Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File:                     LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier:          5gVAQCdn/PLEWq3Tvz5MeeUV/O/gXGINS52AK+iA2Gw=
Subject key identifier:   81:26:89:47:65:6C:8F:C8:74:8D:9F:2D:C0:9E:7D:3A:3D:6F:8B:17
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer:       /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial:       0193568A1FF8CC2A7A524967FDA6C932FDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: ChC595SFRthJDeaQj53vKQ2wXFg.roa (hash: PdP5rkPENoILROd8RILmlWlsFahtNPshBSyMIMU+o+8=)
                          2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: LKiocQgf18TgwA/5bjLbPwmTaqIoIMynFhFvWH7QwZo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1f:f8:cc:2a:7a:52:49:67:fd:a6:c9:32:fd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=81268947656c8fc8748d9f2dc09e7d3a3d6f8b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:4b:fc:93:a3:bb:df:0d:04:3d:10:dd:8f:
                    41:38:81:52:c5:19:4d:f9:11:8f:0a:99:fa:2e:e6:
                    6a:4f:f9:3c:c6:1d:d0:1e:7c:fc:b8:95:b5:f2:0e:
                    d1:de:9b:b0:e3:90:2a:42:9b:24:03:91:22:a2:10:
                    40:6c:71:ba:61:10:d8:d7:ff:a2:11:4e:a3:f8:39:
                    73:e4:18:86:3e:f4:55:d1:ce:b8:ff:37:e3:c8:02:
                    1f:12:93:fa:cb:ed:90:6d:39:a3:44:92:8c:5a:eb:
                    1a:84:f9:f5:d9:d8:f8:47:46:20:98:32:2e:27:b7:
                    b9:ff:6f:62:44:f6:46:39:0a:8f:9c:25:12:65:ac:
                    7a:fa:7f:1b:40:be:04:09:83:cd:38:27:f0:1d:04:
                    b3:5f:f4:8e:48:14:fd:9d:74:d5:47:09:42:bd:6e:
                    8b:ae:49:b4:fd:f9:7b:1f:4d:af:1c:18:46:cd:25:
                    2f:db:5e:a9:c2:6e:ec:b0:91:fc:c9:29:d3:88:22:
                    8a:47:be:d9:ed:d2:71:1a:01:21:cd:76:e5:cc:1f:
                    84:00:f0:2b:5e:ef:7a:46:0e:56:a6:f2:d7:52:fa:
                    83:3b:07:81:c9:71:ba:dd:be:14:69:c8:5f:be:20:
                    0c:48:6d:ec:cd:5a:d5:59:93:13:2d:cb:d1:1c:08:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:89:47:65:6C:8F:C8:74:8D:9F:2D:C0:9E:7D:3A:3D:6F:8B:17
            X509v3 Authority Key Identifier:
                keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:c4:86:d2:82:16:8b:36:11:2d:1b:8e:fd:0b:17:45:0c:
         f6:c0:2c:95:68:bc:38:73:cf:73:73:b0:30:06:d2:f9:1f:1b:
         a4:39:a7:70:8e:cb:c3:11:56:43:65:20:24:e9:7a:45:c9:33:
         ff:cc:2c:0b:75:5d:88:1f:db:b3:92:16:dc:c0:4c:dc:13:7d:
         71:da:92:ba:a7:6e:42:bb:97:a1:ec:92:9e:1e:fa:80:da:85:
         c2:6b:2b:34:8b:48:79:05:f2:ac:ed:13:7d:93:70:d6:e4:c9:
         35:27:ab:87:af:69:55:50:0c:e5:26:38:4e:ba:16:8f:fa:92:
         62:3c:fb:ba:1e:3c:a1:1d:67:1d:f6:cf:5a:b0:d2:d2:60:d4:
         a0:b9:b8:88:3c:87:a2:22:c3:e4:63:7d:9c:a7:2c:5f:a3:13:
         eb:5f:9c:b3:d6:cf:28:ca:e1:d6:ac:63:0a:51:48:5e:f4:a6:
         42:92:93:2a:94:17:98:49:a0:57:ce:b7:76:03:44:21:3f:46:
         3f:8d:30:fc:dd:c8:04:56:c3:43:68:3d:29:23:1a:57:b6:f8:
         36:d8:e0:cb:e8:29:71:d3:20:04:8a:58:7c:da:3e:c3:1a:2c:
         2d:e9:08:a3:b0:7c:3e:4d:fd:73:f3:64:c7:de:57:22:e0:5e:
         7f:f8:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:34 2024 by rpki-client on console-ams.rpki-client.org