Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File:                     L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier:          FCylOEv5O3kjJlZoBhMG/uIItLkHWMSs0iwy2v8wbl8=
Subject key identifier:   18:95:5B:6A:EB:F3:FB:14:73:B0:F1:29:FE:5E:F1:4F:1C:22:B8:49
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer:       /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial:       019369D97511375D2BF016499F2504D117BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number:          0634
Signing time:             Tue 26 Nov 2024 19:01:18 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:18 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:18 +0000
Files and hashes:         1: 59OyOLTeei8L4e3SUodIs3s-bV4.roa (hash: S2ch1WH5HeFEq6kN6rbAHd0sLXuL/imtc6VQg179sSA=)
                          2: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: M7uHx+0UdyDfKZY3lOhb9kNIrQ3Lu/ia7wJvCWTOE3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:75:11:37:5d:2b:f0:16:49:9f:25:04:d1:17:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
        Validity
            Not Before: Nov 26 19:01:18 2024 GMT
            Not After : Nov 27 19:01:18 2024 GMT
        Subject: CN=18955b6aebf3fb1473b0f129fe5ef14f1c22b849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:54:1d:0c:59:8e:f8:e4:b3:de:e4:fc:9f:
                    b7:43:c2:f9:aa:b1:0c:d8:d5:53:5c:c5:43:05:46:
                    bf:af:d4:7f:87:2b:d0:41:de:ec:da:71:24:bc:5d:
                    c1:09:56:d8:30:4a:3d:54:b4:3c:6b:d5:a6:63:4e:
                    a7:bd:4a:6d:a3:85:18:cd:5c:4c:80:63:07:a6:e4:
                    14:00:2f:8c:36:d6:0f:05:f5:5b:e9:03:e8:1b:14:
                    8e:a3:89:ac:85:4e:1b:54:0f:a7:99:6e:2a:38:47:
                    68:36:ef:7b:02:b2:08:44:4c:c0:4a:ee:74:84:b7:
                    12:2b:9f:73:ec:c0:21:6d:53:66:f2:5f:51:31:83:
                    24:69:b8:4d:8c:f3:2a:71:5d:75:04:e3:e5:1b:04:
                    5d:8c:ac:72:e9:ce:38:c1:8b:3c:25:14:08:19:e9:
                    53:78:62:70:d1:5b:9b:b8:ff:e7:39:02:6c:c7:1e:
                    eb:15:6e:7b:96:c9:0c:46:bd:a9:a3:d2:90:06:38:
                    1e:5c:1b:2f:19:90:9c:1e:44:96:c5:71:a2:6f:45:
                    19:b7:55:8f:f7:ed:b2:f4:25:2f:c7:97:fe:bb:4f:
                    b1:11:73:6d:e5:49:e4:7e:71:ee:4c:c7:0b:2a:d9:
                    44:d5:aa:a1:07:f6:17:11:19:20:67:62:5a:90:8d:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:5B:6A:EB:F3:FB:14:73:B0:F1:29:FE:5E:F1:4F:1C:22:B8:49
            X509v3 Authority Key Identifier:
                keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:bb:ae:ef:9b:52:95:4f:88:ff:9c:2d:74:28:62:26:54:
         91:4a:10:5f:b5:5b:eb:44:aa:50:93:f0:06:6c:58:f6:01:3e:
         59:fb:1d:c6:6b:d1:30:17:c1:b6:f1:0e:76:a6:39:a9:af:24:
         70:c9:83:56:00:e4:fb:56:23:48:ad:7a:58:70:f7:b6:85:a5:
         4d:00:7b:8b:88:cf:33:fa:4c:74:d0:07:0f:ce:d0:88:e5:1b:
         9f:a4:69:58:73:18:4a:8d:af:ae:7b:b6:ff:e6:61:50:2f:2d:
         36:81:93:a0:2f:67:07:35:0a:cc:04:5d:87:f0:74:13:38:b2:
         ab:7b:29:9e:2f:15:0f:02:a7:fb:41:f4:ea:9b:b7:b0:8f:08:
         90:7a:c2:11:1d:3f:69:2f:5e:db:7b:1b:2f:de:14:9d:bb:24:
         ea:c0:98:93:b7:5a:84:32:4e:af:c9:b8:7c:69:e8:14:47:16:
         f0:d1:8e:01:00:da:b1:f0:ef:c1:83:50:88:b8:5c:fc:0d:93:
         e7:a3:e1:c2:b0:b1:d8:95:9a:ed:6f:7f:7e:95:32:0e:11:2c:
         88:e8:d6:fa:34:30:61:63:87:cb:6e:f0:ea:b2:d9:0b:fd:6b:
         4f:56:89:7f:c2:98:70:80:1c:e5:0c:10:93:7e:c9:14:6d:3b:
         bd:1d:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:29 2024 by rpki-client on console-ams.rpki-client.org