Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File:                     lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier:          iaXeuJ7qhxsobYeYl2WG6qkRALdSZk7ci9oMmcN0rcA=
Subject key identifier:   9F:CC:6D:21:60:86:9B:90:8B:8D:A4:B6:6A:BE:40:D7:15:AD:FE:2D
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer:       /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial:       0193580927F21311CB5B5C3778244B4EC30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number:          1213
Signing time:             Sat 23 Nov 2024 08:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:15 +0000
Files and hashes:         1: AkSrgU3OO_0h9TAnjsqd5ePH_JY.roa (hash: LooCi5lgnHq+R1iCMaclTiB6TO/aBFG9vtKzVaaWonQ=)
                          2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: tHV+qgTPGNNiK6e0RxKoYNwYNogSuN+O2VW+sSK0biI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:27:f2:13:11:cb:5b:5c:37:78:24:4b:4e:c3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
        Validity
            Not Before: Nov 23 08:00:15 2024 GMT
            Not After : Nov 24 08:00:15 2024 GMT
        Subject: CN=9fcc6d2160869b908b8da4b66abe40d715adfe2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:cf:54:88:ac:d3:1a:63:17:0b:ec:f2:57:
                    1c:43:57:48:16:df:96:06:dd:2b:b4:8b:8e:e4:87:
                    ea:2a:0d:9a:1a:79:cc:d9:78:8d:f1:eb:1b:47:d0:
                    10:d2:b6:52:5c:ff:3a:8f:82:10:bb:89:4f:77:b8:
                    6d:fc:a9:ff:0a:c7:27:71:25:ff:01:92:d0:3f:c0:
                    c7:16:71:ee:66:58:74:59:4f:32:1a:47:7d:96:a0:
                    76:fc:9a:d5:90:0d:5c:16:11:23:2e:6e:9e:cf:83:
                    24:3d:bd:aa:d6:62:c9:1d:6a:63:a8:2c:eb:d2:26:
                    81:18:ee:bc:ec:19:13:90:4f:b3:2a:a5:dc:75:d3:
                    2b:65:f8:d8:1f:1b:1a:b8:1a:a3:b8:61:f1:a5:70:
                    fd:ed:03:2a:36:74:25:69:36:e3:fd:33:6f:a3:6d:
                    d6:c4:1e:9f:97:52:f4:82:7b:f2:4d:f2:95:0f:6e:
                    95:33:ab:b0:bd:c1:4f:b5:82:b5:48:ac:cd:1a:77:
                    2e:d6:0a:e2:b5:9a:0a:06:45:63:4b:92:38:83:85:
                    3d:f6:9d:9e:7b:c9:6e:d3:ae:d7:cf:91:87:69:28:
                    40:9f:6f:9c:37:c4:d1:ce:be:fc:50:3a:86:fe:83:
                    22:99:6d:ab:34:25:a4:6f:18:97:38:09:5d:bd:3e:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CC:6D:21:60:86:9B:90:8B:8D:A4:B6:6A:BE:40:D7:15:AD:FE:2D
            X509v3 Authority Key Identifier:
                keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:1a:47:38:98:16:fb:5a:5e:c0:f1:90:96:7b:20:ae:95:
         53:f9:b1:77:26:aa:d8:7b:4e:60:66:11:19:fb:e6:08:48:cf:
         b7:8b:30:2d:5c:13:70:3f:5b:51:9e:e7:f1:b2:db:07:3f:59:
         ac:07:b3:92:ee:0b:27:3e:79:8a:4b:88:8c:1b:ca:cc:16:6b:
         fe:f7:1b:0e:0c:b7:70:02:8b:e6:7b:14:97:da:79:0e:8b:3d:
         80:21:25:b5:69:72:13:f8:01:d1:5d:21:da:21:f8:d5:0c:31:
         4d:42:ef:1c:d3:09:e7:9c:18:0e:82:46:7e:4c:c5:38:1a:5d:
         c7:fa:2d:43:e1:77:a9:a9:81:19:0a:2b:43:19:69:bd:6d:3e:
         5f:40:f2:66:84:6b:a1:24:82:9c:a1:41:f0:62:9f:f3:8c:6d:
         8f:23:a3:bc:22:b3:73:0c:e6:07:d3:f2:74:c7:b3:a0:14:34:
         45:2f:86:e4:b0:d6:8b:d3:e9:13:3f:53:35:ba:a8:6a:72:82:
         c0:ff:f3:50:95:55:84:6f:c7:8a:c4:fd:55:25:08:42:6e:38:
         97:60:59:35:e2:e7:f6:0d:c8:67:99:3b:98:c2:34:91:8d:5e:
         ea:78:aa:30:57:db:bd:90:3e:84:12:07:a5:71:ca:85:a8:ab:
         29:35:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:01 2024 by rpki-client on console-ams.rpki-client.org