Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          ULchlWF8oiUVnkI+bHlXkRsIe3Xxqo4p7P53/TVkXf8=
Subject key identifier:   99:80:D1:A2:0E:7A:03:FF:98:7B:C1:5B:4C:E6:95:EF:89:C7:8B:7D
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       018F8749A040BAB112860D7A9034EEC5A1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          D4
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: 3lngZbGtVJQy1njtJGDpmKyQysI.roa (hash: +Z3R0iyT0wliWm5YxZk9z0XWkYE2dW4/2BZp6nn1Hes=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: LblTmgWGapw1Xlwsy3Dqh498OI5dBp7lRwrPTD3s2zk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a0:40:ba:b1:12:86:0d:7a:90:34:ee:c5:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=9980d1a20e7a03ff987bc15b4ce695ef89c78b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:01:a0:c6:49:f9:aa:e2:fe:6b:4c:8f:7a:
                    e6:60:89:7b:68:7c:af:8d:46:47:a3:5a:80:d0:db:
                    79:51:13:b1:0b:ee:b5:29:03:ef:7d:9a:5f:9c:0d:
                    77:d7:59:0a:e2:3e:61:8f:67:76:c6:41:b3:4a:49:
                    99:b7:d9:46:d7:09:65:9e:99:94:eb:1e:70:62:e7:
                    7e:4c:7a:e0:0d:b0:e9:48:55:e1:5b:e4:70:12:71:
                    83:c2:5f:6e:2c:a3:ec:78:4d:60:66:dd:fb:dc:39:
                    74:05:7e:45:83:3d:54:3b:8d:11:b6:aa:00:ea:19:
                    bb:c4:f3:88:8e:2b:6b:3f:05:5a:57:be:74:c4:a6:
                    ed:e8:c5:f1:49:4f:af:42:12:ff:4c:48:4d:8a:4a:
                    bd:d2:29:4c:e7:03:fe:20:cc:6a:0e:07:ad:4f:15:
                    51:9c:d8:f8:3d:fa:4b:00:3e:42:78:16:c5:a0:16:
                    5c:37:56:94:06:40:88:2f:ae:03:29:10:61:c9:27:
                    6a:ac:de:d5:b6:e9:2b:11:1a:96:d5:42:fc:2d:e2:
                    92:b8:ed:fe:9d:35:e4:55:e5:ff:13:ca:99:8e:80:
                    4d:c4:d9:64:f2:bd:e9:7c:8f:77:b2:c1:c2:69:93:
                    d8:a5:7e:55:5a:28:1f:d9:a8:e6:3d:42:7b:61:57:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:80:D1:A2:0E:7A:03:FF:98:7B:C1:5B:4C:E6:95:EF:89:C7:8B:7D
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:86:dd:29:df:af:fb:92:3b:11:c3:1b:04:16:05:f7:01:
         bb:78:b0:f7:ba:a5:be:81:9e:c1:8a:a7:a2:d9:d1:56:1a:58:
         31:88:3b:57:53:19:57:71:11:16:11:1e:07:81:11:86:06:14:
         19:d4:89:9e:2f:f0:f5:c0:9e:41:93:de:b3:a1:0e:93:19:59:
         38:3a:e3:a1:04:05:87:ac:21:67:38:61:bc:05:1e:b3:d4:da:
         30:3e:c9:ea:06:83:85:08:cc:73:bc:34:18:51:03:45:1a:85:
         24:9d:a6:39:3a:c4:33:06:4d:5b:00:b0:7f:84:50:ef:fc:84:
         e6:13:05:a7:af:a9:09:0c:5f:fc:59:55:15:94:67:1c:04:d1:
         d0:d5:08:f9:b1:27:2e:e4:ac:4d:3c:51:44:1b:5d:3d:22:8c:
         a8:b3:08:ff:31:49:61:cd:0d:93:2a:da:62:e4:06:5e:c0:ee:
         36:8a:13:7c:90:af:23:57:29:42:4d:3d:69:54:36:ec:0c:55:
         dc:48:8d:3b:cf:1b:9d:72:59:25:88:a9:f8:7a:b1:26:a1:af:
         cf:d0:3a:23:d7:dd:d3:5a:b1:ac:85:2f:fa:69:07:2b:45:a7:
         12:af:0e:16:d7:72:a7:4e:a7:53:23:1d:04:0e:45:81:9d:d6:
         5e:b6:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:10 2024 by rpki-client on console-fra.rpki-client.org