Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft
File:                     LI-vVywgir73nHDr3uhjWcznO4g.mft (raw, json)
Hash identifier:          3Ct95nZ7vrIFYj6fQhxkI5ZN2Lj3hVW5tYLupoKKkjE=
Subject key identifier:   2E:26:E1:10:71:F2:DF:49:35:8D:24:E2:90:66:3C:F8:7B:4A:7E:B1
Authority key identifier: 2C:8F:AF:57:2C:20:8A:BE:F7:9C:70:EB:DE:E8:63:59:CC:E7:3B:88
Certificate issuer:       /CN=2c8faf572c208abef79c70ebdee86359cce73b88
Certificate serial:       01903CD26F4F26A0B160E87F5C5AE05E28F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI-vVywgir73nHDr3uhjWcznO4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft
Manifest number:          0874
Signing time:             Fri 21 Jun 2024 22:02:22 +0000
Manifest this update:     Fri 21 Jun 2024 22:02:22 +0000
Manifest next update:     Sat 22 Jun 2024 22:02:22 +0000
Files and hashes:         1: LI-vVywgir73nHDr3uhjWcznO4g.crl (hash: YyTNE6feUbXqwRofYNCiGWrGxXWRAs06E2iXPkNAXeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LI-vVywgir73nHDr3uhjWcznO4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3c:d2:6f:4f:26:a0:b1:60:e8:7f:5c:5a:e0:5e:28:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8faf572c208abef79c70ebdee86359cce73b88
        Validity
            Not Before: Jun 21 22:02:22 2024 GMT
            Not After : Jun 22 22:02:22 2024 GMT
        Subject: CN=2e26e11071f2df49358d24e290663cf87b4a7eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:64:b7:43:76:72:61:6e:d5:48:97:ee:b4:
                    72:de:f3:23:8e:51:52:b4:04:d9:7f:2b:c9:84:0a:
                    f1:bb:f6:7a:c5:54:3b:df:50:57:e1:e6:df:5e:16:
                    cc:80:1b:61:21:f9:9d:4e:7a:88:2b:a0:aa:d7:3d:
                    ed:21:e6:db:fe:e9:d6:d1:81:b9:04:95:4a:a0:f2:
                    62:64:3a:21:5e:5e:c3:90:fe:06:61:f9:b6:3d:f5:
                    36:ca:ff:9f:f4:b2:76:94:ad:4e:43:f4:79:84:bc:
                    5d:b1:f2:bd:0b:09:22:81:76:f9:12:c2:e3:10:a8:
                    d1:f9:aa:db:7d:be:44:18:9a:e3:ca:a5:c0:60:37:
                    5a:d1:63:90:d7:6d:45:7a:d1:3c:60:65:08:f7:a9:
                    25:a8:7f:11:37:59:55:c9:22:3c:e0:c5:88:19:65:
                    32:34:56:58:a2:31:44:2e:be:56:f5:e1:a9:b8:b4:
                    8e:b2:56:ed:7b:73:3c:9f:9a:0f:18:86:df:24:02:
                    c8:a0:28:f5:8c:8d:f2:2c:a4:03:f0:01:88:b4:ad:
                    2b:19:55:d4:b1:27:db:0c:98:02:fd:00:03:df:b8:
                    a2:e8:b0:33:5b:16:13:e2:a3:3c:99:08:4e:29:fd:
                    c9:bf:11:46:c3:19:1b:97:17:70:39:83:8e:60:97:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:E1:10:71:F2:DF:49:35:8D:24:E2:90:66:3C:F8:7B:4A:7E:B1
            X509v3 Authority Key Identifier:
                keyid:2C:8F:AF:57:2C:20:8A:BE:F7:9C:70:EB:DE:E8:63:59:CC:E7:3B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-vVywgir73nHDr3uhjWcznO4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:12:cf:ad:fe:27:19:96:2f:5c:f6:19:8f:e1:31:b5:45:
         ae:52:1b:0a:33:8d:37:62:0c:cd:66:fc:29:e0:9a:44:62:1c:
         39:b9:a8:cf:24:68:bf:da:01:fe:ed:b8:18:32:10:33:1d:14:
         b8:8e:94:a7:d1:69:f7:0c:16:a7:be:81:b8:68:4d:6e:3f:4c:
         63:57:77:ca:31:0a:65:2e:28:a4:d1:4e:96:bc:cd:1c:20:3f:
         a5:47:95:5d:02:05:2c:16:c1:0c:ba:f2:19:b9:da:ec:d4:01:
         32:fa:5b:ff:59:ea:5b:3e:51:cb:21:ed:bc:2f:16:f0:7e:e5:
         f9:af:1f:92:18:4c:a9:74:32:80:95:ee:49:d2:84:15:b0:e2:
         a2:f1:c7:c4:75:66:06:b1:a6:36:9d:e4:ec:d2:4b:10:22:05:
         66:4a:87:af:fc:0b:ad:03:31:67:e2:d4:79:98:f1:29:29:82:
         5e:ef:34:91:e6:2f:54:be:b4:66:19:d8:24:eb:e9:1d:3f:fd:
         cd:38:e7:15:5f:03:1c:44:72:b0:b6:1a:06:02:4b:3f:89:5f:
         a5:4c:2b:68:4f:1b:2a:11:2b:4f:69:58:c7:4d:d5:51:63:7b:
         88:22:c7:f9:e7:dc:14:7f:2a:1d:ff:90:ea:8b:8f:f0:99:c2:
         4d:bc:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 05:26:28 2024 by rpki-client on console.sobornost.net