Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File:                     LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier:          26vh+1Djofy46DaIwsqfn2PflPvHHfljTczT+EoeaFU=
Subject key identifier:   2F:F7:E6:49:07:FD:1F:3D:59:8B:3A:0E:01:AB:A8:8C:0B:47:CC:06
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer:       /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial:       018F87B6D0BF1D748469F83E49549985F441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number:          1107
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: eT2U+9xfK6k5qYI5Rez3OLY/+qlsrKU7paMPg7f8NBw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:d0:bf:1d:74:84:69:f8:3e:49:54:99:85:f4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=2ff7e64907fd1f3d598b3a0e01aba88c0b47cc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:ae:75:77:6b:51:ce:07:bf:dd:f1:70:79:
                    1f:8f:ea:b9:2d:a5:1e:60:ef:cf:ba:85:ac:c6:f5:
                    c3:c4:3b:31:db:db:d9:69:3c:11:7f:8f:13:d2:53:
                    1f:76:a0:68:d2:cf:1c:2d:9a:88:c7:c4:ed:87:9e:
                    ac:04:99:66:cf:6c:d6:93:d4:d3:eb:ca:cf:05:fc:
                    39:f3:61:fc:38:08:fa:52:f2:ac:58:6b:42:af:a4:
                    f5:f2:25:71:2a:e7:1b:e5:a8:8e:d3:8c:d6:ba:a7:
                    62:89:ed:1e:07:d1:fd:69:b2:1f:3a:b7:24:bd:93:
                    d2:c0:5b:9b:53:18:94:e9:48:23:e7:19:f3:e0:24:
                    91:c6:75:7e:3f:e1:7c:a3:6c:a3:b1:e8:9c:e9:9b:
                    08:1e:62:13:70:1f:85:44:bd:e5:1a:5a:0e:01:4f:
                    57:80:d6:f2:5f:73:aa:ef:6c:56:60:48:23:2b:09:
                    f6:7b:dd:ab:a6:a2:27:b9:e7:3f:80:14:84:8a:f3:
                    31:70:a9:4a:cd:8b:65:b7:6d:34:5d:5d:a0:f1:ad:
                    b2:8f:e8:a0:ad:b3:fa:d3:ac:48:64:54:98:85:f4:
                    05:48:e4:f7:d2:e2:f1:73:d3:24:f5:9d:76:79:c8:
                    9d:79:de:59:ce:05:41:94:f6:fb:73:09:d9:5d:cd:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:E6:49:07:FD:1F:3D:59:8B:3A:0E:01:AB:A8:8C:0B:47:CC:06
            X509v3 Authority Key Identifier:
                keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ba:04:5e:93:ad:56:7a:b8:21:05:7f:04:f3:54:2f:48:d7:
         34:68:e5:b1:ba:40:cd:c1:4d:65:50:bd:17:ef:98:b8:2e:08:
         67:01:19:3b:b2:57:0b:c1:5b:d9:25:66:20:bf:60:16:2d:54:
         02:01:13:97:8b:1f:97:14:8d:80:d1:f3:f0:57:4c:60:5c:34:
         ca:6a:aa:ee:f8:f4:64:49:59:93:cc:4c:13:11:12:4d:8f:05:
         2a:9b:09:29:d7:d0:bc:b7:16:bd:59:4b:b5:fa:93:6a:37:b7:
         eb:9b:45:61:28:7d:7f:00:66:82:9a:fa:4d:36:02:d9:a8:25:
         bb:98:b7:60:4f:25:f0:06:13:56:fb:3d:b0:bf:67:66:97:1c:
         e5:6b:b2:7e:7e:c5:ce:99:db:b7:1e:a8:19:ed:5d:9e:f9:75:
         c3:ce:99:ac:d9:6d:d5:9f:21:a4:eb:7e:69:29:c2:a0:eb:6d:
         ad:51:db:63:2d:30:79:db:ae:99:01:38:5d:c9:e3:b8:9a:f5:
         1d:4e:c4:7e:fd:e6:c2:d2:46:49:f2:99:37:4c:74:3c:7f:16:
         9f:eb:4f:e6:a9:06:2e:14:9c:af:e5:d2:c2:b1:19:31:85:bf:
         34:2c:68:2a:96:38:be:f7:ea:c1:f5:a7:d6:2c:c2:95:83:f2:
         c2:22:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:25 2024 by rpki-client on console-fra.rpki-client.org