Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          Trd7c0iqxpjYUrRrKzLWIWiE5nSz/Ggfnk2zcACDAE4=
Subject key identifier:   BA:A9:68:CC:18:7D:79:B3:54:34:87:75:1E:1A:A5:DB:8C:A6:BC:4A
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       018F5326F0B5E181827225AF04535E6684B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 13:03:31 +0000
Manifest this update:     Tue 07 May 2024 13:03:31 +0000
Manifest next update:     Wed 08 May 2024 13:03:31 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: J+AoWUtxDafR0lUuWfZFcQjEjZdDcrVzGAmrb8eFX4A=)
                          2: mDz0g-hfHcZzdtKwR4T6L878DUc.roa (hash: hM/uZCQKAIckOFf+ervxvaOnyXSb51GekwdxJww/apw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:f0:b5:e1:81:82:72:25:af:04:53:5e:66:84:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: May  7 13:03:31 2024 GMT
            Not After : May  8 13:03:31 2024 GMT
        Subject: CN=baa968cc187d79b3543487751e1aa5db8ca6bc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:1c:f4:00:4c:cb:2d:70:6c:9f:97:78:24:
                    1a:e7:af:ed:d2:5f:da:18:96:24:dd:66:96:f2:47:
                    87:21:7d:60:62:dc:e8:bf:eb:93:b9:75:ea:a7:a6:
                    d3:9f:70:85:c5:42:3a:e8:ce:d7:05:35:05:00:ca:
                    98:bf:99:fa:7e:b2:e4:27:1e:1d:f9:7a:5b:ec:1a:
                    13:19:86:05:75:a4:85:86:7c:74:77:6c:25:aa:fe:
                    4a:cf:13:9a:e6:10:a5:b7:42:9b:89:23:fa:5e:5c:
                    f7:65:90:6c:aa:50:92:0e:b3:4b:bc:e5:ec:89:b5:
                    80:f1:f4:ee:c4:9c:c0:e5:45:8b:c5:4c:83:be:09:
                    8d:cb:3b:13:f3:c0:71:2b:f9:3d:b9:37:d6:99:7c:
                    1f:9b:71:7d:bb:6d:13:27:12:a2:85:4a:bf:0f:74:
                    3b:f3:eb:6c:80:ed:83:44:21:5d:4b:ef:5f:2d:ff:
                    52:e2:65:af:9b:a9:8a:05:fb:66:a6:86:66:55:be:
                    4d:78:c6:7a:32:9e:45:84:c1:72:a3:a9:8d:78:1f:
                    2a:e1:8a:d4:be:ea:f7:5f:d4:92:8b:c0:bf:f2:c9:
                    d6:09:e0:d5:30:3b:5b:ae:92:20:03:f0:57:80:03:
                    54:6e:37:df:a3:60:c1:f7:aa:81:c8:7f:6a:4f:ba:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:68:CC:18:7D:79:B3:54:34:87:75:1E:1A:A5:DB:8C:A6:BC:4A
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:6f:90:c3:47:50:79:77:3c:88:01:b4:d8:6e:5d:77:3a:
         35:ae:d3:b4:a9:d2:08:11:9b:5b:d4:51:ce:68:9d:d3:8a:01:
         f4:cc:e7:34:81:e4:f6:6b:2b:76:41:dd:db:e1:7c:6f:24:bc:
         71:03:95:fb:d3:0f:7f:a4:69:b0:86:60:1d:8e:e1:92:eb:e7:
         b9:58:1a:d3:a2:65:91:5b:53:a9:13:1c:6e:c3:84:04:95:ed:
         84:bc:14:53:0d:1f:50:73:eb:95:0c:8e:0a:a2:53:96:81:8d:
         93:8d:ad:a2:3d:e3:47:74:1d:e2:a8:50:35:a5:36:f3:fb:87:
         56:b3:80:c3:c5:d1:96:53:9a:54:40:17:9f:ca:10:06:05:65:
         ee:a2:1a:8a:df:ab:3f:c4:c4:29:fc:0b:8b:64:96:9f:13:ea:
         a1:18:92:c0:7b:2f:b4:21:3e:ae:a5:09:24:eb:99:13:50:dc:
         19:1e:88:2c:2b:5c:68:82:8c:4e:fc:c1:a6:7b:cb:e2:04:56:
         0b:dd:56:58:99:f8:d1:c0:44:f1:8b:47:19:16:33:dc:24:1f:
         04:f6:0d:dd:99:51:a9:45:eb:c9:63:da:99:d9:21:21:4b:aa:
         c2:0f:09:59:12:91:5f:44:cc:42:30:28:2f:1e:41:93:f5:f7:
         40:ca:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:50:48 2024 by rpki-client on console-fra.rpki-client.org