Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          Rh4UA0Mun1gksEJ0aJiHOdEPy8ILH9S6m+QXnvP6Jxo=
Subject key identifier:   18:30:2D:8F:DC:37:47:38:95:FC:0E:45:B5:85:98:07:10:E5:33:DC
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       019365C4EC4C092A30986FFA8071F5C1E876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          07A3
Signing time:             Tue 26 Nov 2024 00:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 00:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 00:00:24 +0000
Files and hashes:         1: EAG1Ead1kCgvnMsktALcwBSrh7w.roa (hash: PZwaCMGkqVb0vPiW3gSGMH9wEM+hfYpX6U3XcjqD6Ow=)
                          2: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: Wk/ukTlxb1SA3/Baz1z/UoBWOKe5D8L8S0URyRBOYjE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:c4:ec:4c:09:2a:30:98:6f:fa:80:71:f5:c1:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Nov 26 00:00:24 2024 GMT
            Not After : Nov 27 00:00:24 2024 GMT
        Subject: CN=18302d8fdc37473895fc0e45b585980710e533dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:f0:94:7d:e2:76:93:6a:34:66:ac:63:92:
                    49:68:ff:28:56:14:bc:a2:ea:8c:8d:65:42:46:0c:
                    76:f2:3a:5b:d7:f6:93:51:04:b3:bc:f0:9a:b7:2d:
                    cb:6c:a8:5e:6a:d9:fa:9a:b1:53:36:f5:09:90:0b:
                    10:7a:68:17:97:d1:1c:1b:ce:32:98:a9:f9:cc:f0:
                    3c:1d:02:ee:30:88:87:37:9a:fa:b3:13:5e:e6:0c:
                    b1:7d:61:f1:a9:f7:ca:13:2f:3c:ec:59:e2:8c:e2:
                    53:d0:76:4e:a7:c9:cd:e9:4a:a8:72:69:bf:35:47:
                    a4:3a:d2:e1:ea:19:96:d2:d6:b0:80:c9:9e:cb:c1:
                    a1:78:fc:07:e3:d0:41:c4:86:6f:17:4f:8a:f9:cd:
                    d5:4e:fc:d6:73:81:df:93:0b:96:b9:fd:e1:a5:8b:
                    b1:f0:27:b3:f3:75:4b:88:0a:c3:1f:e8:90:c8:d3:
                    15:93:b6:20:c4:f4:e5:d3:87:4f:7b:ed:87:83:c3:
                    82:9f:65:a4:17:f1:6b:b6:d5:5a:fd:1c:6a:3e:af:
                    94:e2:07:46:ee:63:8e:1a:66:fc:bc:4c:f7:59:b2:
                    e6:cf:c1:7c:f8:99:bb:54:70:a5:1b:41:4a:6e:cc:
                    c1:43:88:f1:14:7a:52:21:29:ce:d5:c3:c7:bc:1d:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:2D:8F:DC:37:47:38:95:FC:0E:45:B5:85:98:07:10:E5:33:DC
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:88:17:41:7d:9a:53:0e:ed:4d:27:c2:c0:2e:86:40:7e:44:
         a4:b3:d1:e3:9c:4d:70:cb:f4:b2:76:7a:7b:13:97:37:b9:f2:
         1b:32:5f:6d:d6:35:e0:bc:ad:df:24:cc:3c:2d:de:8f:21:ac:
         04:ea:89:99:51:0b:fd:8c:13:5d:1d:93:04:a9:77:c3:f0:e1:
         98:06:99:7e:40:68:9a:84:dd:a4:b1:69:28:8e:e3:e0:04:b7:
         6e:dd:d4:7d:04:21:9e:99:e3:4d:fb:76:ac:cd:86:c1:f4:3e:
         69:97:7b:b2:a0:51:cb:bd:d4:e4:bb:80:f3:72:db:17:5e:b0:
         9a:8d:0e:80:57:b7:47:6c:e6:bf:bd:4e:ea:99:c5:96:99:02:
         08:5e:04:ef:6f:b7:fb:cf:72:5b:f1:4d:82:49:30:ec:f0:62:
         b4:0b:51:96:6f:c5:4e:a7:f3:10:ab:3f:6f:f0:f1:88:51:b5:
         3b:b4:b9:37:3d:3a:3c:da:f9:c6:85:f2:a4:7d:26:04:08:c3:
         09:9b:ac:b9:dc:e9:8e:48:4e:80:5e:7d:1d:a9:0e:37:ca:1f:
         cc:84:9b:7f:96:8b:29:2a:af:c1:22:ee:ca:d0:5e:a9:30:77:
         79:17:64:54:91:ff:aa:a0:7c:0b:05:09:10:79:2c:8d:11:90:
         f0:64:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:53:48 2024 by rpki-client on console-fra.rpki-client.org