Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          1lB9JjWUxO8tilzppZh+XEWl+3Un2Q3Jd3Vi0aireVY=
Subject key identifier:   F9:DF:F3:81:AB:CF:CC:90:56:19:41:9C:97:4C:6C:BA:9C:C2:81:92
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       01936B22BA4952F82244D733CC15BB077E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          137F
Signing time:             Wed 27 Nov 2024 01:00:58 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:58 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:58 +0000
Files and hashes:         1: j6vn8Tq4QfV68pFE4XqinT6qF38.roa (hash: PVJRhd+fm5M+yXEvk2nEvEWt6WQa4VaNHakcskBTtYY=)
                          2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: XpfJ1y+uHnGkNBIXhRH093e/x7pGlCkBmRbE6F/C+fA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:ba:49:52:f8:22:44:d7:33:cc:15:bb:07:7e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Nov 27 01:00:58 2024 GMT
            Not After : Nov 28 01:00:58 2024 GMT
        Subject: CN=f9dff381abcfcc905619419c974c6cba9cc28192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e8:09:63:00:1c:d2:e1:ab:95:cf:78:80:18:
                    9d:7e:db:5c:b5:2e:8c:58:a9:c9:9d:c6:fb:d3:8a:
                    cc:18:24:5d:14:a3:71:8d:28:3a:be:bd:50:50:1f:
                    12:7e:53:63:86:e3:ee:54:be:b3:94:ae:2f:35:17:
                    4c:8c:f8:60:58:2e:7f:e6:55:7b:72:66:4b:15:75:
                    8c:23:1e:82:7c:40:ec:8a:0e:27:bf:8c:53:82:9c:
                    f4:15:0f:9b:24:0a:c3:61:99:95:f9:6c:f8:e1:fc:
                    97:54:1b:9f:4c:68:6e:59:78:b7:2b:51:0a:76:58:
                    30:64:06:1a:d0:8a:78:a6:df:f4:68:9b:35:76:b4:
                    1b:52:5e:90:2e:39:86:f4:58:5e:da:df:d5:8e:c7:
                    c1:6b:9e:08:60:b3:87:d7:a4:c2:4d:1f:42:e5:00:
                    f8:25:8b:4a:32:ba:36:1b:29:fd:0d:89:e0:ae:0e:
                    4f:d7:09:c4:16:01:33:f4:87:d3:1e:59:d9:e6:85:
                    d9:0a:19:c0:f1:e1:39:d3:30:95:dc:4f:9b:d1:f2:
                    47:ab:46:3a:38:7b:31:c1:ff:cb:9a:75:1f:b4:13:
                    b0:ea:09:eb:d6:f4:d9:d1:6e:76:b5:6b:5e:29:19:
                    ab:ba:4c:c4:65:b6:fc:05:d0:1d:c8:1e:25:bf:9a:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DF:F3:81:AB:CF:CC:90:56:19:41:9C:97:4C:6C:BA:9C:C2:81:92
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:31:0f:90:27:b8:b0:9f:da:91:e4:ac:33:e3:a8:5f:3d:
         7c:66:4b:4f:1e:bf:a8:30:8a:fb:66:fc:94:7b:f2:4d:11:31:
         ae:ca:b6:4c:f9:40:b8:fb:4a:7c:8f:8d:d6:44:63:c8:e6:99:
         68:28:33:30:bf:62:e1:b7:55:41:35:85:af:90:3c:e0:b7:53:
         99:c7:f8:a8:4a:f0:bc:51:5a:42:fc:98:ed:0b:bc:ae:1b:66:
         41:a2:86:63:a8:4c:5d:ab:ca:6a:b8:51:0c:e7:6a:2a:1e:a5:
         10:27:6b:a9:a6:a1:a4:e4:42:a3:34:d2:7a:d3:e5:8c:31:1a:
         d7:6a:93:ba:bd:26:e7:c6:e3:31:52:97:48:cd:bd:7e:f6:60:
         53:fb:ab:e8:48:15:26:95:66:d7:7f:5b:a9:63:c8:b4:6c:c7:
         5c:59:61:dc:df:6d:07:76:20:b2:33:64:1b:88:48:97:01:76:
         5b:8a:b3:be:31:88:5f:21:d1:ce:68:e3:1d:7c:74:9e:ef:31:
         8d:f7:65:11:f2:28:e7:a2:1d:6f:12:55:a8:af:32:44:94:90:
         6d:39:ef:c4:b9:2e:1e:b8:20:4b:c1:cb:af:c4:83:83:2e:6c:
         60:39:00:ad:16:24:c1:21:c5:0d:6d:8c:50:83:e6:15:59:70:
         7e:99:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:16 2024 by rpki-client on console-ams.rpki-client.org