Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File:                     lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier:          i/yfGRzHHvqGyTxkjul/rbBrmqn8hR29DSPosGuj4ps=
Subject key identifier:   3A:52:96:E2:6F:74:FE:76:56:66:8A:8D:3D:19:19:28:BA:3B:77:24
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer:       /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial:       01901DEC3659C221A6809ACA51E34E3D5550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number:          0632
Signing time:             Sat 15 Jun 2024 22:02:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:17 +0000
Files and hashes:         1: 8pO6zzRjN33BYTvkOrafzKUq8pY.roa (hash: 6NGQ4fCvzKUtXxskjfipbe5X2LquAe4vcq5nCcCj4dA=)
                          2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: KkoA1O+0VtRoKiCr8BWZqGVR7yXSPRNMqA7rvDqg4Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:36:59:c2:21:a6:80:9a:ca:51:e3:4e:3d:55:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
        Validity
            Not Before: Jun 15 22:02:17 2024 GMT
            Not After : Jun 16 22:02:17 2024 GMT
        Subject: CN=3a5296e26f74fe7656668a8d3d191928ba3b7724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:27:e7:c2:7e:8c:3f:e5:0e:c0:d7:e7:fb:
                    11:c6:3c:e3:32:03:5e:b9:48:ef:78:4f:be:96:0a:
                    95:f2:98:43:87:33:47:e5:c6:44:c8:2a:1f:53:13:
                    5d:08:97:4b:64:79:4d:94:0b:62:9e:33:b1:8e:3c:
                    87:6f:df:23:b2:dd:3a:a1:61:c7:d4:ae:00:41:e6:
                    ed:62:10:a2:18:e8:e7:e7:b1:f2:00:4f:e5:72:93:
                    58:e7:46:76:fe:a8:d0:fc:dd:67:09:a4:2c:89:57:
                    26:df:f3:c5:bc:f2:cb:bf:f6:ea:29:ac:29:2e:99:
                    ac:2c:15:d1:12:9e:86:8e:9a:5d:55:5f:ea:ed:23:
                    eb:cd:41:88:98:88:19:95:82:9f:ee:0c:13:f8:95:
                    a2:63:af:3d:18:b1:ab:08:b9:14:1c:9a:c2:36:ad:
                    5c:d0:06:b7:b0:cf:a1:67:4c:10:85:71:fe:1d:c9:
                    c9:53:93:d0:39:f4:4e:65:6e:ee:e0:37:75:b7:91:
                    e1:36:4c:b0:9f:a6:08:22:74:cf:03:00:ba:47:a7:
                    9c:82:99:25:e8:54:43:7c:c3:3f:f6:f5:0c:77:29:
                    78:10:74:db:f7:92:c5:7c:89:36:1b:ab:d7:46:49:
                    7d:b9:5e:1d:3e:0a:3b:4b:fc:45:6c:76:f6:08:1f:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:96:E2:6F:74:FE:76:56:66:8A:8D:3D:19:19:28:BA:3B:77:24
            X509v3 Authority Key Identifier:
                keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:4b:f5:09:78:df:55:b5:9b:a0:bf:8d:39:a1:5e:e3:31:
         06:f2:68:db:94:75:f4:8e:38:6c:0b:22:d0:e8:d7:74:b0:65:
         5b:e8:ae:b3:a9:79:e8:0c:b0:1a:d8:68:80:03:f6:c2:18:80:
         20:e0:2c:9e:bc:42:ff:5a:f8:d4:b9:36:1f:a7:91:ff:a5:60:
         c0:b0:9e:55:ad:62:32:1a:91:ce:c6:4a:5e:46:ed:0c:cc:81:
         94:32:16:2d:85:cd:8c:c3:ef:8a:65:22:78:7a:99:65:c6:da:
         9c:af:2b:0a:6f:10:58:78:22:84:7e:79:78:22:99:f5:cd:ca:
         26:f1:89:df:b0:38:b8:16:c1:a3:91:56:35:0e:b3:ca:8a:57:
         58:6e:c8:58:06:69:34:b3:49:9f:a4:d8:89:0d:e5:38:59:31:
         45:c9:30:7c:98:f6:0f:04:0f:f2:ca:75:0f:c4:cb:38:6b:5d:
         d8:fa:d2:49:29:2e:f3:e0:77:02:b8:9d:ec:cc:cf:e5:8c:87:
         63:93:31:81:79:b8:7a:62:39:00:40:7c:45:15:d1:d8:ae:38:
         08:a3:2e:26:e6:c2:a5:6f:c0:9b:0f:20:74:06:89:24:1c:ae:
         df:28:92:5e:bb:d6:b6:ef:17:82:18:3d:ed:63:e3:0e:2f:76:
         35:69:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:25 2024 by rpki-client on console-fra.rpki-client.org