Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File:                     lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier:          /VY11YISKi4lKAuGNM/fldEG08EIT7AxB2mn489JC+s=
Subject key identifier:   0C:B1:FF:C1:F9:70:6D:93:38:F5:5F:39:34:37:82:E5:EB:B0:32:4D
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer:       /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial:       01903EC02C913FA2C87525687894A713E37A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number:          0A7B
Signing time:             Sat 22 Jun 2024 07:01:39 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:39 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:39 +0000
Files and hashes:         1: bCJffUiyVy7nw_kx6uiG7B8Kxck.roa (hash: 97X0P62yB3qNuVwqkJjzGe39aKJEAmqhvmlrGTq0qzA=)
                          2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: +zvrnVaYzMJV6VoIQr+kHLiYk0GcyLh3DPL/7E3+ehc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c0:2c:91:3f:a2:c8:75:25:68:78:94:a7:13:e3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
        Validity
            Not Before: Jun 22 07:01:39 2024 GMT
            Not After : Jun 23 07:01:39 2024 GMT
        Subject: CN=0cb1ffc1f9706d9338f55f39343782e5ebb0324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:d9:fa:9a:5a:5a:c0:e3:80:af:06:c3:15:
                    da:83:e1:72:c0:aa:b8:b5:9e:2d:80:8d:a2:67:73:
                    37:bc:ec:76:c5:23:12:f9:54:2c:51:ec:06:cd:60:
                    b0:dc:c9:3a:b3:cb:c8:0b:aa:80:ff:1e:42:23:94:
                    85:be:60:6b:d4:d0:0e:20:88:f7:5c:f6:94:02:8e:
                    c9:f6:e8:82:2e:93:c9:a7:af:d9:20:67:91:d6:31:
                    17:d9:b9:9c:af:79:dd:5a:8c:8e:63:4d:40:67:d3:
                    5e:67:c4:0a:7f:1a:ee:79:14:ea:91:e1:1c:8d:67:
                    ee:c4:ae:60:ed:a9:8b:2d:fd:b0:d2:71:be:e0:3e:
                    32:db:cd:04:b0:33:d8:e2:44:92:a3:0b:be:87:06:
                    ac:d5:2f:2c:40:43:8c:9f:ab:df:6d:9c:62:c9:12:
                    67:5c:a8:38:4a:01:3a:ef:2d:de:2e:c1:f8:c7:e1:
                    78:4f:95:c8:52:db:c2:86:dd:e7:bd:73:36:9c:f9:
                    f8:68:75:a8:ac:40:eb:e2:52:37:47:14:2b:f0:b2:
                    bd:49:f5:f0:23:db:c3:6a:79:63:65:e6:93:f9:93:
                    f8:27:42:94:b9:29:81:7d:63:a9:39:84:4c:c9:66:
                    af:aa:14:c4:e4:b6:69:d6:4c:94:6b:6f:bd:d9:1e:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B1:FF:C1:F9:70:6D:93:38:F5:5F:39:34:37:82:E5:EB:B0:32:4D
            X509v3 Authority Key Identifier:
                keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:40:c3:e2:21:a7:b7:38:47:54:7f:d4:e7:40:27:11:80:be:
         b6:d7:f4:99:06:b6:84:4d:85:08:22:c2:9b:48:0c:88:89:ee:
         e2:52:49:19:f7:79:65:0f:d2:19:66:ec:9f:5d:04:93:68:59:
         f8:bc:11:20:fb:4b:12:09:fa:ec:85:b3:b5:d5:3a:db:0e:4d:
         63:05:92:e8:1f:9f:4d:9c:76:fd:77:e3:56:4d:59:b6:ef:75:
         6e:44:d3:f7:db:d4:d6:85:78:c6:4d:dc:18:3e:a6:30:5e:ce:
         5f:50:69:d9:66:66:1d:d1:a6:2f:b2:be:6e:6a:5c:82:f4:42:
         10:c3:2a:ff:28:8f:f1:81:66:20:75:41:01:c9:60:df:c6:33:
         e9:ed:2b:ca:0c:bf:8d:4e:43:67:ec:38:a8:c3:1e:1a:f9:2e:
         96:0b:3e:4a:56:dc:fb:3e:b4:34:a1:8f:b8:7e:a6:df:53:c4:
         7f:f0:14:f7:e2:22:4d:c9:0c:c9:99:58:a0:c9:3c:eb:4e:62:
         66:5f:25:55:f5:8f:6a:94:6b:8b:58:d5:2a:a8:44:88:46:b6:
         ab:f0:30:43:b8:18:53:06:38:6e:e6:df:bc:d1:79:e5:a9:d2:
         4e:54:2a:fe:7f:90:ab:6c:fd:35:56:9b:57:8d:17:5f:1c:15:
         c0:38:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:32:39 2024 by rpki-client on console-fra.rpki-client.org