Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          FdOoJ7tbIiIUwNlUKJRkddt/wSAzsWtV3d46T0fxEWc=
Subject key identifier:   4B:4A:50:EB:A4:09:89:AE:99:36:E6:D4:27:F8:09:3F:9F:87:8D:5B
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       01901D0F6D79576DEF0824C83C6BA8882997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          090A
Signing time:             Sat 15 Jun 2024 18:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:08 +0000
Files and hashes:         1: ZLfZ3KLSTzAzvcn_p7cpBMFY28I.roa (hash: fmYs39TXwa3l+TLCw/cGvbw90YqvjsWFCke0W0GQtFg=)
                          2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: n+dqXczVlbQIoiaC/B0J2rcKStWdrrkhxInCcroEi3w=)
                          3: oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa (hash: FVWDDf09insCdZQ/CDGyPOkPc/wkhppWOkpIFaWU5IM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:6d:79:57:6d:ef:08:24:c8:3c:6b:a8:88:29:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: Jun 15 18:01:08 2024 GMT
            Not After : Jun 16 18:01:08 2024 GMT
        Subject: CN=4b4a50eba40989ae9936e6d427f8093f9f878d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:86:7e:42:af:b2:48:74:ed:41:27:c0:59:
                    3f:aa:5e:3a:81:e3:52:a4:cd:fd:db:f6:84:ad:5e:
                    80:12:29:a8:fa:fe:d8:34:0e:54:76:34:ce:60:9d:
                    a4:02:c8:88:d3:b5:59:4f:b8:5e:ad:ae:52:b4:f3:
                    3b:f7:39:04:77:91:65:ae:0c:1d:48:9b:66:3c:0f:
                    72:d5:f1:ae:fe:ca:08:86:7c:04:10:4c:45:29:94:
                    78:88:63:bc:fc:7b:a5:0e:56:4c:2b:5f:c0:8b:f8:
                    79:2f:ee:fb:ee:38:bb:43:de:1b:36:b9:2b:bd:17:
                    bf:ef:5e:6f:03:d2:63:33:92:c0:ba:e4:2e:f9:8f:
                    d4:e0:9b:27:65:e9:28:36:f3:5f:8c:b0:49:5e:26:
                    c2:d1:70:b2:66:97:54:b0:af:56:fd:4d:fe:44:b3:
                    44:f9:4d:9e:88:00:56:94:e1:d7:1a:f6:25:13:c3:
                    25:87:22:01:26:b8:2e:6c:7e:c3:95:a4:73:f3:0a:
                    2f:cf:f2:b6:40:be:e7:2c:35:0d:4d:90:33:78:3c:
                    49:2c:5c:7e:54:c8:69:36:f5:92:26:e3:ed:9f:f4:
                    eb:4d:2c:e0:a9:43:b6:37:c5:8d:92:0b:36:ec:23:
                    35:ad:69:9c:59:d1:c4:e8:7d:cd:07:cd:33:2f:f3:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:50:EB:A4:09:89:AE:99:36:E6:D4:27:F8:09:3F:9F:87:8D:5B
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:02:1e:0a:e7:79:81:f2:a9:d0:e1:77:f8:7a:c2:09:ff:
         8a:c4:a0:89:2d:d4:0a:47:c4:59:05:f6:07:c9:a7:11:1a:5e:
         03:4b:30:c7:49:0a:6e:c6:fa:d0:27:85:90:9b:02:be:f8:bb:
         20:5d:3b:a7:06:8e:82:12:3c:6b:f0:f5:4b:01:7c:35:c0:f5:
         74:e4:3d:1d:4e:0b:c6:cc:72:a9:5a:a3:46:b8:d8:3c:16:9f:
         55:ae:e4:f4:81:29:fa:0f:c6:6b:e9:a4:e7:4e:69:cd:a5:3a:
         db:d4:5b:fa:fc:f4:0c:cd:a2:26:69:c0:d2:99:b3:0d:c9:c3:
         db:11:c3:5c:b4:c7:11:90:b3:84:41:aa:53:02:21:32:63:a1:
         44:69:04:71:ea:36:57:fb:c8:57:ae:56:ca:f5:41:6e:32:5a:
         49:fd:ed:32:45:5a:f3:98:b4:6d:0d:80:75:5e:7d:30:13:5f:
         44:8a:dd:3f:32:61:be:f8:f3:43:50:99:d9:07:8e:d3:93:2f:
         9b:10:f4:1f:dc:35:84:44:44:ba:8c:6a:de:54:1d:7a:e3:28:
         30:7a:ce:6f:9a:81:80:4c:c8:fa:6d:b2:4d:dd:d0:82:05:4a:
         23:28:d0:7e:3c:57:08:91:d3:bb:62:f4:b0:25:c4:9f:7c:1e:
         f1:ad:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:29:24 2024 by rpki-client on console-fra.rpki-client.org