Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File:                     lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier:          3ahOXRVo80x8gvTQZkE5hQyG1QHpP+cUUnboEJIMqCY=
Subject key identifier:   3A:6C:BE:75:8E:B5:25:8F:B8:08:2F:DE:EE:8C:56:C1:66:56:0F:AF
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer:       /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial:       018F87484905786AF47C409AA91D819F6AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:12 +0000
Manifest this update:     Fri 17 May 2024 16:00:12 +0000
Manifest next update:     Sat 18 May 2024 16:00:12 +0000
Files and hashes:         1: AUnkV6XEKtxbP8gm_jE7Z1QsKWs.roa (hash: cPpG8LGNvzjfOetj/9bg4Qamc65v5eZvi2pM37VUI7k=)
                          2: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: 5VJL9FA3LEBCaw4Q0y77/ThxLSjYz2X/8syLEMn3xqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:49:05:78:6a:f4:7c:40:9a:a9:1d:81:9f:6a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
        Validity
            Not Before: May 17 16:00:12 2024 GMT
            Not After : May 18 16:00:12 2024 GMT
        Subject: CN=3a6cbe758eb5258fb8082fdeee8c56c166560faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:66:64:b4:3f:96:bb:e4:ff:40:c2:64:23:
                    50:27:3f:4d:79:51:c6:0b:66:31:a7:6c:8e:c4:a1:
                    6b:0a:ba:1a:9d:f3:46:c0:ce:d4:93:fa:f6:4e:e8:
                    be:5e:1a:27:33:98:66:7d:7e:6e:c3:bd:fa:43:d4:
                    71:b5:9b:f4:4b:38:f8:db:dd:5f:b5:1c:51:2e:ed:
                    3a:6d:5e:3a:f6:48:48:97:23:f5:e8:2e:82:41:f1:
                    b6:65:68:45:cf:8b:92:01:dc:fb:7e:88:87:b9:69:
                    31:83:50:00:06:04:c0:27:ca:4b:57:4d:61:93:fe:
                    e8:26:3d:46:1b:99:f3:1e:28:76:c2:37:d7:8a:01:
                    4a:27:a2:bf:a0:13:9d:ce:9f:ff:48:77:d0:b2:ea:
                    09:b4:a7:89:9e:85:d2:62:66:05:19:17:aa:8c:18:
                    14:2b:a8:59:29:3b:55:c8:3b:5e:ec:c5:57:79:5d:
                    57:d6:07:2c:f2:50:10:ae:27:13:06:05:7f:90:49:
                    ab:3d:30:7b:f3:94:14:d1:d0:e6:fa:81:8e:88:08:
                    64:8a:da:74:04:a6:3f:49:05:29:38:05:7f:3f:f5:
                    38:3d:d7:98:6f:bd:fd:0c:42:04:d9:51:6b:dd:4a:
                    15:75:83:1d:c4:08:38:e1:e2:8c:d7:4b:86:13:c1:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6C:BE:75:8E:B5:25:8F:B8:08:2F:DE:EE:8C:56:C1:66:56:0F:AF
            X509v3 Authority Key Identifier:
                keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:64:74:5d:e7:9d:d0:4f:bc:c1:68:3d:84:97:fb:3f:65:28:
         3c:7e:59:01:45:d6:db:38:21:6e:57:c3:f6:5b:5f:60:5c:68:
         cc:69:c8:60:f2:5b:0f:ec:ba:38:96:cb:33:71:69:d9:3d:e7:
         92:73:92:0c:b9:9b:71:d4:6a:70:73:aa:d8:cf:bd:11:3c:58:
         fd:0a:fb:b4:e3:39:e0:82:b5:9e:a1:7b:2c:03:e4:3d:a0:aa:
         63:96:f1:df:13:9f:45:c6:f5:53:a1:b5:9a:9c:5d:e1:79:8f:
         8b:12:ff:93:70:0d:26:5f:d7:0a:2e:ba:d2:be:40:2c:28:b5:
         ec:cf:91:8d:95:bf:b3:43:6a:55:9a:3a:81:f1:fc:38:2e:f4:
         d8:fd:8d:58:47:c9:72:a7:54:b1:cc:51:8b:97:c2:1e:c1:3f:
         c5:f6:b6:63:f2:23:f4:b8:38:d6:9b:92:6c:50:47:1f:a4:05:
         eb:f4:e6:90:04:d0:5c:12:ce:94:e4:9a:30:08:f5:45:44:d9:
         1f:ae:30:c1:78:f8:63:67:c7:75:12:6a:42:2e:53:61:10:74:
         28:2e:92:1b:fa:7d:b7:ec:9d:61:47:f4:c0:7b:73:4d:aa:7c:
         7c:aa:84:f4:fe:30:da:8e:ff:10:58:bb:b9:cf:2d:5b:3d:ce:
         4e:e0:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:21 2024 by rpki-client on console-ams.rpki-client.org