Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File:                     lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier:          fCNGwNHc4+v7y5JhKMAselhjRD+Wi7fd61PbE1vRSlk=
Subject key identifier:   C3:37:46:98:11:DE:11:A5:27:BE:13:0C:95:A0:53:4C:E2:F5:56:3F
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer:       /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial:       019369DAB995E72ED8259F4EE714CD6DCCBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:42 +0000
Files and hashes:         1: eXRmaTvm7rpRBESgfVl8-NEw1Ek.roa (hash: 4KpxFL4+jWNDh1iP3HQE0PJL7HKcpzesPpW7++/kRJg=)
                          2: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: 9X+V/VfmPM+dGvfYvcQuSKdioqho71G6ehjIVJi2YKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b9:95:e7:2e:d8:25:9f:4e:e7:14:cd:6d:cc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
        Validity
            Not Before: Nov 26 19:02:42 2024 GMT
            Not After : Nov 27 19:02:42 2024 GMT
        Subject: CN=c337469811de11a527be130c95a0534ce2f5563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:5a:96:9c:f0:78:dc:8c:78:de:21:13:34:
                    b3:23:34:4a:9e:94:64:d0:bb:a7:bf:ef:15:25:04:
                    fa:ad:fc:8a:e1:1d:ad:46:13:d4:d9:52:9e:e9:95:
                    4e:19:90:5f:87:2e:b2:ee:04:fd:1b:87:a9:d0:bf:
                    ae:92:89:7a:f6:eb:ee:29:9f:53:95:54:b9:d2:05:
                    df:29:b8:5d:f2:60:e5:5b:70:41:e9:81:44:77:6d:
                    4b:0d:cf:2a:05:97:43:26:53:52:02:1d:04:95:27:
                    f6:01:78:67:4d:0c:e0:68:c7:be:a3:3f:92:c9:93:
                    15:e1:d1:ab:ba:db:c3:b5:e6:90:27:9f:99:8d:9f:
                    81:65:f9:8e:83:06:05:58:6f:85:e6:21:8c:76:77:
                    a7:9d:30:38:44:ba:65:51:58:17:3d:8f:42:d0:70:
                    3e:04:16:24:ae:18:7c:30:f9:23:f7:64:92:e9:66:
                    28:c0:c8:79:fb:a1:f6:55:d3:4a:00:1b:b6:7b:8d:
                    59:bf:86:31:8b:12:d8:11:ee:31:c1:9f:36:35:16:
                    7a:fc:f1:e7:7c:fb:75:de:64:96:e3:53:64:72:b4:
                    25:82:9c:61:b0:3c:72:32:86:93:52:95:e6:ef:c5:
                    86:a3:17:2c:aa:79:4a:e2:83:b8:18:0e:eb:36:59:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:46:98:11:DE:11:A5:27:BE:13:0C:95:A0:53:4C:E2:F5:56:3F
            X509v3 Authority Key Identifier:
                keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:83:11:38:8b:84:bc:56:e0:81:81:ed:52:0f:be:a9:5c:
         0b:aa:20:7e:55:35:f6:98:4b:fd:f1:c2:44:ff:b5:08:5d:c4:
         a0:80:ea:6d:26:a9:e3:45:9f:22:0e:c5:f0:4e:ee:79:63:3e:
         e4:16:0d:b9:78:6d:7e:45:55:23:9e:fc:eb:ff:55:88:a1:9e:
         00:27:6a:44:96:83:2e:c0:da:12:f6:cf:7d:df:c1:e6:9d:76:
         90:ed:9b:88:c8:10:0e:75:74:0d:3b:f2:05:e9:cd:1e:52:07:
         3c:6b:0e:fe:1c:02:fa:12:95:b8:00:f3:b1:0f:22:ad:22:be:
         ad:bf:fa:35:4b:1c:4c:19:ad:45:7a:8b:77:4d:22:07:25:da:
         17:31:2e:1c:df:e4:64:b2:a9:7f:37:6d:fe:df:c1:84:a8:49:
         b7:9e:cc:54:50:e5:f6:e3:3c:cf:e5:cf:f1:e5:2d:da:af:b7:
         c5:04:a3:26:29:c7:2f:94:d3:c9:28:dd:32:e2:2d:d3:86:b9:
         58:80:9e:4d:67:e9:a2:ef:16:0e:7c:6e:49:0d:6f:72:d0:bd:
         3c:82:7f:b6:52:fb:d0:06:83:7a:92:cf:86:42:ef:02:59:39:
         c8:45:66:e7:42:95:92:13:58:fe:3d:db:1f:f6:bc:48:6a:ed:
         59:68:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:59 2024 by rpki-client on console-ams.rpki-client.org