Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File:                     lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier:          pb7dwbUWXb5kL0tAkiYMAk8kEvMv3Po6UiF9PCOUX9o=
Subject key identifier:   4E:F9:E9:AA:14:AB:D6:46:76:D0:FF:9C:23:F5:7C:A4:9A:C1:C1:29
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer:       /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial:       01904867450EDB0F537DDAA93B251AF7A66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number:          11DA
Signing time:             Mon 24 Jun 2024 04:00:45 +0000
Manifest this update:     Mon 24 Jun 2024 04:00:45 +0000
Manifest next update:     Tue 25 Jun 2024 04:00:45 +0000
Files and hashes:         1: 0rh5B4XYLHgN4ie-Klb9PhKYJTQ.roa (hash: +SUQ68hMAN4Bmk83BlT/mha4XdtKuoyigFoY86j4XHE=)
                          2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: 4MO9cAGEOWDVDO9OgC7lZBQYsV5QqWQN2xg2cEhtmx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:45:0e:db:0f:53:7d:da:a9:3b:25:1a:f7:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
        Validity
            Not Before: Jun 24 04:00:45 2024 GMT
            Not After : Jun 25 04:00:45 2024 GMT
        Subject: CN=4ef9e9aa14abd64676d0ff9c23f57ca49ac1c129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:fe:d3:07:03:e1:2c:25:8e:e5:42:a1:b8:
                    3f:85:cd:35:90:b0:7b:b5:8f:fd:f0:68:61:7f:2b:
                    0c:ac:0a:fa:47:e7:e7:ee:67:22:56:47:56:29:e1:
                    9d:20:ae:6c:db:04:d1:a7:02:74:fc:db:b3:6d:97:
                    a6:b9:f7:cc:ae:bb:71:65:59:8a:51:93:c2:bb:65:
                    7c:ca:64:ee:67:1a:bc:bb:73:b3:11:97:6b:a3:98:
                    2f:c9:d7:a1:15:d7:e7:44:8f:e5:8c:82:d3:9b:b9:
                    ba:88:c7:4d:c1:41:44:57:95:d1:54:09:ab:ca:ce:
                    78:ac:db:94:9a:9c:45:2c:b2:30:e6:38:40:3e:4c:
                    45:63:85:c3:a8:22:e5:09:55:a6:57:c4:c3:4b:07:
                    21:1a:ad:ca:04:30:0f:07:ca:77:42:48:2e:21:51:
                    e4:3f:07:78:d1:5c:ed:cc:3d:0f:fa:4b:00:08:0c:
                    78:18:4b:55:4a:3d:f1:ea:44:ad:e2:ca:29:5c:1f:
                    2a:97:fe:c6:16:bc:ea:b7:e8:67:c1:45:62:ef:ed:
                    57:57:b2:47:b5:dd:c6:8f:2c:3a:13:c2:b5:bf:93:
                    4e:8a:04:6c:73:94:5a:c2:5e:96:c7:17:1d:46:f8:
                    d4:e7:ae:57:c4:1a:b7:1a:0a:0c:f1:eb:85:6e:15:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F9:E9:AA:14:AB:D6:46:76:D0:FF:9C:23:F5:7C:A4:9A:C1:C1:29
            X509v3 Authority Key Identifier:
                keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:24:6a:47:aa:36:80:3e:18:82:ab:3f:53:1d:4c:c8:df:6f:
         bc:5c:e8:e3:b2:6c:1c:54:dc:30:94:0f:d5:54:69:e3:02:04:
         28:45:2c:74:9e:3d:32:ac:f4:75:0c:6b:b7:a3:31:76:25:b5:
         98:19:11:db:34:4b:fb:46:c8:61:18:b9:64:71:0c:31:8c:84:
         c8:94:14:5b:46:7c:03:36:c2:bb:cf:3d:39:37:f2:5b:22:2f:
         ca:db:56:5e:c1:99:35:41:70:85:fa:72:84:96:f1:98:d5:92:
         d9:09:50:c9:5a:62:90:a6:e3:a0:e0:4c:5b:06:fb:94:9f:b9:
         22:00:f5:c0:0c:de:2b:a7:27:ab:0e:b8:42:bc:54:fd:f2:76:
         37:e8:ac:df:bb:d6:97:94:a9:07:95:c4:b4:f3:42:09:05:f8:
         63:b3:61:3a:67:eb:aa:33:06:6b:51:21:58:de:ab:5d:14:77:
         13:95:9a:dc:c6:22:a3:5d:02:00:d9:d4:1a:0a:35:c2:23:6b:
         e1:b6:d6:1c:9c:f1:60:97:d6:79:b4:49:85:86:59:54:5c:78:
         c9:11:30:dc:21:3b:53:27:d1:54:48:95:e4:ea:84:3a:82:f4:
         ff:d1:3f:48:a1:03:fa:79:50:7b:9d:3b:b0:a3:db:99:b7:81:
         52:97:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:20:31 2024 by rpki-client on console-fra.rpki-client.org