Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File:                     lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier:          k+v3+7Iz41pZmLzzM68xiqtF09Jb5RE7LBVn7p+sDro=
Subject key identifier:   AC:D8:9D:B8:BB:41:34:0C:DD:55:A5:0C:74:15:CA:CA:4B:A2:57:BE
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer:       /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial:       01901DED64EB7A43E314AE04C00C25B079FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:35 +0000
Files and hashes:         1: 0rh5B4XYLHgN4ie-Klb9PhKYJTQ.roa (hash: +SUQ68hMAN4Bmk83BlT/mha4XdtKuoyigFoY86j4XHE=)
                          2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: /7/O6DlJUdFXUmcTBWM2BSWxpeJMCUqlLFV8ZTTf+Kg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:64:eb:7a:43:e3:14:ae:04:c0:0c:25:b0:79:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
        Validity
            Not Before: Jun 15 22:03:35 2024 GMT
            Not After : Jun 16 22:03:35 2024 GMT
        Subject: CN=acd89db8bb41340cdd55a50c7415caca4ba257be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:f0:eb:51:04:9c:ac:d0:d8:3c:9d:5c:3e:
                    a7:13:bf:2b:2b:9c:9e:94:d3:11:c0:e1:e8:f4:af:
                    f9:27:43:af:39:6c:1a:97:19:db:63:9c:ce:d2:45:
                    4d:3c:4b:6c:6f:b7:94:cd:c4:94:d5:b3:bc:06:54:
                    7e:25:8f:2b:79:1c:09:25:c6:33:1a:13:01:68:cf:
                    d2:f8:6f:ba:dd:52:b2:52:b7:98:a2:f3:0f:e6:34:
                    fc:07:24:1e:6d:96:56:75:8b:01:dd:b1:0b:0c:5c:
                    51:78:4e:17:6b:c4:65:78:16:ff:8c:0e:73:9f:1b:
                    73:3c:0b:88:43:2d:5a:d5:16:96:0f:60:a5:f0:96:
                    ea:e9:b5:3b:d0:e3:89:49:cb:e2:34:95:12:e5:51:
                    a4:99:87:4e:6a:73:68:9a:85:45:b5:0d:b5:c4:b3:
                    27:8c:b5:30:ea:7e:a9:1f:08:f1:10:0e:d1:b2:e9:
                    c1:20:71:b1:13:ba:92:e8:e8:1a:28:5e:f9:cc:17:
                    bc:04:fe:a3:4e:4a:65:d4:9f:9f:fe:a6:cf:6b:27:
                    e8:96:46:cb:90:4e:37:f2:f8:67:e6:0d:15:a0:45:
                    21:bd:8c:e1:48:f8:e1:ff:47:61:c4:13:45:2f:67:
                    18:c4:70:4b:46:50:b9:8e:4a:4a:e0:39:e1:dc:48:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:9D:B8:BB:41:34:0C:DD:55:A5:0C:74:15:CA:CA:4B:A2:57:BE
            X509v3 Authority Key Identifier:
                keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:94:2b:b9:00:60:d9:3c:80:3b:23:70:55:61:d2:31:a2:
         92:a7:c0:a1:c3:df:52:93:50:42:2c:89:8d:06:3c:e7:78:57:
         2f:63:41:cb:8b:b2:ad:5c:3f:c2:da:74:2a:65:03:50:aa:dc:
         29:d8:6b:b0:4f:0f:42:8f:1b:1e:1c:5a:22:2c:d9:98:3c:50:
         33:6e:4b:2f:d1:1c:cd:10:15:45:d4:e6:3d:d4:dc:63:c8:8a:
         68:7e:fd:d3:2a:96:68:d0:85:f3:03:5e:88:33:85:b1:01:43:
         b9:a6:27:2c:3e:55:e8:90:e8:28:26:41:e4:04:44:af:69:ed:
         02:43:4a:ac:eb:7c:a9:06:7e:f0:65:44:27:9a:82:be:9f:78:
         36:67:7e:64:d3:c1:60:f8:2b:1d:73:d0:ac:3d:4f:71:1f:f7:
         52:ef:91:1f:37:9a:79:1f:7a:01:8d:30:53:44:05:d6:27:fd:
         dc:39:50:72:d1:68:ce:d6:1f:8d:5f:07:d4:3e:06:e0:d1:c9:
         54:21:30:1a:83:ae:b2:39:ab:d7:71:d2:b0:71:1e:0e:fc:31:
         67:04:ee:f0:cf:5e:98:2e:c9:81:13:e5:6a:41:a8:43:79:73:
         9e:36:ae:4e:5e:f1:07:67:7f:d9:37:7d:62:19:ce:7e:2f:46:
         35:8e:db:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7WTrekPjFK4EwAwlsHn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw
MTQ5ZWIwHhcNMjQwNjE1MjIwMzM1WhcNMjQwNjE2MjIwMzM1WjAzMTEwLwYDVQQD
EyhhY2Q4OWRiOGJiNDEzNDBjZGQ1NWE1MGM3NDE1Y2FjYTRiYTI1N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxrw61EEnKzQ2DydXD6nE78rK5ye
lNMRwOHo9K/5J0OvOWwalxnbY5zO0kVNPEtsb7eUzcSU1bO8BlR+JY8reRwJJcYz
GhMBaM/S+G+63VKyUreYovMP5jT8ByQebZZWdYsB3bELDFxReE4Xa8RleBb/jA5z
nxtzPAuIQy1a1RaWD2Cl8Jbq6bU70OOJScviNJUS5VGkmYdOanNomoVFtQ21xLMn
jLUw6n6pHwjxEA7RsunBIHGxE7qS6OgaKF75zBe8BP6jTkpl1J+f/qbPayfolkbL
kE438vhn5g0VoEUhvYzhSPjh/0dhxBNFL2cYxHBLRlC5jkpK4Dnh3EhHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzYnbi7QTQM3VWlDHQVyspLole+MB8GA1UdIwQY
MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt
MTE2MWVkYjliZjBlLzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl
LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD2UK7kA
YNk8gDsjcFVh0jGikqfAocPfUpNQQiyJjQY853hXL2NBy4uyrVw/wtp0KmUDUKrc
KdhrsE8PQo8bHhxaIizZmDxQM25LL9EczRAVRdTmPdTcY8iKaH790yqWaNCF8wNe
iDOFsQFDuaYnLD5V6JDoKCZB5AREr2ntAkNKrOt8qQZ+8GVEJ5qCvp94Nmd+ZNPB
YPgrHXPQrD1PcR/3Uu+RHzeaeR96AY0wU0QF1if93DlQctFoztYfjV8H1D4G4NHJ
VCEwGoOusjmr13HSsHEeDvwxZwTu8M9emC7JgRPlakGoQ3lznjauTl7xB2d/2Td9
YhnOfi9GNY7bDw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:13 2024 by rpki-client on console-fra.rpki-client.org