Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File:                     LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier:          /C1X4aVvqRMKqiLB+FiClhrGtmSEoM+TiMkoifo+bNE=
Subject key identifier:   46:E4:A5:81:1D:1F:CD:36:36:E9:31:38:AE:1A:83:53:AC:9A:D3:5C
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer:       /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial:       01935764752661A7C0E70AA9BB8116608D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 05:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:21 +0000
Files and hashes:         1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: zpq9G/ZsxunOe+Bk0Qkyd4axIczLqIRxMOB87Rnp+yE=)
                          2: UHdZ_BWImG4C-LyrCdpbBv3qFXc.roa (hash: Fp5gE9ini9ohmtOOSoiv1sAvwlKmXLR7OjVZ0JVySBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:75:26:61:a7:c0:e7:0a:a9:bb:81:16:60:8d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
        Validity
            Not Before: Nov 23 05:00:21 2024 GMT
            Not After : Nov 24 05:00:21 2024 GMT
        Subject: CN=46e4a5811d1fcd3636e93138ae1a8353ac9ad35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:e0:21:c3:ba:fd:d3:2c:5c:69:b4:6f:a4:
                    20:af:ea:c0:72:58:a6:d4:ae:3e:9d:21:98:ad:c4:
                    20:0e:1a:eb:88:54:54:d7:ff:d0:06:3e:3c:94:9c:
                    00:c2:ae:0f:68:8a:61:05:10:df:3a:53:e8:67:fc:
                    05:38:75:da:0d:dc:5e:f2:b2:4b:05:36:86:64:f1:
                    c6:2d:15:ff:cb:06:95:a6:af:3a:ec:a3:85:29:32:
                    6a:ff:c0:cc:84:54:c0:67:90:ea:9f:39:9c:3c:14:
                    e5:10:83:0c:42:fe:e8:48:bf:44:34:8e:60:b4:15:
                    46:f4:b7:99:28:c9:e8:53:ea:56:2a:56:ee:c1:5c:
                    f1:a3:5d:ba:9c:96:6f:10:f6:8f:a9:92:d4:d7:a2:
                    b8:fa:71:a5:de:37:9f:1b:56:71:1f:6c:a6:79:96:
                    8a:0e:0d:71:cf:97:5c:a8:d3:9d:98:b8:f7:f3:38:
                    82:fe:c9:cd:ae:f8:fb:09:3b:53:be:66:e7:a3:c5:
                    fa:75:23:86:b9:7c:d5:b6:97:c2:42:e7:26:25:63:
                    68:e3:96:38:b5:70:d5:f9:45:40:86:56:2c:de:e7:
                    b9:de:40:8f:c4:d9:b4:6f:bd:6f:f3:a3:9b:1a:0b:
                    8a:c7:4d:5e:36:ef:75:ba:6e:32:29:1a:6c:b7:94:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:A5:81:1D:1F:CD:36:36:E9:31:38:AE:1A:83:53:AC:9A:D3:5C
            X509v3 Authority Key Identifier:
                keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:99:a0:e3:6e:6c:21:aa:21:a7:57:42:e6:8f:17:6f:4a:
         ba:fc:67:b0:cc:dd:a1:db:80:f4:0f:d9:40:23:58:cc:f7:5f:
         b0:46:b0:56:e0:1e:36:ef:8c:e6:8f:e2:49:98:19:b8:7a:5e:
         c4:9e:2f:5d:01:3e:b9:e7:d5:1a:97:e2:24:da:31:a9:89:85:
         df:cd:d1:25:92:02:79:b7:b9:5b:3c:3c:3a:ec:bd:f7:25:41:
         aa:57:be:54:49:5a:1f:f4:59:4b:a5:36:85:4d:0f:a7:7c:e8:
         64:9d:74:f6:72:e3:57:c4:bc:f0:8c:ce:74:e3:5c:4f:42:35:
         d3:45:df:63:47:63:87:9a:2a:d5:a5:7c:d0:1f:5d:64:56:14:
         77:c2:db:29:41:ad:25:91:d3:20:b9:d8:11:de:3e:9b:76:91:
         db:cc:5f:72:ea:26:53:97:4d:e3:57:b7:b8:57:4f:44:0c:62:
         0d:f6:e3:e3:14:1a:f8:57:6f:b5:52:32:88:6f:fd:5c:42:f6:
         ba:0c:61:bc:8f:75:76:75:7c:bd:b8:e2:40:32:50:38:67:58:
         5f:f1:2b:b1:ab:fd:2b:d6:25:24:5c:3e:88:05:b9:b5:07:bf:
         0b:25:88:41:61:7c:e8:16:23:13:45:77:27:06:93:34:da:21:
         96:f0:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:06 2024 by rpki-client on console-fra.rpki-client.org