Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          LDhVQEtjFLxdo8MWND46RD55l+WxDEXrF5GNlCLQOdw=
Subject key identifier:   1C:D6:F2:61:9A:B0:8E:75:65:2C:B9:B4:C4:F9:46:A5:13:3E:6A:0C
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       019352751C4A7C6A33E4CCDB85C7446CD55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          11B7
Signing time:             Fri 22 Nov 2024 06:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:26 +0000
Files and hashes:         1: L5kKiReTR9nfnOHu32gyFYbLbuw.roa (hash: OPx5YHeDvj0Tr044MT9RBSUrUObjRjjQbfpOmStoK3U=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: Me8Os/s/BRO5hOcnW+XNOWl+J6JRtWGvvmH7sDaVICg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:1c:4a:7c:6a:33:e4:cc:db:85:c7:44:6c:d5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Nov 22 06:00:26 2024 GMT
            Not After : Nov 23 06:00:26 2024 GMT
        Subject: CN=1cd6f2619ab08e75652cb9b4c4f946a5133e6a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:1d:fd:cc:5d:26:89:f9:7d:db:c7:0c:a0:
                    6a:f6:8f:66:73:5f:e1:e4:73:8c:eb:06:71:91:35:
                    07:8f:48:5e:07:a6:0c:5c:d0:a6:ef:d3:3b:d1:f0:
                    84:95:13:23:c0:cf:a6:c6:1c:bc:2c:50:b9:9a:fb:
                    c6:68:03:23:bd:a8:0e:9d:ab:a5:45:0e:aa:62:e7:
                    d7:3d:b2:dc:22:7c:2c:4e:2a:9e:c6:f9:e3:1d:69:
                    b1:f2:18:49:77:b1:40:2b:27:bd:be:a8:ec:d1:3c:
                    b9:fd:ae:7a:f3:b0:b2:cd:bf:50:79:59:9b:bd:a0:
                    75:19:6b:60:0b:1b:16:87:72:8a:0e:50:f7:6d:51:
                    6d:ff:5f:ac:d1:12:30:ca:c2:7a:ea:ea:8b:7e:44:
                    1e:8d:d5:54:1d:63:70:ab:08:c1:0c:c7:ce:b1:bd:
                    42:3a:93:07:e6:2d:75:c5:b2:ee:3d:ca:83:96:7f:
                    08:f5:5b:a1:e5:55:de:97:47:21:87:12:72:5f:fe:
                    df:31:b2:ff:73:14:fc:16:02:02:8a:23:56:5f:cf:
                    f4:72:1b:c9:5b:1b:9f:08:a4:bb:71:25:cb:c7:eb:
                    50:0e:1c:78:de:20:37:52:f9:3f:66:c0:46:1f:f6:
                    b4:02:94:86:fc:87:37:e1:94:cf:e7:79:c3:d3:83:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:F2:61:9A:B0:8E:75:65:2C:B9:B4:C4:F9:46:A5:13:3E:6A:0C
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:2c:62:2c:5f:fb:d0:00:bd:cd:91:e1:2a:82:cc:a7:98:
         bc:8f:f7:49:e1:f1:3b:40:c0:63:cd:f2:68:8e:21:ec:01:12:
         8c:47:49:a0:0e:f0:e1:7c:47:b3:35:6a:21:a5:28:6f:9c:d5:
         8f:03:de:d8:ec:8c:ae:02:65:01:ed:71:39:47:d8:6f:b8:4f:
         33:a0:9d:9a:f4:22:50:d8:4c:88:d2:7c:35:18:ee:b6:4b:99:
         cb:9a:d9:15:1d:7c:2e:b0:cd:a6:76:6c:fa:0e:ca:34:ef:9b:
         68:9a:6a:9c:ad:7e:18:ad:44:b6:80:18:f0:c4:c1:ac:63:43:
         81:d6:54:a0:fe:94:34:65:dc:c0:80:78:9d:2f:67:e1:a9:e3:
         da:1e:06:64:ef:41:78:40:51:ed:79:54:2e:1f:07:3d:a6:06:
         b2:61:76:09:a7:de:56:d8:97:32:37:96:d4:1c:aa:bf:37:ca:
         2b:dd:7f:22:4a:6a:39:ca:08:2d:33:ff:15:c6:27:2f:8e:85:
         4e:fe:8a:be:94:95:30:83:16:8d:5d:0a:af:af:ae:4c:12:a8:
         dd:f8:ec:ae:98:cd:09:72:85:88:13:a2:fb:3a:9b:f3:bd:56:
         c4:70:ba:22:c3:9e:71:76:ac:85:c0:59:9a:b3:c7:8e:80:e3:
         c2:58:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:39 2024 by rpki-client on console-fra.rpki-client.org