Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File:                     lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier:          CeKfIcJhgs04yrrFeUL5JJOyXLb36OdNB5RepLCmuC8=
Subject key identifier:   FE:12:20:EA:C0:63:52:7F:0F:4F:66:EF:59:24:FB:2E:67:52:D9:C5
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer:       /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial:       01901D468119723AC09D91C1A8842D4B540C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number:          0C50
Signing time:             Sat 15 Jun 2024 19:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:17 +0000
Files and hashes:         1: Y4tSRVyScqX9DQYxjb_3vAqB2eI.roa (hash: Bxm4VqLQY2X8NZaDed7Tq7KMW2LjfQP0AFsk0Fn62J0=)
                          2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 3KrlXJOhUeIqfwc1HbI0HoR2YgpNBOxp01KGyZDcUk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:81:19:72:3a:c0:9d:91:c1:a8:84:2d:4b:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
        Validity
            Not Before: Jun 15 19:01:17 2024 GMT
            Not After : Jun 16 19:01:17 2024 GMT
        Subject: CN=fe1220eac063527f0f4f66ef5924fb2e6752d9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:7b:f2:19:37:79:bc:6d:58:14:bb:81:97:
                    2c:06:88:1d:7f:28:5a:27:c9:78:07:80:77:8c:64:
                    6d:29:2b:62:44:1a:a9:09:1e:72:95:53:59:52:da:
                    12:bf:47:58:27:eb:5e:87:57:1d:53:83:b4:f3:76:
                    ea:f4:3d:86:68:d0:6e:4a:14:85:9d:3e:93:f6:b9:
                    3b:18:0f:55:b2:e1:5a:05:6e:a5:19:e7:9a:b0:b8:
                    37:a2:2d:07:f6:8a:df:04:7b:6c:38:da:34:d7:5e:
                    44:d5:d0:cd:63:68:f9:73:fa:b0:c2:c0:e9:b7:8e:
                    ee:a2:dd:4e:4e:81:25:d5:16:d6:8c:5a:22:83:1b:
                    78:05:00:da:ad:d7:36:20:5f:a4:4a:bf:ea:b3:a5:
                    3a:cd:f7:bd:92:4c:ac:09:b9:47:74:c8:bc:f7:44:
                    9f:ef:7f:38:a3:b2:df:ad:da:4c:e4:08:f3:6e:96:
                    eb:d9:00:c0:2b:d8:9b:d4:56:79:7f:78:98:4c:34:
                    1c:58:12:98:88:a5:3a:88:9b:f2:fd:54:b9:2f:53:
                    e9:be:48:46:0c:4e:57:fc:67:9e:cd:79:b4:f0:97:
                    72:1c:97:2f:a5:4a:f4:c9:82:58:0e:d6:9f:c5:f1:
                    60:b8:59:47:ae:dc:40:e4:d5:f6:ea:f9:df:a1:60:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:12:20:EA:C0:63:52:7F:0F:4F:66:EF:59:24:FB:2E:67:52:D9:C5
            X509v3 Authority Key Identifier:
                keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:51:07:18:6a:d5:f4:29:00:5b:ac:7a:3b:5c:5a:97:b0:
         3d:9a:cc:44:90:45:58:fe:14:f9:3a:66:d7:68:a8:09:dc:98:
         aa:a7:9a:d0:5b:f5:0c:99:41:19:f1:48:5d:ba:9c:b2:05:55:
         e6:f1:14:7b:ac:f0:e4:dd:97:6e:b3:b2:a9:e8:e9:a7:06:63:
         11:6e:3e:78:ee:b6:2b:af:2c:36:d9:f6:76:41:09:4a:88:c3:
         80:b6:e9:50:1e:83:9f:6f:09:46:22:21:6d:ca:b2:fb:10:4e:
         3c:64:c0:f5:81:25:d3:53:8e:58:3b:4a:b8:68:06:6d:3e:4d:
         09:6e:dc:48:94:8e:5a:65:03:9a:4e:9b:51:f1:28:97:31:02:
         b6:17:8e:e3:37:f5:f5:88:e0:9a:a2:5e:b3:18:f5:1e:7c:78:
         fc:2a:f8:e1:2c:a0:cf:2f:74:45:0e:fd:b7:af:60:d9:98:ce:
         c4:a2:ae:09:d5:cd:a4:1e:a5:71:b6:3b:ab:66:f2:2c:01:3f:
         89:40:ec:d4:b6:25:d2:8a:6e:23:59:e1:17:bd:32:ab:c4:8c:
         02:b5:1c:fd:90:dc:fc:b9:9f:1b:91:54:87:d2:69:03:39:69:
         7a:d3:e6:98:54:ed:47:b1:22:5f:bf:c9:01:74:95:69:a9:ab:
         78:26:af:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRoEZcjrAnZHBqIQtS1QMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjhhY2ZhMTdhZjkzYmVkYmVmYzZmZWI0Njg4Zjk4NjA0
YjhhYWUwHhcNMjQwNjE1MTkwMTE3WhcNMjQwNjE2MTkwMTE3WjAzMTEwLwYDVQQD
EyhmZTEyMjBlYWMwNjM1MjdmMGY0ZjY2ZWY1OTI0ZmIyZTY3NTJkOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlh78hk3ebxtWBS7gZcsBogdfyha
J8l4B4B3jGRtKStiRBqpCR5ylVNZUtoSv0dYJ+teh1cdU4O083bq9D2GaNBuShSF
nT6T9rk7GA9VsuFaBW6lGeeasLg3oi0H9orfBHtsONo0115E1dDNY2j5c/qwwsDp
t47uot1OToEl1RbWjFoigxt4BQDardc2IF+kSr/qs6U6zfe9kkysCblHdMi890Sf
7384o7LfrdpM5Ajzbpbr2QDAK9ib1FZ5f3iYTDQcWBKYiKU6iJvy/VS5L1PpvkhG
DE5X/GeezXm08JdyHJcvpUr0yYJYDtafxfFguFlHrtxA5NX26vnfoWBO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4SIOrAY1J/D09m71kk+y5nUtnFMB8GA1UdIwQY
MBaAFJa4rPoXr5O+2+/G/rRoj5hgS4quMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUt
YmRkZmYxOTdjMjlkLzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUtYmRkZmYxOTdjMjlk
LzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhxRBxhq
1fQpAFusejtcWpewPZrMRJBFWP4U+Tpm12ioCdyYqqea0Fv1DJlBGfFIXbqcsgVV
5vEUe6zw5N2XbrOyqejppwZjEW4+eO62K68sNtn2dkEJSojDgLbpUB6Dn28JRiIh
bcqy+xBOPGTA9YEl01OOWDtKuGgGbT5NCW7cSJSOWmUDmk6bUfEolzECtheO4zf1
9YjgmqJesxj1Hnx4/Cr44Sygzy90RQ79t69g2ZjOxKKuCdXNpB6lcbY7q2byLAE/
iUDs1LYl0opuI1nhF70yq8SMArUc/ZDc/LmfG5FUh9JpAzlpetPmmFTtR7EiX7/J
AXSVaamreCavWA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:44 2024 by rpki-client on console-fra.rpki-client.org