Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File:                     li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier:          N+pOZybcgEoSI6jm9dBeqnBRvYSYEPbQxwrd2GEO+8Y=
Subject key identifier:   88:42:8C:7C:84:04:D0:2F:DB:9B:C3:CE:00:36:1E:50:6E:8B:FD:77
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer:       /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial:       018F874A04B54135F8C4CE2879986C84A2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number:          0453
Signing time:             Fri 17 May 2024 16:02:05 +0000
Manifest this update:     Fri 17 May 2024 16:02:05 +0000
Manifest next update:     Sat 18 May 2024 16:02:05 +0000
Files and hashes:         1: RnwoULn3Xr5y1pgkY5FI0MeRZqI.roa (hash: RgPYk+xoFr3XcpLodSocxBhPztPJhUflynUvvrhV0A4=)
                          2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: O2w8zLsUnZH9PdwBWAZL0od9Xpoy1m3W8/oX47WDlP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:04:b5:41:35:f8:c4:ce:28:79:98:6c:84:a2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
        Validity
            Not Before: May 17 16:02:05 2024 GMT
            Not After : May 18 16:02:05 2024 GMT
        Subject: CN=88428c7c8404d02fdb9bc3ce00361e506e8bfd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:b5:f9:4e:af:7f:2d:5b:bb:33:eb:bb:c1:
                    a8:52:1a:9e:de:6e:8a:78:cd:d8:31:01:0d:e1:a8:
                    c2:41:33:9b:2d:41:b2:0c:f3:1c:5e:02:3c:77:c3:
                    7c:15:04:0e:d6:05:da:f6:80:7d:41:c1:b8:b3:29:
                    18:c5:76:26:47:18:a9:20:35:9c:1e:f6:56:8a:21:
                    d6:cd:e7:37:02:7f:27:5d:a3:5c:b5:7a:1d:9f:7c:
                    f3:c2:e2:be:1d:70:34:35:3b:e0:21:78:92:f9:c1:
                    52:04:86:7d:13:b8:0e:7d:5e:c6:22:06:0b:b1:d7:
                    f7:53:19:08:2a:20:81:f0:d0:e2:c9:0e:93:e4:82:
                    38:6d:a0:0c:12:3f:d8:b6:1c:dd:fb:07:94:04:db:
                    94:d8:98:aa:8c:4f:51:d2:7b:f2:a9:1e:b4:06:7d:
                    62:4f:2a:0b:6f:a9:4c:8f:bd:fe:39:47:92:ae:fa:
                    4d:82:21:e5:fa:00:f3:44:00:16:b1:61:57:e8:c1:
                    1c:12:81:fe:f2:e3:7e:aa:4c:e1:78:ac:42:5e:0d:
                    3f:f9:f6:ad:28:4e:7b:20:1b:1a:65:10:6e:77:f2:
                    0f:d6:38:1c:35:4d:5e:e6:f0:96:97:b0:1d:aa:42:
                    0b:bc:dd:e9:24:a0:b6:ed:01:99:ca:35:ec:8a:4c:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:8C:7C:84:04:D0:2F:DB:9B:C3:CE:00:36:1E:50:6E:8B:FD:77
            X509v3 Authority Key Identifier:
                keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:50:d3:f5:b2:40:7b:87:98:a7:f6:9b:d1:ea:27:c3:f7:f3:
         33:d6:68:8e:8d:6b:df:66:ce:81:48:d0:32:10:48:8b:fa:97:
         f4:63:d0:71:1d:71:d6:91:d9:47:00:47:52:9a:48:88:c0:70:
         74:2a:66:3c:18:18:24:66:eb:bc:d6:db:36:d1:59:62:40:50:
         f8:f3:a3:12:12:be:6e:e2:e3:b3:4b:ce:3c:ab:35:fc:ea:cc:
         75:48:f5:6d:ee:bf:4a:45:28:6e:f3:59:5a:aa:ae:ce:9f:52:
         d9:11:1c:2e:43:ab:b2:7f:12:c5:0e:f3:cb:4a:49:c8:74:e6:
         c0:c3:a2:6e:bf:0a:ad:f8:87:0a:dc:67:a1:43:28:6e:3b:90:
         5c:28:a6:0e:12:4f:55:a1:4b:4b:22:75:27:68:15:3e:91:dc:
         06:04:15:ba:c2:12:2a:0b:3b:c0:b3:b7:9a:86:ed:a0:57:85:
         81:90:a7:a3:65:c1:e8:97:01:0c:54:96:bd:a4:0b:7c:cb:e5:
         88:10:9f:cb:8d:a9:1e:74:3b:a9:66:fb:15:b3:60:fa:5b:d7:
         e3:70:80:d9:8d:55:a1:c6:23:13:a5:87:6c:0e:8b:3f:ba:27:
         96:f2:b9:e2:34:e6:8e:34:d7:31:bd:d5:43:f3:bd:d2:be:5d:
         25:40:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:50 2024 by rpki-client on console-fra.rpki-client.org