Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          u7ixUZdPRGe3E17/iu1UbDtUWC/b32dD18qY50CPjEQ=
Subject key identifier:   77:78:A6:DE:B0:43:18:08:4D:D3:1F:FC:D1:23:F8:CE:CB:88:52:03
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       018F4AC69AB775608B49CE619D13AC578011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 22:01:20 +0000
Manifest this update:     Sun 05 May 2024 22:01:20 +0000
Manifest next update:     Mon 06 May 2024 22:01:20 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: b+q3JvnIKFpFHDLLzB0kn7MjR2P/YMQ/rFKzC+p0WKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:9a:b7:75:60:8b:49:ce:61:9d:13:ac:57:80:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: May  5 22:01:20 2024 GMT
            Not After : May  6 22:01:20 2024 GMT
        Subject: CN=7778a6deb04318084dd31ffcd123f8cecb885203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:09:02:94:29:46:ff:a8:e8:54:55:d2:98:
                    11:51:4a:2b:5c:69:bf:ac:12:02:71:4a:86:ea:14:
                    0d:45:ac:cd:13:39:2f:dc:7d:1f:64:ab:0f:3b:d3:
                    5c:f4:0c:03:6a:88:05:d0:0f:68:f4:85:7d:3f:98:
                    dd:0c:84:c4:a3:2d:0d:77:50:9d:99:fa:69:2c:87:
                    39:95:56:4a:69:06:c8:98:92:3a:d1:2f:54:c9:ed:
                    8b:02:30:73:0b:9f:c2:d6:2f:fe:d6:f9:53:2e:af:
                    b2:fe:bd:92:a0:31:b7:7e:0c:a8:08:e2:ec:18:f8:
                    ac:65:91:0d:aa:67:87:13:a9:db:fa:46:b4:1e:9c:
                    1f:01:b7:50:46:8a:26:b6:a5:49:86:4b:6c:b9:17:
                    6e:6b:70:b0:44:a5:19:4d:7c:45:c2:a3:8a:fb:37:
                    5e:4a:5a:f5:56:2d:cc:5f:a7:24:9e:4e:09:c1:02:
                    be:bd:82:82:90:27:c8:6b:5d:fe:4c:f7:ae:72:8f:
                    c0:bf:9f:43:4f:d4:81:d7:e6:12:c8:b5:8b:c8:ee:
                    b6:7d:31:0f:0a:fc:42:2c:02:a9:fb:95:60:6c:eb:
                    78:a9:c4:4b:72:04:76:35:1d:39:5e:9e:47:b5:89:
                    74:02:f7:8b:1e:6d:98:01:f7:5f:88:b6:f7:8f:d4:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:A6:DE:B0:43:18:08:4D:D3:1F:FC:D1:23:F8:CE:CB:88:52:03
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:0a:62:01:b8:74:42:45:1c:48:0b:ec:fd:a7:43:49:57:
         4e:9b:72:6a:0f:21:1b:36:0c:61:3e:3b:48:11:92:7f:00:34:
         57:eb:dc:09:06:c6:8e:8e:d1:18:e8:cd:c9:3d:4b:85:13:75:
         3a:9d:17:ad:df:a2:0e:4f:6e:53:ec:fc:50:14:22:56:62:2c:
         d5:d8:e9:50:da:27:ee:87:a2:a8:4a:24:43:c8:7f:da:77:f3:
         fd:e2:21:43:8d:34:42:cc:44:9f:32:b6:10:9e:c5:2f:cd:e2:
         35:26:56:50:1b:6f:41:41:9e:b7:09:71:44:4a:4e:3a:2a:4b:
         47:d4:a2:35:de:a4:71:d2:cc:ea:47:f0:95:83:94:4d:c6:3c:
         0b:a0:e5:42:43:f3:07:51:48:d3:e4:83:b2:98:27:7c:aa:35:
         32:87:2a:d5:35:e9:4a:1f:5a:1c:27:c9:ba:05:a4:dd:af:72:
         f3:eb:e5:e4:f3:19:19:f7:46:01:d1:fa:58:63:9c:4d:1f:61:
         a3:42:94:2c:54:be:66:88:9e:40:04:ec:a3:e0:14:0a:3c:d3:
         51:71:f9:56:6c:9e:71:e6:63:5c:ad:54:b2:be:9b:10:af:c6:
         90:8f:6a:10:bb:16:d8:39:1e:07:f8:64:e8:69:14:42:4c:e9:
         88:11:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:54:30 2024 by rpki-client on console-fra.rpki-client.org