Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File:                     LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier:          uVwajX8+ea4AfzWTvhxCK4rjI23zxqg9bMAZ7sVEcEQ=
Subject key identifier:   F5:6F:EA:63:D9:8E:C0:75:A1:61:ED:16:75:79:D9:6D:F4:DC:27:1E
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer:       /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial:       018F87B66A6B2A7C64B33804737AF3007FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: CdV6ALD-WMhpli48mmkZuLb9-Kk.roa (hash: QZX9hvfsdcGOzWvh4UHNttZW8FuMkCh2lLKEIW3UEu8=)
                          2: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: CUmGXgtb+0sMJNn2jvm3/D9AZxSXJIrB0fwCftyq1G0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6a:6b:2a:7c:64:b3:38:04:73:7a:f3:00:7f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=f56fea63d98ec075a161ed167579d96df4dc271e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:68:ba:17:ca:84:85:68:24:03:90:0c:f8:
                    ef:2c:ea:d3:73:6e:8a:34:52:5f:99:5b:73:90:30:
                    02:85:d9:d3:93:0a:46:0b:89:9b:39:c8:d3:c9:67:
                    97:2c:ec:2f:24:5f:81:3f:97:fd:d3:df:74:b9:56:
                    fb:76:a3:df:9a:7e:28:db:61:15:a8:71:34:86:ad:
                    42:91:16:59:13:6d:ef:4f:f4:f2:e5:c8:2c:21:82:
                    1f:ad:85:52:24:d1:d5:d3:fa:da:bb:2b:a0:41:e9:
                    a2:a9:8f:de:ff:29:7c:c2:86:22:b1:fc:fe:54:e4:
                    f3:b7:de:6c:39:96:fa:b7:b8:f3:13:fe:1e:78:dd:
                    c1:89:ae:cb:4c:bf:7a:b6:59:8d:69:de:fb:be:44:
                    57:04:85:98:31:bb:cc:d6:a6:6b:6f:6d:16:52:da:
                    97:81:83:a3:bd:a4:d5:53:27:62:6b:94:52:c2:d6:
                    06:32:1e:db:3d:09:f6:79:50:03:3e:80:86:08:c6:
                    36:1c:e1:83:43:38:cc:18:a9:60:f1:95:79:fa:02:
                    a9:f7:cf:63:87:f9:bd:fd:ca:21:22:cb:63:67:5b:
                    8f:da:da:c9:9c:22:41:5f:a7:d8:7a:19:70:e2:69:
                    01:d6:cc:38:7e:9c:54:d9:d1:6c:ec:ce:b1:ac:6b:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:EA:63:D9:8E:C0:75:A1:61:ED:16:75:79:D9:6D:F4:DC:27:1E
            X509v3 Authority Key Identifier:
                keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:f2:e9:3a:1a:eb:63:6a:8e:fc:36:d0:78:be:58:03:7c:
         31:b5:3c:26:c5:14:de:80:f3:0a:1f:e5:14:f4:a3:8f:ce:61:
         76:d6:fc:ba:e4:53:cf:e4:0a:9f:6b:4c:f0:94:3a:cf:a5:f5:
         87:ad:79:f3:30:42:3b:38:46:2b:b9:b6:76:0b:81:56:45:d0:
         9e:92:e4:55:36:cd:70:8e:8e:0d:44:6a:58:c1:fa:50:82:14:
         e1:a5:a8:af:ee:9b:a8:4e:ce:52:d6:ec:57:02:b0:90:84:7d:
         21:14:9a:ce:76:6b:7c:da:f5:8d:87:53:46:89:32:cf:d4:c2:
         a4:74:7d:b8:7b:af:86:13:da:ab:c3:46:02:07:09:b9:ca:af:
         0c:0b:e7:de:b3:d5:1c:04:c8:e5:44:58:29:e7:e0:78:06:2e:
         12:9d:21:64:2d:62:e7:bc:88:7e:2c:16:c6:d0:0a:ea:e9:43:
         5c:68:74:15:23:38:b6:50:da:2c:0c:9e:bf:74:43:9c:7c:55:
         b2:dd:38:0c:9f:c8:06:e1:47:88:aa:2d:dd:b0:bd:18:0b:df:
         3f:bf:e6:a1:35:f1:51:4c:a8:fe:16:dd:15:2b:49:f2:9e:f4:
         02:4b:3c:5f:2e:c2:77:be:2e:f3:94:e7:fc:6d:d7:7a:36:94:
         b8:72:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:29 2024 by rpki-client on console-fra.rpki-client.org