3c:59:c5:09:02:38:f8:ae:8b:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=030ae2c78ebf95370cdfc7e6bf421cf30d2767d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:ea:fb:ed:c5:4e:55:8d:5f:33:a8:f7:64:
                    f7:81:f8:79:85:f9:37:84:0a:e9:8c:43:9f:8f:39:
                    79:b2:46:49:c5:a4:0c:05:6e:e7:69:e0:12:57:92:
                    8d:84:eb:07:a9:c2:10:64:f2:76:24:4d:ee:d1:4f:
                    e2:f6:64:2e:97:d2:ae:cf:78:a9:a1:77:8b:22:10:
                    c1:fc:1e:79:44:02:13:1a:4b:ea:06:36:ca:57:f1:
                    86:c2:64:48:92:75:06:08:9a:4b:4a:cc:8f:0e:17:
                    e6:35:db:30:30:41:1b:92:42:31:77:ac:2b:7e:93:
                    6a:c9:4c:ff:01:e9:6b:d9:15:cf:20:09:e9:49:3d:
                    0f:95:bc:2f:5c:b3:cf:ef:33:c0:21:3b:23:6c:58:
                    b0:3a:ea:9d:ca:fe:29:15:f1:64:5b:c4:e3:b8:81:
                    7d:ad:92:34:59:f5:56:e8:82:23:dc:43:74:1a:c0:
                    e1:a5:f8:df:16:2b:48:e8:4f:31:58:56:a0:3a:11:
                    f7:8c:72:c5:21:22:f3:17:81:b1:96:d6:3a:04:bd:
                    1f:a8:b1:2a:a2:dd:25:d5:3d:ec:61:c9:d0:37:38:
                    7b:d8:f5:94:0a:e6:ae:8d:40:84:96:e2:13:b3:eb:
                    8e:59:b3:2c:a4:8e:f6:0b:70:4c:80:d8:0c:7c:e9:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:E2:C7:8E:BF:95:37:0C:DF:C7:E6:BF:42:1C:F3:0D:27:67:D4
            X509v3 Authority Key Identifier:
                keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:8c:5e:26:b1:47:5d:f4:37:5d:ec:14:60:c5:1b:85:c9:
         f0:93:a7:d4:5c:92:00:86:28:d2:b7:3e:e1:32:60:85:0a:ea:
         d2:81:65:51:9e:ab:29:be:b7:8d:95:da:f8:d4:f2:a0:36:9d:
         5d:7c:1f:5b:5a:9f:6c:9b:0a:a5:50:20:f6:8c:05:0a:07:ee:
         89:2e:f1:a1:32:a3:dd:a4:c4:95:a5:4d:ce:d7:34:38:cc:a5:
         0a:c2:8b:be:c7:b4:9e:a1:5c:13:f3:c8:a1:72:da:47:e5:b5:
         78:c1:ec:81:50:f4:a3:e5:58:ee:26:1a:fe:43:b3:b8:31:fa:
         a1:58:44:6d:38:51:e7:58:46:36:8d:3b:8f:58:40:16:c0:73:
         0a:c1:2b:3f:12:48:b7:ed:2c:1b:48:ff:03:6b:7f:39:c6:2c:
         09:64:c5:39:8a:91:ee:45:ea:4c:7a:72:17:be:94:ed:e8:2d:
         d6:5e:9f:38:8a:3c:4b:12:23:c7:13:4d:f4:fd:c9:37:52:3d:
         98:ec:94:22:22:da:e2:bd:70:00:5c:9e:24:5f:97:1c:b4:8b:
         c5:26:8b:70:3b:df:4d:37:f3:e9:e7:66:e9:2b:02:9b:d6:b8:
         56:89:a7:15:f6:bf:2c:c8:d9:48:40:a5:2b:b5:f7:34:c5:d6:
         5d:22:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:26 2024 by rpki-client on console-ams.rpki-client.org