Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          WvbkJ+5+xM+gDbhkoYTBh1/AsHfL5HOeU5V0blVI86s=
Subject key identifier:   BA:F4:6C:1C:83:2A:71:AA:26:25:46:12:F1:84:C9:B4:0E:28:93:59
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       019366D785BCA3058753750C17C13CE3106A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          0ADE
Signing time:             Tue 26 Nov 2024 05:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 05:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 05:00:20 +0000
Files and hashes:         1: 9htos7myS69aPI8lGG6M5mVqGGI.roa (hash: 5Mp63cqKT+tolkPdvjJ4V1jgnXkIZMJDr9XFdSOl2Ko=)
                          2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: sUZVcXfILmtPbMQDEdWZTGGriT0JJjkc20k3JXJoGMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:d7:85:bc:a3:05:87:53:75:0c:17:c1:3c:e3:10:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Nov 26 05:00:20 2024 GMT
            Not After : Nov 27 05:00:20 2024 GMT
        Subject: CN=baf46c1c832a71aa26254612f184c9b40e289359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:1f:e6:b8:c6:d4:9c:da:01:05:65:c5:fa:
                    3a:99:e8:a2:c6:2c:e3:83:8a:76:e1:0f:e2:10:e5:
                    a8:f5:11:4e:ce:f3:e1:6f:bf:74:8e:f2:e2:ab:30:
                    62:14:2f:a3:37:d7:6b:4b:e8:29:37:42:aa:8b:41:
                    a3:c0:1f:60:9b:c9:9d:9a:84:d8:3b:1b:f9:39:cf:
                    ec:21:51:9c:39:12:30:5b:3b:c4:e0:9a:bf:10:c2:
                    e2:5a:e1:e2:6f:29:b6:3e:f0:da:8d:ed:10:52:18:
                    cd:8b:2b:36:bb:84:ca:c3:c8:6a:31:4f:dd:99:6d:
                    6a:61:40:7e:fc:99:8f:d8:fd:35:3e:ef:dc:c4:da:
                    d2:59:31:45:ca:d9:8b:0a:5c:a5:40:6c:d0:90:9a:
                    26:b3:70:04:37:48:fd:9d:6d:db:11:d6:e6:64:5e:
                    83:ea:75:93:7c:64:37:fd:ac:37:99:ad:1b:fd:14:
                    ba:2b:f1:89:08:6b:db:81:d5:3a:e6:74:7c:e3:39:
                    ae:e8:bb:b7:a7:55:ef:0a:81:9b:57:3c:9f:9b:de:
                    ae:01:ef:6f:e3:d7:b3:6b:a1:48:20:ad:5e:69:e8:
                    10:48:1e:9a:87:1f:ad:c5:d7:59:ba:41:ea:74:55:
                    c6:14:d7:2f:07:68:89:5e:75:d4:84:51:68:0e:b0:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:6C:1C:83:2A:71:AA:26:25:46:12:F1:84:C9:B4:0E:28:93:59
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:fc:75:da:56:5d:c8:69:f9:94:90:09:64:b6:bf:a9:e1:
         69:8b:6b:d5:db:1a:fd:81:d5:b5:00:f6:ad:b4:e0:d2:e2:65:
         33:73:b6:4d:b9:a1:ec:6e:4e:de:4a:65:70:4d:d8:46:98:43:
         db:36:b6:bc:2e:f3:9c:b4:01:2e:29:67:58:a4:28:ba:4a:93:
         80:b4:5d:32:66:e4:5f:dd:0f:ed:2c:b3:1e:8b:1f:e5:9c:d0:
         b9:31:95:03:61:f5:b0:89:d0:05:1c:d5:a0:5a:0a:7b:63:17:
         dc:8e:29:6c:75:e5:80:e0:8e:96:7d:06:69:31:bb:5d:59:b2:
         d6:d0:13:bb:b2:af:bc:3c:3f:2c:c7:42:7b:00:b4:8d:7d:78:
         f4:a0:55:1d:c5:1f:cf:63:ea:5b:8d:59:30:cc:78:0b:4c:f6:
         9e:ca:de:78:d3:4a:7e:66:7e:d2:6e:7f:5f:ee:81:8d:d1:be:
         bf:88:2a:5b:30:2a:7b:f1:ba:28:41:be:e9:cb:a2:f5:24:43:
         31:3d:38:84:21:bf:f7:a6:5f:0b:08:fd:db:54:f3:33:a0:78:
         29:92:e5:c9:e8:88:db:f1:7a:e6:46:c3:d4:b2:10:8c:29:cd:
         4c:4a:1f:49:e1:79:e3:71:be:1b:fd:aa:9f:4f:dc:72:31:68:
         fd:3e:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:08:46 2024 by rpki-client on console-ams.rpki-client.org