Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
File:                     LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json)
Hash identifier:          ZjRCLFpSlSuc2Ou1SCl1tWNIUVdR+a1m/m73Edxf4Qk=
Subject key identifier:   0A:5B:38:EA:39:84:EE:67:BE:F7:1C:93:2D:F6:99:F7:FA:3F:7A:B6
Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
Certificate issuer:       /CN=2ee353f3503f9bff3381450035628e81a96d908f
Certificate serial:       01901E900267D7EE253CA8A6407090CA6B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:12 +0000
Files and hashes:         1: 9QNX46TDXT_MbpihQQOdgdXRJQM.roa (hash: JuM/gQRjx2ARw/VfPIE4gZ49vBjV8NuOUprMQK/cHEQ=)
                          2: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: cXFUcxkwW5fiI42lUla5NsTI9XEDC4xPaiYa1QrwfLs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:02:67:d7:ee:25:3c:a8:a6:40:70:90:ca:6b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f
        Validity
            Not Before: Jun 16 01:01:12 2024 GMT
            Not After : Jun 17 01:01:12 2024 GMT
        Subject: CN=0a5b38ea3984ee67bef71c932df699f7fa3f7ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:7f:12:9a:d9:a8:82:b1:2a:1d:76:6d:48:
                    36:14:6e:c6:e3:19:3f:c5:99:eb:65:d1:fb:61:23:
                    df:3c:ab:a0:3c:43:d2:f9:f7:50:5a:14:83:76:8c:
                    71:b6:4c:af:ec:d7:e8:c3:82:15:eb:b2:e2:f4:7e:
                    d0:2b:b9:18:2c:38:2f:d7:c8:c4:09:e1:d7:3d:d3:
                    79:c2:f9:03:8d:38:0e:1d:b5:72:9f:db:a9:01:83:
                    cd:11:ae:82:28:61:f7:c9:f9:fe:73:af:e1:d1:01:
                    24:4e:e8:d8:95:84:38:c0:0e:19:f2:a0:5d:d0:92:
                    3d:de:ff:d2:61:ca:c5:d1:c6:f9:29:fd:a2:9c:21:
                    79:da:9f:ad:59:1e:54:39:a9:ee:59:a7:e9:a7:3d:
                    76:e6:5c:cc:22:28:13:34:5f:64:b8:12:30:ff:b9:
                    b4:63:85:e9:a8:91:65:d3:a4:8d:e1:4e:9a:4f:08:
                    aa:35:ed:e2:1f:e7:ef:19:01:b8:f6:c5:37:6e:c6:
                    8b:5f:e5:f7:5f:f0:a6:98:f9:8f:2e:85:87:fb:3c:
                    6b:d7:6b:95:d5:70:7d:44:3f:17:d2:92:af:9c:82:
                    3b:47:76:bd:10:87:09:7b:ca:7e:b2:33:5a:cb:0b:
                    cf:e6:83:ac:a2:78:f6:e4:22:19:83:87:a9:fd:8a:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5B:38:EA:39:84:EE:67:BE:F7:1C:93:2D:F6:99:F7:FA:3F:7A:B6
            X509v3 Authority Key Identifier:
                keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2f:0d:b3:35:26:e4:9f:05:7c:86:a8:e0:03:a6:b9:82:2a:
         38:6d:71:12:f1:91:9d:19:a1:e4:c6:63:2b:a8:28:b4:48:c7:
         68:af:6c:29:9e:47:eb:00:47:ee:af:14:48:95:3c:7d:48:01:
         27:28:2b:c3:ab:60:23:e6:a8:f5:71:69:76:5c:0c:b4:55:23:
         0b:e3:bc:8e:f2:95:19:63:04:ca:55:22:a2:17:46:d8:8e:b5:
         0b:8b:1e:00:38:0e:a4:33:a6:3f:57:ff:fc:7a:49:3b:c6:69:
         5f:99:b7:1c:a9:00:52:f2:14:a0:e3:67:46:0c:31:eb:1e:e1:
         04:17:cf:91:a3:c9:9d:79:94:e7:ef:a6:4d:19:f3:05:44:98:
         94:e2:61:68:bd:57:09:9d:1f:27:79:b2:ee:0f:d7:49:ea:be:
         b4:7c:6a:f8:e5:82:cb:5d:e9:e0:ee:c6:31:05:1d:cb:54:87:
         b6:05:c4:35:cf:ec:3d:66:f3:bf:c2:b1:25:26:cc:ef:bf:c7:
         a9:a2:39:09:e1:06:37:01:9e:60:97:1e:20:b8:e5:ed:8c:df:
         c1:6c:df:ff:5b:2e:b2:73:fb:e9:25:74:5a:16:74:30:be:3c:
         80:98:e7:f2:14:1a:57:d5:9c:a7:03:dd:4e:27:dc:0d:f7:ca:
         31:af:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:00 2024 by rpki-client on console-fra.rpki-client.org