Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          Tu+hOzs39iVCWCN4nkvMtcXGFAY2UzlIYbNJMjL3Trw=
Subject key identifier:   38:A8:45:08:C9:08:EB:32:F7:68:E5:90:1D:6B:D7:E9:51:94:77:C9
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       0190459D73766E6ACCAE76301EB780F851A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          0DB1
Signing time:             Sun 23 Jun 2024 15:01:04 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:04 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:04 +0000
Files and hashes:         1: 2DGb-LfAQjW4zjMm0NoD_pIuYDw.roa (hash: arG1yuc5/yJbYZRGMgFBlOX6isHl0sWiM4CVLc7paqo=)
                          2: 4oOEQee0fkbDVSgoMXZytyZ9te4.roa (hash: SQgl4G/bnyq9yZRiAgz9GFLvXzeOwXG/jLiFaraXAsc=)
                          3: K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa (hash: NDcB2Lj3lWEFFqr6Z5UtPwFp4vw9ju262VtOj5RDhV0=)
                          4: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: Rc3QnJ59AC+UzStgPEYpiVKNlKmofq3/OFKqtmwFzxo=)
                          5: P5b7WIOS_U23GVLxRawtEDBQuyM.roa (hash: cieE28Mq8K8v3rkk2S3thQDhtbCKezWlDR2LtQ0hgSI=)
                          6: VSbJiMeiiakcbDnL0StklOCMjoI.roa (hash: kooXlKOn2qNn4+OwqmeAG5fg9tWoJ1wR0FlDJDfFd+w=)
                          7: YESo74Sgw-DGkGd4HOe05SnE6Xw.roa (hash: NG8HzYChgxie2hkFXOAuQnkOksnpvfEsfPQCBU72mcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:73:76:6e:6a:cc:ae:76:30:1e:b7:80:f8:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: Jun 23 15:01:04 2024 GMT
            Not After : Jun 24 15:01:04 2024 GMT
        Subject: CN=38a84508c908eb32f768e5901d6bd7e9519477c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:12:a5:1b:81:5a:77:73:3d:86:dd:18:19:
                    cb:35:3d:fe:13:91:b9:ef:f6:ab:02:a1:b8:86:ee:
                    fe:13:0f:00:76:3b:04:10:d0:db:9e:cf:70:6d:c3:
                    da:d8:ce:01:e5:14:93:3c:3b:6f:80:82:0c:44:c9:
                    cf:37:52:d8:25:c1:05:bb:43:11:66:9b:45:52:96:
                    1b:f4:a0:d2:dc:0a:d7:c3:9f:c7:27:e2:d5:f3:67:
                    13:7b:38:76:16:e2:c6:6c:9f:aa:72:87:eb:99:7c:
                    31:4f:7f:52:72:74:76:c1:12:8d:84:79:60:56:e6:
                    0f:ae:3f:62:06:37:49:55:0c:b3:d5:ee:72:87:11:
                    65:4c:28:0b:08:ef:4b:4a:3b:d8:5b:26:a8:9c:42:
                    22:d1:6a:39:8e:30:cb:9b:0c:ee:b9:03:10:64:03:
                    6e:85:b8:05:e5:63:b1:fe:e6:00:4f:db:fe:ff:83:
                    22:7c:d5:28:e9:e6:1f:14:6f:d3:4b:3c:49:f5:07:
                    ca:ed:74:4c:f8:7c:3d:eb:9e:0c:2f:84:70:4c:2c:
                    53:c1:ff:3c:7e:4a:0c:87:f5:9c:60:af:e1:91:57:
                    5f:f5:b0:06:63:dd:8e:58:6b:14:ad:9f:b5:16:3f:
                    7a:4d:fc:ba:a0:3a:95:2f:2e:2a:e0:06:42:ba:e6:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:45:08:C9:08:EB:32:F7:68:E5:90:1D:6B:D7:E9:51:94:77:C9
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ab:25:3f:cc:b7:58:0d:a3:0f:0a:54:a0:00:a3:e2:e4:27:
         8a:e5:de:18:b2:29:02:5d:f9:69:09:e5:20:ec:aa:7c:6a:82:
         14:39:1d:f2:2c:59:1c:2d:b2:65:66:92:ca:b6:32:31:77:76:
         b8:1c:22:d0:25:c1:ca:63:c9:a1:73:a2:1d:09:12:61:3c:56:
         3b:ca:2f:3f:35:71:fb:3a:ce:87:93:e5:dd:8e:b5:00:81:4c:
         9f:8a:06:d9:ec:9d:f2:1b:77:2b:15:6c:bf:db:65:09:60:0c:
         85:ca:4a:98:99:11:84:af:06:09:15:5f:21:9a:b6:44:87:4b:
         ef:fb:4d:31:99:be:59:dd:48:c6:30:3c:f9:04:e1:fb:af:6f:
         a7:51:ef:0d:34:46:4f:36:dc:96:be:99:bb:04:77:a5:b4:a7:
         53:d5:e6:90:e3:5a:53:e8:0b:fb:81:38:0e:e9:d3:f3:5f:da:
         78:2b:7d:6f:e8:0f:7d:49:af:ee:04:e7:73:1f:aa:37:be:55:
         6d:cf:e4:f2:f1:0d:21:22:ab:1e:c0:66:ef:f0:89:69:5f:24:
         95:4b:9e:95:c5:d4:36:14:c9:cd:1b:b2:e8:7f:f9:c7:8a:c3:
         71:38:fd:72:5d:4d:bf:a3:09:60:20:cf:76:48:9f:b8:68:46:
         2d:23:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:19 2024 by rpki-client on console-fra.rpki-client.org