Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File:                     lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier:          gJXD2ZY7bh1EZtQEswtJMdwtXqHq46uyaBldb8FIPqw=
Subject key identifier:   9D:C7:CB:40:05:F0:E3:17:A7:4A:E4:F6:86:88:98:1A:88:39:45:AB
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer:       /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial:       018F87B67FF6DD40333519ED04CB84203334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number:          0A9B
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: F8JN06v0bExRZhYe4hnsep5ArKPLs8KlODLoCWYuSIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7f:f6:dd:40:33:35:19:ed:04:cb:84:20:33:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=9dc7cb4005f0e317a74ae4f68688981a883945ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:5f:dc:67:08:bc:1e:ec:a2:cf:60:9a:79:
                    60:ff:f2:80:82:93:1d:4b:44:f1:ce:b6:be:90:98:
                    ca:25:02:b2:fb:86:fa:c8:e7:8a:1b:fd:6d:e6:a9:
                    18:c2:13:50:65:f5:3f:95:bc:65:85:a5:2e:7a:ca:
                    19:61:f4:1e:65:e7:4e:75:7f:e6:28:18:a0:c7:66:
                    87:16:ce:a0:6e:68:60:78:5b:ba:08:b5:db:0c:af:
                    7d:d8:a2:a2:96:39:79:ca:dd:9b:80:a4:95:42:16:
                    bf:70:41:45:4f:bf:bb:1e:e6:1c:e4:cb:17:95:c0:
                    81:d7:34:1e:0e:d9:b6:34:b6:42:3e:0f:a6:48:73:
                    d1:04:4e:55:c0:76:3c:64:d6:56:6a:cc:42:59:79:
                    6c:44:23:a8:05:aa:38:e7:c4:a8:1f:53:8d:d9:c9:
                    03:ee:d1:74:a8:7e:67:d8:2d:f7:a4:7b:e2:d6:04:
                    e8:13:df:3c:a6:02:ee:9b:2d:09:af:6d:10:b7:c0:
                    5e:33:85:08:4f:13:6d:bc:db:67:67:a5:47:57:2b:
                    51:b9:2e:b2:2d:ef:ee:6b:90:e8:fc:60:6f:51:5c:
                    35:10:5d:61:3f:70:8d:6a:2f:4f:f0:0f:7c:05:b1:
                    ce:5d:2e:e9:b2:be:06:f0:fe:a9:15:8d:f6:e6:19:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:CB:40:05:F0:E3:17:A7:4A:E4:F6:86:88:98:1A:88:39:45:AB
            X509v3 Authority Key Identifier:
                keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:63:72:15:ef:20:a3:f8:29:f2:2e:ea:63:d8:52:82:39:
         81:61:7a:b3:f8:09:22:08:e1:a1:a5:1a:3d:0c:25:cb:82:4f:
         e2:da:ae:bb:e3:26:72:ae:16:8f:c6:6a:0c:f6:8f:ca:6b:d3:
         43:13:03:5f:dd:ca:9f:7a:c6:0f:98:34:cd:22:7d:27:5c:9a:
         a4:cb:02:82:99:f5:7a:b0:fd:d6:72:9a:77:5a:6a:75:ef:b1:
         bd:8d:f1:40:74:4e:3b:7c:bb:76:60:3f:a2:e8:46:ab:ab:e5:
         08:a4:55:01:72:1b:4f:54:87:9f:ae:94:47:27:8f:84:27:82:
         b2:48:ab:25:8a:6a:f3:4d:27:f2:93:90:b5:c5:a2:1b:5a:6b:
         ec:18:7b:7d:32:b0:b4:1a:e9:b6:60:d0:d9:d3:28:51:b0:ec:
         f6:73:c1:1d:41:89:1b:10:e0:87:ce:56:18:b8:55:16:9b:29:
         3a:a0:a5:22:ad:94:d4:3c:25:9e:34:df:ce:a0:ee:d2:c7:8a:
         69:25:5a:ad:0a:96:51:70:45:87:2b:3d:9b:70:f7:cc:9c:ef:
         d0:c6:e6:c3:40:5d:7e:40:34:79:27:b2:5c:94:4f:2b:f8:97:
         63:ee:31:e3:22:16:95:bc:f6:d8:c6:89:90:c8:91:af:09:2f:
         dc:5c:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:55 2024 by rpki-client on console-ams.rpki-client.org