Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          TOayehwlng0rEenLCOHwoNf7zHRez2diNXzKeqe90pQ=
Subject key identifier:   48:9A:F3:31:F0:FB:D7:B0:82:97:F7:50:88:27:4A:EE:63:4F:86:D3
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       019354D158DC1F4D949670E0DDF609A34BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          0174
Signing time:             Fri 22 Nov 2024 17:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:26 +0000
Files and hashes:         1: DJ8-zKPGfbRi1ETeETbF1Yes5UQ.roa (hash: hHCxvl5f+Zltb8A2RhAr0UWC7M5IL4SzaM5N/eYj4z0=)
                          2: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: BjRE0IIOHC04YzxJXGYwM58YkY4D9JitQtXACoeIj4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:58:dc:1f:4d:94:96:70:e0:dd:f6:09:a3:4b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Nov 22 17:00:26 2024 GMT
            Not After : Nov 23 17:00:26 2024 GMT
        Subject: CN=489af331f0fbd7b08297f75088274aee634f86d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:b2:dc:62:2f:ec:87:59:8e:71:48:b1:1e:
                    f0:45:d4:97:06:e9:c3:77:6e:56:75:4a:7e:f2:e0:
                    9c:39:46:4e:75:c6:23:7d:b6:f7:29:91:d1:8d:47:
                    f9:81:56:e2:e8:3e:62:62:bb:71:45:a1:aa:84:94:
                    bc:69:77:ba:eb:41:b2:e7:86:f4:b2:50:37:68:2f:
                    0f:0f:32:9f:14:e6:32:da:38:08:9e:fa:58:ab:b4:
                    7e:9a:63:b6:9a:eb:c5:b4:5a:76:d6:e0:3d:6e:f4:
                    f3:54:94:56:e7:95:9e:35:ae:3e:81:40:da:a9:de:
                    b3:69:f1:65:8c:fe:b4:f5:a9:8d:b2:50:2c:f1:86:
                    49:8f:19:4a:1a:d1:f5:ee:85:bd:cb:dc:b3:ec:7e:
                    c2:83:45:47:f0:4e:06:50:21:03:b0:9f:b9:f5:e4:
                    cf:f2:a4:ae:42:35:64:ba:57:c9:f5:91:91:7a:23:
                    e0:a1:63:3c:62:5b:c8:d4:6f:6d:f9:d6:31:15:70:
                    ee:d4:fa:77:6f:a2:1a:52:3d:7f:96:91:ca:f7:5b:
                    a5:89:80:f8:58:2b:c9:86:10:91:6c:88:14:0a:97:
                    55:49:77:55:f5:3d:32:64:11:16:36:1e:51:df:1f:
                    b3:bf:9a:4f:d1:8d:81:a8:e6:c6:a2:b6:80:2e:85:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:F3:31:F0:FB:D7:B0:82:97:F7:50:88:27:4A:EE:63:4F:86:D3
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:33:53:6d:f4:c0:70:4d:ad:1f:e3:41:e5:e7:f2:b9:f4:
         98:71:9e:27:9e:f8:27:41:ec:36:03:c8:7a:00:c7:a8:0f:e7:
         9d:e6:50:69:58:7e:b7:3e:5f:ef:b4:c0:71:83:c7:4a:5c:95:
         fa:59:ba:ea:f6:05:f6:39:40:91:3d:57:8b:84:67:be:b9:f4:
         c1:f6:c2:8b:45:9f:74:bf:0c:a3:c7:b0:ba:bf:61:50:35:43:
         eb:67:b3:42:d5:0a:d7:33:ae:1a:41:79:43:11:69:fc:51:bf:
         ae:f2:76:da:32:9f:c5:01:ee:02:55:e3:a5:8d:b1:b0:39:3a:
         65:93:2f:f8:14:8f:c9:c5:9b:e4:cd:45:05:ba:59:c5:c4:ab:
         0f:f6:33:63:29:7c:44:cb:c8:c9:55:dc:e1:ad:7b:12:95:4c:
         63:4c:d8:43:8c:3b:8f:46:1c:48:5e:a1:98:91:c0:a8:67:ea:
         3c:e1:eb:1d:a3:05:a5:9e:d4:65:15:0f:94:e4:e1:ab:3f:aa:
         48:a2:a1:df:b0:ea:0d:b1:1b:b1:09:10:42:e7:72:29:33:c8:
         04:f6:5b:b9:1b:06:dd:4e:83:60:c9:91:0c:20:cc:0b:ca:b8:
         0e:c8:8d:aa:ee:9a:29:c5:7d:d2:e6:7e:be:4c:39:37:0e:db:
         a8:9f:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:00 2024 by rpki-client on console-ams.rpki-client.org