Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File:                     L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier:          9reP9rJQk+432pZcuxXXmGxye3WYrR0nZMHRqmO1QrU=
Subject key identifier:   A3:2C:23:7B:9D:BE:7D:B7:92:19:9F:D2:A6:F2:D2:FA:83:12:03:EC
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer:       /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial:       018F2E739B070C8A1C6E40693B3D1C701E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number:          0C67
Signing time:             Tue 30 Apr 2024 10:01:19 +0000
Manifest this update:     Tue 30 Apr 2024 10:01:19 +0000
Manifest next update:     Wed 01 May 2024 10:01:19 +0000
Files and hashes:         1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: fedWV+ugbfQoYX1axiPlgNSF2Ex3XVp5l9E+uOzeIhQ=)
                          2: Spyy1kXqDOK_hViNh2rFPki-k-Q.roa (hash: 7Ir2nYjEPeQ8tjOPYUX+fJe2JiV8L0A0aV/Aryr7mjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:73:9b:07:0c:8a:1c:6e:40:69:3b:3d:1c:70:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Validity
            Not Before: Apr 30 10:01:19 2024 GMT
            Not After : May  1 10:01:19 2024 GMT
        Subject: CN=a32c237b9dbe7db792199fd2a6f2d2fa831203ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:00:6f:73:c5:ca:4c:f7:95:6d:af:2b:0e:
                    d5:97:92:65:66:b4:0a:b7:02:54:1b:d9:d6:0f:5a:
                    f4:be:8b:33:f2:c8:74:a1:98:15:b4:c6:3e:d1:13:
                    61:04:88:35:9b:7a:22:cd:1b:37:e9:79:32:63:1a:
                    72:3d:2e:c7:02:53:db:0f:1f:43:3e:0f:5a:97:5b:
                    47:dc:e4:c4:7e:0c:0f:d4:f0:15:7a:99:28:45:b0:
                    0d:c9:dd:3d:53:d0:9c:01:c3:d6:40:59:84:85:9f:
                    c6:4c:56:01:fa:9e:33:98:92:e4:4b:89:c3:ce:42:
                    e9:a3:71:6f:1a:2f:59:16:0e:d7:49:8e:fd:3e:74:
                    57:d4:16:78:58:3d:72:73:0c:d2:b4:d0:9a:ba:2a:
                    41:bd:9e:b9:8a:cb:a4:b6:a6:e6:f7:6a:35:33:7d:
                    79:f5:00:09:d0:4c:94:13:23:52:1c:ff:05:ca:d2:
                    81:12:79:d7:b5:8f:ae:02:18:83:52:96:a8:a2:06:
                    3e:15:27:39:7b:c4:4f:f0:23:80:e7:6e:91:09:56:
                    5f:4f:dd:1d:24:b2:06:9a:9f:14:2f:cf:4f:3d:f3:
                    2d:02:7e:f7:12:a3:89:31:a6:8b:53:12:8f:2e:12:
                    5f:3b:40:4d:03:04:be:35:e9:8a:fe:07:c4:13:f1:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:23:7B:9D:BE:7D:B7:92:19:9F:D2:A6:F2:D2:FA:83:12:03:EC
            X509v3 Authority Key Identifier:
                keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:e0:0b:00:91:64:7c:99:2a:26:26:8e:85:75:8e:67:03:
         95:19:a8:96:30:4c:df:41:a9:88:f6:1a:15:c5:c3:51:71:b3:
         7b:10:e0:1a:5f:1c:c1:36:da:6e:36:c5:44:c7:00:00:98:a7:
         25:d5:48:73:7f:fa:5f:ce:0b:47:8e:15:e5:3e:81:64:ee:32:
         4f:10:b4:17:24:44:c7:9b:ae:9c:8c:02:41:9e:fe:01:08:0e:
         e0:91:46:dc:46:5d:13:76:2e:00:e7:24:04:a8:69:92:61:09:
         d5:59:0d:9d:78:09:c8:6b:b1:14:2b:95:44:22:20:e1:0d:f9:
         c6:64:ce:49:00:b2:f7:cc:02:aa:d0:61:61:0d:8f:31:77:cf:
         40:03:01:c2:18:67:3c:ba:fa:61:3c:a1:ab:a9:19:2c:d6:e1:
         15:8c:d3:5a:2a:d8:49:1a:b5:d7:be:0d:a1:d2:e4:6e:dd:8e:
         de:8d:00:38:8b:e0:5c:6f:b8:d2:77:68:dd:a8:1e:30:7f:28:
         50:e0:c7:3c:2b:66:e8:9f:56:86:94:92:3f:7c:fe:da:dc:2d:
         37:22:1c:5e:2a:18:31:11:d3:a0:96:28:92:db:7f:8d:05:cb:
         f7:90:a3:be:f7:e8:93:6c:13:03:e9:25:f8:1a:53:bf:08:35:
         1a:96:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:40:39 2024 by rpki-client on console-fra.rpki-client.org