Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          X4Gto/IGYLhJY0eU/UTrUMEnewmr4IrLH1Qi7cNmzzg=
Subject key identifier:   16:0F:68:4E:2F:79:07:C0:6D:A9:49:60:C6:49:AC:4E:C9:F1:9B:D3
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       01901EFDB226A6D7CB7C521B39D087AA09BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          11D0
Signing time:             Sun 16 Jun 2024 03:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:00 +0000
Files and hashes:         1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: lWHlgRR+MzZwz95v8WPHb/89qqzN2zGPvERA6FxZSLM=)
                          2: Y89DXWPW7-kVwT02BTSBCKQImg8.roa (hash: bGiHH3aymSGbPp9ZbgkW4SNPH1VZPdzexMT6N50kL6w=)
                          3: xmGe7JJreGajFrLjnndYWuVBq3Y.roa (hash: QVkkGv0Hl8DhEZ9Bo/ovH4gawvUGgcYGy4IlWy3O+v8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:b2:26:a6:d7:cb:7c:52:1b:39:d0:87:aa:09:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: Jun 16 03:01:00 2024 GMT
            Not After : Jun 17 03:01:00 2024 GMT
        Subject: CN=160f684e2f7907c06da94960c649ac4ec9f19bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:73:a8:54:53:dc:a8:9c:8b:69:2d:85:b1:
                    36:f8:88:1d:a5:19:fe:20:9e:46:0d:46:4c:29:37:
                    8e:ac:5e:5d:b1:52:f3:c3:22:5e:c3:f7:44:53:71:
                    ee:7a:c6:9e:e7:38:ee:a3:b4:f2:a4:b7:db:41:72:
                    02:26:6c:97:95:e1:40:cf:2b:e1:39:7a:6b:d0:ea:
                    de:ab:19:bf:38:9e:47:28:b3:93:e5:41:86:11:e9:
                    6a:95:d4:40:51:07:43:8a:ba:de:7a:d8:44:e5:26:
                    f6:b2:65:d9:32:c2:b8:80:71:46:f5:db:0e:c5:b7:
                    b6:de:f8:b5:19:ef:85:0a:22:b2:ee:56:93:d6:4d:
                    63:c5:f6:1f:b3:4c:b8:9d:5c:3e:06:c3:56:8e:cb:
                    c3:8f:21:55:ac:77:8e:05:73:c4:91:14:0d:15:4a:
                    57:01:88:88:2b:fd:e0:62:9a:2f:0f:d2:d0:a2:7d:
                    c9:13:db:85:16:3b:89:e1:6b:b4:40:08:77:6a:3a:
                    84:42:3e:10:95:dd:4e:ca:81:6f:51:9c:d2:bb:e5:
                    db:87:de:ba:fd:c2:3c:ec:f9:a5:33:b2:b7:a0:44:
                    fe:c1:80:43:b4:67:b3:3e:1f:0c:a4:25:5a:c7:5b:
                    69:3b:44:ce:66:f8:45:56:68:63:a2:ed:46:2f:15:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:68:4E:2F:79:07:C0:6D:A9:49:60:C6:49:AC:4E:C9:F1:9B:D3
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:40:4f:fd:c7:78:85:89:94:01:e4:20:6b:85:89:11:2d:
         1b:e3:c9:69:2c:20:ab:53:ad:2c:34:06:5b:ba:cd:22:e2:7a:
         7f:d0:93:9f:84:c6:b2:bd:27:56:89:45:37:b0:0c:9c:6b:ee:
         fc:61:7b:7a:d4:88:76:02:82:3b:4b:fb:1d:a6:3d:70:cb:0f:
         bb:c6:b1:54:78:95:a7:e9:8f:23:24:09:02:a3:2d:c9:48:86:
         2e:0b:d7:c9:65:75:7c:49:13:9f:0e:c5:dd:ef:29:40:4f:29:
         ff:6a:c4:e5:3d:e0:78:b1:eb:91:d4:75:e4:a3:2e:e0:82:ed:
         57:6e:1c:e0:58:68:bf:ec:f5:4f:f7:c8:c5:8c:82:49:da:c8:
         44:31:63:40:e9:7f:ce:ec:d5:df:8e:ca:d9:05:62:d6:ef:5d:
         81:59:05:8f:f3:c8:e4:94:56:3a:25:0f:5c:28:ce:73:bb:08:
         7f:45:5f:70:8d:30:00:2a:ef:7a:87:d3:fa:19:7a:c9:13:c7:
         ac:78:40:fc:e2:2a:4f:42:6c:61:8b:6e:00:77:09:07:39:bf:
         0b:c7:67:8e:1b:b5:a6:35:ad:b8:21:01:46:38:f9:b2:e5:46:
         bb:53:c1:30:9f:7e:97:5b:63:4e:d5:d3:ce:f9:4e:7e:c7:50:
         ff:98:72:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/bImptfLfFIbOdCHqgm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx
YTM5MTUwHhcNMjQwNjE2MDMwMTAwWhcNMjQwNjE3MDMwMTAwWjAzMTEwLwYDVQQD
EygxNjBmNjg0ZTJmNzkwN2MwNmRhOTQ5NjBjNjQ5YWM0ZWM5ZjE5YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0RzqFRT3Kici2kthbE2+IgdpRn+
IJ5GDUZMKTeOrF5dsVLzwyJew/dEU3Huesae5zjuo7TypLfbQXICJmyXleFAzyvh
OXpr0Oreqxm/OJ5HKLOT5UGGEelqldRAUQdDirreethE5Sb2smXZMsK4gHFG9dsO
xbe23vi1Ge+FCiKy7laT1k1jxfYfs0y4nVw+BsNWjsvDjyFVrHeOBXPEkRQNFUpX
AYiIK/3gYpovD9LQon3JE9uFFjuJ4Wu0QAh3ajqEQj4Qld1OyoFvUZzSu+Xbh966
/cI87PmlM7K3oET+wYBDtGezPh8MpCVax1tpO0TOZvhFVmhjou1GLxWl2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYPaE4veQfAbalJYMZJrE7J8ZvTMB8GA1UdIwQY
MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt
ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1
LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI5AT/3H
eIWJlAHkIGuFiREtG+PJaSwgq1OtLDQGW7rNIuJ6f9CTn4TGsr0nVolFN7AMnGvu
/GF7etSIdgKCO0v7HaY9cMsPu8axVHiVp+mPIyQJAqMtyUiGLgvXyWV1fEkTnw7F
3e8pQE8p/2rE5T3geLHrkdR15KMu4ILtV24c4Fhov+z1T/fIxYyCSdrIRDFjQOl/
zuzV347K2QVi1u9dgVkFj/PI5JRWOiUPXCjOc7sIf0VfcI0wACrveofT+hl6yRPH
rHhA/OIqT0JsYYtuAHcJBzm/C8dnjhu1pjWtuCEBRjj5suVGu1PBMJ9+l1tjTtXT
zvlOfsdQ/5hypg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:41 2024 by rpki-client on console-ams.rpki-client.org