Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          b+l2jAEuJrynzzyj75RriExZop4qlJ2j1iL2iyIrR8k=
Subject key identifier:   A7:54:5B:F7:02:97:42:BC:E9:26:FC:D7:E3:59:38:98:5F:33:BD:C7
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       018F8749026DA3463BEF04201F7040AF786D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          0271
Signing time:             Fri 17 May 2024 16:00:59 +0000
Manifest this update:     Fri 17 May 2024 16:00:59 +0000
Manifest next update:     Sat 18 May 2024 16:00:59 +0000
Files and hashes:         1: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: dO6sfxpykLA8qPhxotXZSM8Z/U/FqWqkbjcfRk/svKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:02:6d:a3:46:3b:ef:04:20:1f:70:40:af:78:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: May 17 16:00:59 2024 GMT
            Not After : May 18 16:00:59 2024 GMT
        Subject: CN=a7545bf7029742bce926fcd7e35938985f33bdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:9a:e1:fb:bb:79:06:b0:f2:d1:dd:5f:5b:
                    5e:9b:29:2c:ac:a7:47:b2:0f:4c:6b:df:ed:a9:20:
                    68:41:0c:65:be:6f:f4:3a:2b:6e:29:4a:30:4f:4b:
                    10:25:58:07:83:10:fd:b0:a2:04:71:71:49:58:1b:
                    1e:b2:3e:f4:ef:44:4f:44:f4:13:cb:d8:d5:ca:29:
                    31:00:10:eb:24:8b:5b:b3:00:34:df:46:70:06:df:
                    76:c6:eb:f9:52:6d:66:d7:05:6d:7c:ac:23:fa:c6:
                    75:3c:d9:db:a6:f7:cd:59:5e:05:4e:2c:36:3b:96:
                    8a:75:53:93:df:e2:e4:29:c8:88:f6:a4:19:36:67:
                    5f:07:e4:a1:33:0a:2c:e5:9f:02:36:a5:57:bb:50:
                    ee:e5:93:ba:e3:d1:41:4e:bd:46:7d:70:f0:03:1b:
                    6a:65:62:51:d9:a7:76:10:50:73:ca:2c:d2:af:da:
                    e8:58:f6:8f:db:8c:6f:e9:54:9d:30:7e:06:42:1b:
                    ed:e4:b3:e6:a6:93:47:9a:4d:65:b3:49:ed:03:23:
                    e2:07:0c:97:2d:9c:3a:b9:ed:83:87:90:28:12:29:
                    bc:0a:eb:6a:23:88:32:7f:13:b1:5b:4b:d4:be:14:
                    b6:47:72:ed:b4:ea:2e:7d:b4:6b:df:2b:d1:3a:94:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:54:5B:F7:02:97:42:BC:E9:26:FC:D7:E3:59:38:98:5F:33:BD:C7
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:aa:03:a1:f7:f6:25:ba:b0:1a:2f:53:86:5d:ae:7d:a2:
         c5:68:f8:2a:87:fb:21:6a:b8:bf:d8:1c:77:a7:38:1c:50:b2:
         2f:6d:c5:8d:f5:28:6c:fc:f9:d8:89:ab:f6:5e:b8:a2:a3:72:
         92:91:dc:43:f6:43:11:ad:5e:bc:ab:13:80:e1:f4:49:1d:97:
         b2:40:71:e3:d8:33:92:b7:96:ba:f9:40:70:75:bd:3a:a6:4c:
         93:ce:88:2a:00:78:f4:a3:0c:13:f8:5a:2c:ae:30:6a:ba:de:
         02:80:e2:7d:15:1b:47:0e:31:3a:85:74:0d:5f:aa:55:ed:c7:
         2d:a6:d3:88:4f:fa:1c:65:68:8b:8c:88:74:5e:46:13:33:c1:
         7e:7b:61:df:62:0a:45:8d:7c:8f:9c:13:d4:e9:50:3f:87:f1:
         3d:77:b4:25:b0:e5:89:2f:b7:11:06:9b:8c:dd:1b:35:0a:74:
         0d:19:41:64:86:be:e3:1b:79:38:08:b6:24:e8:9c:c8:5f:44:
         70:ec:8e:c0:b0:d4:a9:dc:77:1e:23:17:8f:a7:6e:ca:c2:31:
         b7:ce:27:cb:60:22:6a:53:cb:0d:47:71:64:4f:4a:bf:df:e1:
         5e:4c:ab:97:b9:d6:32:b7:47:05:ae:f4:0e:04:24:9b:de:71:
         15:02:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:53 2024 by rpki-client on console-fra.rpki-client.org