Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File:                     LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier:          kgSqwtd+sh70RD5bzX3h1AWYHSYddOMlpzjBK4kTeP8=
Subject key identifier:   30:39:FC:BA:D1:ED:66:B7:53:68:55:58:9C:13:DD:8A:26:4B:C7:15
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer:       /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial:       018F8824A962062C95244D30FDDC21CF431A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 20:00:55 +0000
Manifest this update:     Fri 17 May 2024 20:00:55 +0000
Manifest next update:     Sat 18 May 2024 20:00:55 +0000
Files and hashes:         1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: RnwaCIZhBoDzlxtuSAVkjZJGNCnNpWDwLwpEMejumfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a9:62:06:2c:95:24:4d:30:fd:dc:21:cf:43:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
        Validity
            Not Before: May 17 20:00:55 2024 GMT
            Not After : May 18 20:00:55 2024 GMT
        Subject: CN=3039fcbad1ed66b7536855589c13dd8a264bc715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:ca:5f:05:36:15:bf:cd:ee:99:55:df:35:
                    8d:cd:82:95:27:52:16:9d:8f:13:84:46:73:12:d5:
                    21:25:e1:4e:13:9b:f4:f1:96:c4:c3:4e:6c:32:2a:
                    ee:d6:ac:a8:64:92:ca:1b:de:bb:77:be:d8:0c:07:
                    38:01:4f:fd:1a:f8:21:32:a9:a6:17:78:f6:fa:94:
                    c6:10:d6:5a:7b:86:a2:92:7d:9c:61:6c:47:7c:7f:
                    c7:69:d5:90:bd:ef:07:16:b9:83:25:62:f0:bd:4c:
                    4f:2d:bb:57:3c:f6:b9:df:07:b1:c2:8e:9a:b3:9b:
                    90:54:47:a4:f9:2a:47:7f:a1:2c:87:af:5a:fd:35:
                    9a:66:3b:4c:c4:88:f7:36:d1:2a:a3:85:bd:6c:d8:
                    e8:57:0b:81:bd:f9:fb:29:63:55:92:44:d3:73:49:
                    2c:8c:ff:c1:96:28:1e:28:68:e8:cb:4d:99:82:07:
                    f8:ff:a1:56:f4:76:78:87:1a:ef:e1:4c:c3:b4:ea:
                    b0:11:19:77:93:89:4e:bb:6a:63:90:bd:1a:c2:61:
                    23:3f:cd:ba:22:95:ef:02:40:21:dd:51:b6:ec:6b:
                    5f:e3:6e:6e:4b:b4:ea:eb:41:33:7c:6d:14:74:30:
                    0f:f6:47:f3:e9:e1:e2:81:7d:52:d6:86:6c:1c:71:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:FC:BA:D1:ED:66:B7:53:68:55:58:9C:13:DD:8A:26:4B:C7:15
            X509v3 Authority Key Identifier:
                keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:03:2f:73:e4:14:1a:e7:72:d2:9c:d7:69:36:95:11:d1:90:
         23:9f:76:7f:a2:96:ff:29:13:42:66:90:ae:70:44:58:83:14:
         5d:ca:5c:dc:b2:64:a4:85:7b:53:b3:b1:13:38:a8:ad:a0:ce:
         40:02:76:35:28:7e:07:60:74:11:11:e8:19:01:f5:d2:09:a7:
         79:49:ac:4e:1b:bf:b3:42:74:36:8b:35:dc:bd:07:04:7f:bd:
         63:b1:b0:5f:53:65:9c:cb:35:35:c3:31:fd:70:89:7b:97:49:
         58:52:26:c8:ea:b1:16:39:c4:ba:9b:ab:ca:26:94:aa:ba:e3:
         21:9b:d0:d7:88:8e:02:50:4a:f4:af:aa:c1:f7:a4:d1:f8:98:
         03:f5:5c:75:2a:42:33:96:16:19:88:36:a5:bd:37:29:86:5e:
         37:f4:e6:25:00:bb:39:54:18:89:92:29:1b:ff:f0:cf:80:e3:
         76:c3:0f:3b:76:2f:df:3f:e8:ae:34:a6:38:9b:9b:1f:5a:11:
         b5:71:c2:65:bd:da:81:7a:55:be:d7:94:63:06:a7:4b:ed:0e:
         01:e1:3f:d9:62:c2:f5:9e:32:32:b2:1f:1b:86:72:e8:58:4a:
         49:6b:bc:3d:95:8d:0c:d9:28:6f:35:db:17:7e:f7:ef:b6:4c:
         18:ea:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----