Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File:                     L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier:          zu70qSruP9oBCYea+fQgKcU1VwbyMm8zJPBEjrQQS08=
Subject key identifier:   87:50:B0:19:4B:26:BF:EE:7B:FC:79:F1:8D:63:82:56:36:CE:35:C1
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer:       /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial:       018F87483C2FCF62E03D3C2F3399796995FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number:          0DE4
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: 7UXtGsVn7EjhmkhhYz8TAITwXrb0fWdExRZ3DUFVru0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3c:2f:cf:62:e0:3d:3c:2f:33:99:79:69:95:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=8750b0194b26bfee7bfc79f18d63825636ce35c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:a4:62:71:ec:bb:d4:8d:07:15:5c:8f:0a:
                    8e:0a:50:cb:c0:c6:4d:13:24:d5:88:86:20:8e:df:
                    6f:9b:2b:1f:17:a4:0f:60:5e:71:b9:85:c8:18:52:
                    32:fa:cf:20:2e:b2:44:2e:0a:fb:0b:3b:d1:41:0c:
                    83:1a:34:b2:80:8f:c5:03:7a:c2:c6:61:50:f7:b9:
                    d9:a4:15:06:d0:aa:8b:b4:45:e0:c7:c0:0a:62:55:
                    97:6e:6e:5d:11:c6:89:a2:59:9e:08:bd:70:7d:ae:
                    a9:12:77:9b:7f:05:c4:06:bb:30:32:58:7b:55:83:
                    8d:3d:a3:05:d3:fb:4d:37:7a:37:b1:7c:28:8c:55:
                    ba:8a:c1:6d:0d:58:47:db:7e:6d:e0:d9:81:db:5b:
                    b3:a5:15:f4:62:7e:a3:2a:45:00:40:2f:57:1c:48:
                    33:75:fa:97:d7:03:f9:4a:89:f0:2c:82:69:4a:3b:
                    b1:da:4e:d3:09:53:fc:ab:b2:5b:f1:35:86:31:db:
                    ee:50:49:25:5e:f8:2b:ac:01:8e:72:52:b5:4d:ab:
                    40:a5:75:e6:a0:ef:1c:d2:48:5e:91:9d:6e:c9:09:
                    3c:61:d7:b3:02:95:ec:46:8a:53:44:85:47:bf:f7:
                    c1:4f:4b:10:db:c4:e4:75:75:12:4f:f0:f5:df:aa:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:B0:19:4B:26:BF:EE:7B:FC:79:F1:8D:63:82:56:36:CE:35:C1
            X509v3 Authority Key Identifier:
                keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:87:f9:82:d6:9e:b4:99:b2:49:3f:a8:eb:17:3d:46:13:
         86:b0:a7:7e:5b:27:0f:e6:4e:70:c8:a8:6e:bb:ec:8f:b5:ac:
         b7:27:3b:35:a8:64:c6:26:90:4a:b9:eb:09:11:11:cd:ce:ca:
         8f:7c:a2:ad:69:7f:28:f3:54:4a:d7:e7:18:b0:2d:2b:74:49:
         24:83:43:14:99:bd:9b:75:0b:51:1b:7d:51:55:2e:9f:cd:0a:
         d2:85:b8:9f:0d:d2:00:04:77:07:3a:e4:19:0b:f4:30:27:f8:
         02:b6:43:b0:93:7d:75:e5:b4:4d:17:3f:6e:b9:89:a8:bb:f4:
         d4:44:88:f7:56:d7:95:7b:ba:54:d8:d7:31:45:c1:10:d1:b6:
         f1:c6:7f:25:e1:11:2b:c9:38:dd:7a:de:de:29:f3:c6:df:4e:
         f1:fc:a1:e8:1e:35:f1:4d:06:f3:84:25:b2:af:d9:ef:38:2a:
         74:ce:ac:c3:22:b5:cb:b7:56:03:ff:fd:5e:59:34:b3:89:3f:
         00:cf:22:9d:b7:5e:c5:7c:cd:ea:46:9a:91:02:02:1b:a5:4a:
         63:23:37:66:88:bb:eb:a1:8f:69:98:e3:cb:ab:90:47:43:56:
         ae:38:e0:2b:90:d7:32:4a:20:de:fb:61:c4:60:16:f1:d4:ce:
         fe:40:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:32 2024 by rpki-client on console-ams.rpki-client.org