Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File:                     LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier:          ts2BNSUijiR3f5o5kV3n5NP30NsXJDaMwmSqrIlT7gg=
Subject key identifier:   FC:0E:61:BA:FD:23:30:D3:F1:B9:20:E3:82:1C:78:DA:ED:71:1D:36
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer:       /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial:       018F889230C5571C654EDCE588D7C88F6329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number:          113C
Signing time:             Fri 17 May 2024 22:00:33 +0000
Manifest this update:     Fri 17 May 2024 22:00:33 +0000
Manifest next update:     Sat 18 May 2024 22:00:33 +0000
Files and hashes:         1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: rYi/2ROEZW+QGUZJANKExQI+XAHqZ5zPcS6aNoNkwW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:30:c5:57:1c:65:4e:dc:e5:88:d7:c8:8f:63:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
        Validity
            Not Before: May 17 22:00:33 2024 GMT
            Not After : May 18 22:00:33 2024 GMT
        Subject: CN=fc0e61bafd2330d3f1b920e3821c78daed711d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:39:83:1a:00:db:f0:ee:ef:a7:f7:d8:4e:
                    67:ef:32:f3:8d:44:0e:8c:80:81:2a:80:2d:45:f5:
                    9f:1f:b5:45:38:08:c9:55:a5:f8:fd:a3:96:59:5b:
                    38:e0:65:7a:21:5f:26:b3:95:57:5b:51:85:c4:c9:
                    49:5e:e7:54:45:cd:85:3a:42:60:65:53:c7:bd:6f:
                    94:ff:ca:a3:01:83:04:c2:ed:70:f4:08:d4:f8:78:
                    8d:71:e3:07:69:32:a4:7b:31:36:2b:68:2d:2b:a1:
                    5d:a3:26:da:b9:f4:32:c0:65:a7:ad:09:2c:d7:36:
                    b5:55:e5:c2:f4:3f:fe:eb:9d:91:4e:15:0c:77:52:
                    02:72:99:28:e7:41:d2:0a:a6:a3:4a:b7:dd:50:8b:
                    aa:fe:81:ab:77:a0:c2:2f:03:f9:eb:b2:05:52:4f:
                    eb:12:dc:73:ee:3e:db:65:b2:18:1b:56:e5:25:ea:
                    25:c3:5d:5b:16:b4:c5:05:5a:10:1d:cd:a7:d9:ee:
                    3c:9a:c0:d3:6f:20:1b:d5:8a:c3:64:1a:b4:ea:7e:
                    c3:10:c3:4a:59:6d:82:13:2f:97:9b:88:54:d4:82:
                    cf:d4:18:cd:38:10:9f:35:d2:57:15:15:7c:0d:c2:
                    fa:d1:73:ed:4f:70:70:38:1e:09:8b:f8:fe:a2:a0:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:61:BA:FD:23:30:D3:F1:B9:20:E3:82:1C:78:DA:ED:71:1D:36
            X509v3 Authority Key Identifier:
                keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:d5:04:a8:7b:1a:53:78:a1:4f:1e:a3:62:e0:9d:3f:f9:
         2b:a1:0f:5c:d8:66:bb:7a:77:c8:a5:83:65:1e:b6:08:8e:43:
         fb:bf:ec:98:bc:9c:cb:34:85:00:74:06:91:a2:13:2f:58:28:
         56:f8:39:5d:21:94:1d:1a:63:88:0e:fe:bb:fd:4e:28:e7:95:
         1b:73:b5:b0:c0:d3:63:46:fa:8b:ce:81:6c:06:3d:b0:2d:46:
         e2:91:92:58:ff:4a:51:a6:49:4c:11:a9:42:a3:f6:22:c2:bd:
         ed:b3:ad:ef:02:3c:2e:65:01:69:16:f8:3f:b6:ba:2b:5f:ea:
         fd:35:8d:e8:c4:99:6e:10:26:62:cf:74:52:50:3e:ff:59:35:
         d2:24:98:66:16:30:4b:9e:06:75:52:80:d4:c6:03:1e:49:23:
         d1:37:30:6d:00:87:13:c4:f7:61:75:c9:47:17:de:de:c3:74:
         aa:8b:c7:23:9e:8a:c0:c4:67:c7:fe:c1:aa:74:fa:24:da:ea:
         69:2e:9c:29:35:a6:de:c1:62:88:db:1e:d4:3f:99:77:50:34:
         ee:4e:73:e6:ad:71:e2:8c:34:70:0f:63:1e:f2:86:f2:5f:a3:
         4c:75:b4:77:42:ec:2a:ac:39:15:b9:62:b0:6a:de:e7:6e:27:
         4b:f1:85:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkjDFVxxlTtzliNfIj2MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh
MTMwODQwHhcNMjQwNTE3MjIwMDMzWhcNMjQwNTE4MjIwMDMzWjAzMTEwLwYDVQQD
EyhmYzBlNjFiYWZkMjMzMGQzZjFiOTIwZTM4MjFjNzhkYWVkNzExZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivs5gxoA2/Du76f32E5n7zLzjUQO
jICBKoAtRfWfH7VFOAjJVaX4/aOWWVs44GV6IV8ms5VXW1GFxMlJXudURc2FOkJg
ZVPHvW+U/8qjAYMEwu1w9AjU+HiNceMHaTKkezE2K2gtK6FdoybaufQywGWnrQks
1za1VeXC9D/+652RThUMd1ICcpko50HSCqajSrfdUIuq/oGrd6DCLwP567IFUk/r
Etxz7j7bZbIYG1blJeolw11bFrTFBVoQHc2n2e48msDTbyAb1YrDZBq06n7DEMNK
WW2CEy+Xm4hU1ILP1BjNOBCfNdJXFRV8DcL60XPtT3BwOB4Ji/j+oqAkEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwOYbr9IzDT8bkg44IceNrtcR02MB8GA1UdIwQY
MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt
NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0
LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofvVBKh7
GlN4oU8eo2LgnT/5K6EPXNhmu3p3yKWDZR62CI5D+7/smLycyzSFAHQGkaITL1go
Vvg5XSGUHRpjiA7+u/1OKOeVG3O1sMDTY0b6i86BbAY9sC1G4pGSWP9KUaZJTBGp
QqP2IsK97bOt7wI8LmUBaRb4P7a6K1/q/TWN6MSZbhAmYs90UlA+/1k10iSYZhYw
S54GdVKA1MYDHkkj0TcwbQCHE8T3YXXJRxfe3sN0qovHI56KwMRnx/7BqnT6JNrq
aS6cKTWm3sFiiNse1D+Zd1A07k5z5q1x4ow0cA9jHvKG8l+jTHW0d0LsKqw5Fbli
sGre524nS/GF1g==
-----END CERTIFICATE-----
Generated at Fri May 17 22:58:57 2024 by rpki-client on console-fra.rpki-client.org