Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
File:                     LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json)
Hash identifier:          H2fHQvM/qa0LHVRyNDrQYWhUc+6K9iMyErY59dA5wu0=
Subject key identifier:   18:CC:25:6A:10:06:B1:21:78:F5:DE:7A:D6:69:76:60:E1:B9:A2:07
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Certificate issuer:       /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial:       01904F0E48089C26E0B42D06E25C4E715BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
Manifest number:          0836
Signing time:             Tue 25 Jun 2024 11:00:54 +0000
Manifest this update:     Tue 25 Jun 2024 11:00:54 +0000
Manifest next update:     Wed 26 Jun 2024 11:00:54 +0000
Files and hashes:         1: A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa (hash: wqC9ig9c4r3ibxnGZkXomsyFuAUXNDfrCQNIAiK2dP4=)
                          2: BHl6R7BMWq26DHQO3MIbnXvW_CY.roa (hash: SRpkztK1HCNTFMImMxWaBTrWpB2PDazdB9S/jbOoL8c=)
                          3: I3XH35UIi75KmGxY5yJfuf8h02E.roa (hash: xn2PMU6un3K/kl/cNS+tl9QsPEDDj866jLyY6ydPg6E=)
                          4: IvF1rSgRq3BglceqaT4rL7PSftI.roa (hash: Y6z9/jeC3bc3HNb82V+o9UShGGoQYrFYcCut5dc8xPQ=)
                          5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: uo1ryiuk9vNZatc6HAV9gOmAzryzElOrUsHIsDlEF+A=)
                          6: SouY4mcWskKjeMBkHHLwkYRzZ9w.roa (hash: IsIQyIGKNfeFaltgFPRNcsm6wNMW/Lxs1tavSRk2F9c=)
                          7: e7a1iOVtg9fTviHXygkb6HooCdQ.roa (hash: n9Ig+1ewhbeFasYqHaSdSIHMPDWbAlsmkQrZ+ZE0IvQ=)
                          8: jNZCsv44lK47pMaZxcFgHYlzSP4.roa (hash: +DEn7cT2lnHzGggz4xKZVbt00ADHzGe9rZagwRUYsew=)
                          9: mD66CUPpa6fsPoCDyP6CvtcpkA8.roa (hash: b/hiKqSoELzwGmHW4n0KuWP1KzdByy5kXCN+pKVhC7g=)
                          10: sGQClI8yv33uYUqh8A3-0u0YekY.roa (hash: 9p0GoacewGB5hRrHXcDuCTdS3hXAq6rfpxgt6Y8uMYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:0e:48:08:9c:26:e0:b4:2d:06:e2:5c:4e:71:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
        Validity
            Not Before: Jun 25 11:00:54 2024 GMT
            Not After : Jun 26 11:00:54 2024 GMT
        Subject: CN=18cc256a1006b12178f5de7ad6697660e1b9a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:cd:b6:22:d4:96:d0:25:4b:57:15:d0:b1:
                    8c:02:50:b4:04:1b:e0:db:72:ee:70:99:7e:ca:3b:
                    2d:eb:ef:98:20:d6:cc:f6:72:a3:fa:1e:d4:8c:4e:
                    79:f1:ca:cd:68:66:cc:55:f0:4f:39:ca:67:13:03:
                    d9:b1:98:f2:5a:b5:da:5c:fd:eb:5b:18:9c:81:9d:
                    d8:a8:9d:2b:b4:a1:15:1f:dd:48:32:25:db:59:16:
                    42:6f:d1:f3:1e:20:e6:95:04:94:11:87:c6:e1:e6:
                    77:38:96:56:ef:4f:78:1f:a3:a4:c6:14:16:ea:a0:
                    f1:26:1c:2f:e5:74:8a:bd:fa:cf:50:5a:5c:f8:36:
                    ae:38:dc:56:61:c7:00:04:4f:fc:4a:24:34:b1:dd:
                    a5:5d:52:1a:4a:a8:2b:d6:1e:1e:7b:78:30:d2:07:
                    14:d7:7b:61:8e:ac:d2:9b:9d:a2:71:05:15:72:22:
                    55:72:f5:f0:54:a7:f9:ee:08:18:f5:2a:db:0a:b8:
                    c1:54:92:53:81:78:3f:f7:92:ac:ba:f5:08:23:13:
                    92:40:ab:ad:e2:1c:4f:11:d8:29:be:78:de:d8:93:
                    62:2f:c8:59:d0:fa:e4:fa:df:aa:f4:68:ad:75:08:
                    bc:9f:c8:6b:37:73:19:4b:60:02:cb:ef:61:5a:a2:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:25:6A:10:06:B1:21:78:F5:DE:7A:D6:69:76:60:E1:B9:A2:07
            X509v3 Authority Key Identifier:
                keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:93:a5:22:75:54:84:6a:fd:70:f3:2a:52:a6:4c:d8:50:89:
         09:be:30:24:52:f9:5c:d5:5b:cb:c0:e5:12:a7:db:53:9e:c8:
         1e:c8:ed:01:37:d0:f0:83:a1:2b:d4:96:7d:c9:de:cf:82:53:
         ff:68:7f:93:fc:5b:59:d7:9f:35:94:eb:98:57:18:8b:60:3c:
         90:96:4e:70:03:3a:39:0b:db:97:ab:78:a5:72:36:83:71:f7:
         9c:93:65:f5:b0:82:94:73:fa:68:f4:8b:84:a4:8b:a2:df:92:
         df:a3:71:dd:ab:a2:72:bf:18:bc:db:0f:c4:df:b0:26:e9:12:
         9e:8a:3b:1f:14:9a:7b:56:d1:b6:4e:50:27:8e:1d:88:f2:b5:
         e6:ad:27:aa:20:f9:ff:56:9e:d7:35:f9:12:0d:6b:46:32:1a:
         30:6a:97:bf:60:cf:77:a8:29:64:bb:6c:92:90:ac:2f:2f:fe:
         03:66:ab:7a:a5:a7:90:72:87:7f:c0:c3:c8:0a:a2:ab:d5:ca:
         a2:2a:3e:fc:16:f0:98:0e:66:34:3c:d2:0c:1a:ff:ed:bc:1f:
         4e:18:7d:bc:a2:62:a3:c3:ce:8e:07:44:9d:e3:14:7b:50:12:
         f8:fd:ec:bd:a5:6f:c0:4a:b5:84:f0:d8:9b:71:21:2a:65:f3:
         f7:d0:fe:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBPDkgInCbgtC0G4lxOcVunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjQwNjI1MTEwMDU0WhcNMjQwNjI2MTEwMDU0WjAzMTEwLwYDVQQD
EygxOGNjMjU2YTEwMDZiMTIxNzhmNWRlN2FkNjY5NzY2MGUxYjlhMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFHNtiLUltAlS1cV0LGMAlC0BBvg
23LucJl+yjst6++YINbM9nKj+h7UjE558crNaGbMVfBPOcpnEwPZsZjyWrXaXP3r
WxicgZ3YqJ0rtKEVH91IMiXbWRZCb9HzHiDmlQSUEYfG4eZ3OJZW7094H6OkxhQW
6qDxJhwv5XSKvfrPUFpc+DauONxWYccABE/8SiQ0sd2lXVIaSqgr1h4ee3gw0gcU
13thjqzSm52icQUVciJVcvXwVKf57ggY9SrbCrjBVJJTgXg/95KsuvUIIxOSQKut
4hxPEdgpvnje2JNiL8hZ0Prk+t+q9GitdQi8n8hrN3MZS2ACy+9hWqJJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjMJWoQBrEhePXeetZpdmDhuaIHMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpOlInVU
hGr9cPMqUqZM2FCJCb4wJFL5XNVby8DlEqfbU57IHsjtATfQ8IOhK9SWfcnez4JT
/2h/k/xbWdefNZTrmFcYi2A8kJZOcAM6OQvbl6t4pXI2g3H3nJNl9bCClHP6aPSL
hKSLot+S36Nx3auicr8YvNsPxN+wJukSnoo7HxSae1bRtk5QJ44diPK15q0nqiD5
/1ae1zX5Eg1rRjIaMGqXv2DPd6gpZLtskpCsLy/+A2areqWnkHKHf8DDyAqiq9XK
oio+/BbwmA5mNDzSDBr/7bwfThh9vKJio8POjgdEneMUe1AS+P3svaVvwEq1hPDY
m3EhKmXz99D+kA==
-----END CERTIFICATE-----
Generated at Tue Jun 25 18:51:44 2024 by rpki-client on console-ams.rpki-client.org