Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File:                     LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier:          hpuVK0PPJYT7G2uM5QeQPhJ0XXRx94hK/QCQ11aHXu0=
Subject key identifier:   A5:F1:6C:D5:F4:88:7C:76:2A:C0:8B:B2:F5:F3:23:EB:E4:18:10:1B
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer:       /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial:       01936A46EF58ECCF39908C495D9E5CE7C839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:53 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:53 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:53 +0000
Files and hashes:         1: 3-IyyFjqSwPVHlIHSpEdhXasyW8.roa (hash: S6VsKxvby+ZDxYcbIeuJTBg/LdnJJHqzGrSCR/xGhVo=)
                          2: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: Cy32qv5Nu2vG8Lcnlbh8mbWjMh3xmwi9tKVvdO2FC8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:ef:58:ec:cf:39:90:8c:49:5d:9e:5c:e7:c8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
        Validity
            Not Before: Nov 26 21:00:53 2024 GMT
            Not After : Nov 27 21:00:53 2024 GMT
        Subject: CN=a5f16cd5f4887c762ac08bb2f5f323ebe418101b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:59:77:4d:d9:d1:dc:62:d8:fd:f8:46:e6:
                    5a:2d:f8:64:5b:bf:c9:1a:d2:4b:0b:4d:29:0b:1b:
                    e8:93:81:e7:3f:83:a0:9f:d7:47:b5:26:1a:f2:64:
                    6d:51:37:d7:2a:02:b9:1a:9b:ee:aa:2e:84:62:07:
                    ca:3e:01:27:f9:ac:01:56:a5:f0:ea:4e:ba:39:e2:
                    17:32:e3:68:c7:7a:00:e1:bd:cd:13:ba:f6:77:98:
                    e9:21:83:8e:fc:ff:c3:09:c0:7c:f8:90:67:cc:5a:
                    38:51:01:85:64:87:e3:2a:28:32:46:a3:f0:52:ba:
                    48:1f:35:fd:71:ab:77:50:49:7b:19:a9:29:b2:65:
                    80:2c:78:6b:09:f8:00:ba:4d:8d:67:91:aa:6d:e1:
                    d2:1d:55:95:43:57:d8:72:3c:d0:5e:1f:8b:b9:39:
                    43:e5:b5:cc:cf:77:50:ce:56:fb:58:0d:af:79:fb:
                    49:e3:a4:0f:35:e0:e4:7e:80:d0:94:a2:c8:3d:34:
                    82:ee:c8:26:33:8c:d3:64:07:e7:2e:05:6b:34:18:
                    88:74:f2:9f:5d:11:c8:37:68:08:b1:42:7f:62:8a:
                    04:22:c5:42:bf:8a:8b:f9:9d:0d:7d:cb:1a:65:22:
                    d6:09:17:c6:6d:3c:28:a7:a3:56:2e:2f:14:94:e1:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:6C:D5:F4:88:7C:76:2A:C0:8B:B2:F5:F3:23:EB:E4:18:10:1B
            X509v3 Authority Key Identifier:
                keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:16:cb:c3:42:ef:47:1d:52:17:cb:bd:93:18:7d:bf:88:
         c0:65:6a:04:84:b6:90:d7:5c:8e:88:9b:33:3a:a9:c1:c8:a5:
         d7:f6:bd:70:8b:4f:93:5b:da:0f:c2:40:5b:97:53:55:ed:1c:
         52:3c:6e:36:96:66:80:2e:43:ac:f0:82:ac:90:d6:86:b0:ae:
         49:00:0b:57:94:d8:62:59:84:ca:97:77:b5:8d:5a:ae:f5:1c:
         17:da:1b:9b:a6:5a:08:a8:9d:fe:31:09:db:9e:55:51:0f:97:
         d1:42:ef:21:f0:b0:9e:69:a7:ef:52:d8:ea:d6:e0:97:3b:91:
         e8:e7:31:f0:aa:52:1b:ff:b4:f5:cf:81:c3:fe:09:74:db:26:
         6b:a7:9d:3b:22:ae:3e:79:bb:f8:cc:0f:2f:af:09:9e:69:36:
         98:7e:09:dc:03:4e:6d:fa:10:a4:06:76:eb:00:ad:9d:52:0c:
         10:65:8c:cc:c4:c3:a5:9c:4b:0f:a3:f1:27:2a:5b:da:8c:d2:
         bd:5c:3e:5c:f9:e6:de:76:e8:1d:27:4b:80:74:9b:15:7a:71:
         b1:6d:ef:b2:80:1b:79:85:74:5f:5d:72:47:59:56:77:e6:ae:
         97:9d:cc:21:05:3b:4a:8d:46:a6:34:5a:52:66:09:09:37:36:
         a9:f7:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:09 2024 by rpki-client on console-fra.rpki-client.org