Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File:                     LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier:          8Z1IK+/TjZphfDjVTORv5gyuPOhQXUqQCv9VS88mhhc=
Subject key identifier:   C4:72:E9:FB:03:20:FA:BA:BE:BD:FF:56:98:39:50:A5:D6:AA:05:D3
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer:       /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial:       018F9986222AAAB295D235F536DE8D33C91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number:          8F
Signing time:             Tue 21 May 2024 05:00:55 +0000
Manifest this update:     Tue 21 May 2024 05:00:55 +0000
Manifest next update:     Wed 22 May 2024 05:00:55 +0000
Files and hashes:         1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: NmikzykCi7602+DSxVC5MGAxBSg3VtU0OjkRrBE5aKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:86:22:2a:aa:b2:95:d2:35:f5:36:de:8d:33:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
        Validity
            Not Before: May 21 05:00:55 2024 GMT
            Not After : May 22 05:00:55 2024 GMT
        Subject: CN=c472e9fb0320fababebdff56983950a5d6aa05d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c2:14:61:50:a0:f2:12:d8:4d:03:05:bb:9c:
                    3a:8e:27:b9:7e:03:34:3b:35:ca:ac:84:ac:5b:d6:
                    b3:4e:2a:95:e4:c7:13:91:36:c7:55:9b:8e:44:fd:
                    23:9e:0a:a1:0a:ee:81:fe:1f:a4:95:ba:04:97:ba:
                    ee:49:64:d6:39:4f:7e:53:95:2e:2f:e8:e4:e1:f6:
                    70:da:f5:52:75:75:fc:cf:80:c2:f0:2c:f0:d3:ab:
                    54:e6:f4:1e:35:9d:15:01:62:41:e6:9d:14:55:1d:
                    3f:78:a8:15:46:10:ca:c0:ef:b4:ff:9a:19:98:ed:
                    76:26:49:8a:d9:36:e4:01:5c:a7:e1:8e:53:e0:cb:
                    7c:85:b5:cd:98:b3:7d:d9:a4:1e:02:65:a4:76:cd:
                    fd:75:1e:3d:6a:0b:af:8e:c7:5f:e5:24:19:12:19:
                    1b:75:6e:74:4d:aa:eb:25:4d:77:e2:e1:01:9b:a1:
                    ce:c0:0d:db:c0:1d:3d:9b:20:a7:1e:1a:30:71:26:
                    46:59:1f:4f:1c:15:bb:ba:29:3b:16:8a:d0:1f:da:
                    88:9b:1b:0d:f0:35:92:ef:a9:57:b5:f0:5b:a0:dc:
                    1e:d7:6c:b5:61:87:c4:de:3c:b6:11:c5:ff:a7:f3:
                    17:84:eb:df:0f:63:fc:a3:f9:71:6c:03:df:bd:fd:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:72:E9:FB:03:20:FA:BA:BE:BD:FF:56:98:39:50:A5:D6:AA:05:D3
            X509v3 Authority Key Identifier:
                keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:b1:fc:36:40:f5:4f:24:8b:a0:a7:c9:02:34:87:b6:61:
         ba:a1:25:bc:8a:a3:90:f8:47:16:7e:45:96:97:31:0f:ce:98:
         ea:91:3f:c5:ee:b9:b8:90:70:c0:69:30:ab:82:6a:5b:13:f4:
         53:ef:ba:53:a3:38:c8:dc:cb:ac:7f:48:9a:c7:d9:a9:e4:cd:
         29:bf:89:db:ef:f4:e5:3d:bb:e4:97:27:cf:dc:b3:11:ae:9a:
         c1:53:84:bb:45:7f:88:37:27:71:3e:8b:1c:c3:63:e4:31:ab:
         94:52:34:b6:b1:94:49:4f:ff:b6:9c:af:61:e1:3a:8b:ae:18:
         ab:64:2a:e8:a1:a7:84:22:20:1c:65:fc:e5:9f:02:d2:ec:2b:
         a2:52:f4:33:b0:d0:80:fc:4a:8b:55:76:a3:7e:9c:59:51:07:
         c2:5f:03:1e:ed:89:4d:96:c9:9f:23:f2:9b:0f:4b:30:19:fc:
         db:26:87:d5:ec:bb:ab:24:e1:0d:66:52:40:8a:22:f6:75:23:
         82:54:b6:7d:8e:1e:57:bc:ac:d4:54:8e:b1:c4:da:f8:ab:b7:
         95:3d:17:8e:0b:e8:52:11:90:32:83:e2:b7:89:ee:ae:40:73:
         b0:75:ed:4f:91:83:0c:61:cc:70:2d:a6:4c:47:62:d4:ef:2a:
         7d:7b:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 07:08:24 2024 by rpki-client on console-fra.rpki-client.org