Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File:                     LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier:          h3l/28mCLLliIAhGmJ4WPpqGSz43ZZjdIHg6GhORbNk=
Subject key identifier:   4E:20:0B:BE:BF:3D:BB:00:34:6C:EF:3D:A8:BE:6A:27:9F:D7:E2:B0
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer:       /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial:       018F87485C52963F6354BE02E9B6D2EF0FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number:          0D05
Signing time:             Fri 17 May 2024 16:00:17 +0000
Manifest this update:     Fri 17 May 2024 16:00:17 +0000
Manifest next update:     Sat 18 May 2024 16:00:17 +0000
Files and hashes:         1: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: skKrx8PYdfOgHnbuudLqdeXzwPShqX6yZApPz8sFVno=)
                          2: vePyqbStWivJobjj1oVuVxnD0vI.roa (hash: eUSSXm08ep0EQYGw2J1+acsDCabZSz+FGBz4Cj1zFfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5c:52:96:3f:63:54:be:02:e9:b6:d2:ef:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
        Validity
            Not Before: May 17 16:00:17 2024 GMT
            Not After : May 18 16:00:17 2024 GMT
        Subject: CN=4e200bbebf3dbb00346cef3da8be6a279fd7e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:9d:f0:dd:a5:6f:63:aa:5d:70:63:9d:58:
                    5a:c4:39:3f:09:83:be:13:25:a9:0e:4b:f9:93:b6:
                    74:54:5f:da:b4:fc:26:57:9a:99:cf:d4:d9:2c:18:
                    a1:7d:27:40:5a:92:cb:dc:a9:08:bc:fa:8e:c1:b6:
                    79:d5:b1:3a:ff:81:e9:9f:db:ab:1c:c0:61:a0:8e:
                    b1:3f:c7:11:19:d7:a7:eb:77:08:e8:e2:93:cf:df:
                    27:a3:a6:8e:f9:56:94:24:6a:1d:de:73:69:d1:72:
                    7a:67:7f:c6:a5:32:72:81:5b:49:68:d9:4d:46:32:
                    07:c0:45:f1:ac:93:9f:04:f0:a3:51:8d:eb:b2:99:
                    38:ea:8d:9c:76:11:8a:28:a3:d0:44:1e:42:69:2b:
                    9f:96:30:5e:cc:1a:2e:d3:02:74:3e:b7:d4:b4:ba:
                    00:90:04:d8:2b:84:10:eb:ab:fd:9d:ca:41:4f:42:
                    dd:67:36:08:c8:a8:43:a5:ba:d7:40:7a:a9:68:46:
                    10:4f:73:fa:84:92:36:50:6a:bc:3a:47:de:c7:ec:
                    8b:c1:71:de:1f:d9:47:73:1f:3a:e7:7f:9d:ac:32:
                    2e:af:0f:a5:99:9e:65:0e:e3:fc:60:b9:b0:05:cf:
                    bb:89:c9:da:a6:9f:76:e7:ae:70:3a:25:ee:0c:fa:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:20:0B:BE:BF:3D:BB:00:34:6C:EF:3D:A8:BE:6A:27:9F:D7:E2:B0
            X509v3 Authority Key Identifier:
                keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:30:0c:40:f4:69:ac:ad:c7:28:67:9f:09:e5:6d:9a:38:
         6e:6c:fb:18:ea:1e:95:e5:d1:23:4e:f0:26:d6:cb:0d:ec:2c:
         16:7f:25:e6:1c:65:6b:35:ea:03:95:5a:d8:48:75:b9:2d:48:
         96:16:c2:55:a0:44:0a:2f:50:14:af:28:e7:9f:ea:56:0a:e9:
         7f:0f:a6:93:ad:51:71:83:6c:b8:66:a9:03:c1:77:a0:b2:dc:
         31:ef:14:ee:70:47:c2:e0:10:6f:7e:b7:b9:41:49:bb:5b:09:
         17:c9:fb:c7:4c:57:50:25:ab:2f:d4:1c:d6:8d:04:96:d7:b0:
         fe:20:c5:58:97:b2:eb:8d:af:6f:16:38:f6:b2:4e:ae:c5:a5:
         a5:24:7e:7d:51:56:69:4d:e2:91:c3:4c:2c:db:ca:d0:5c:75:
         fb:42:de:d3:1d:0b:75:4e:b2:a7:51:2b:cc:e0:14:b7:f4:f6:
         33:a8:04:5f:b7:01:71:e0:c6:7c:7f:aa:17:ab:06:1d:6c:17:
         0d:8f:51:6e:1b:bd:38:e4:a9:4c:ac:f9:f5:e0:97:b0:e9:4b:
         06:81:33:d0:6e:d3:dc:f6:c5:8e:33:70:25:99:a4:46:3e:26:
         68:48:ae:66:f7:ce:c0:5c:f5:ae:32:e7:8c:66:ed:a5:8b:40:
         4d:a5:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:28 2024 by rpki-client on console-fra.rpki-client.org