Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          CYwxqk7u5BwnFm+IYYwYQz27DbniiN93qQFqU374egw=
Subject key identifier:   DD:81:B2:64:EE:6C:08:B3:35:66:B8:F9:B3:3B:7B:09:0D:95:F2:A6
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019350F46B8DD948BBD6B2E71F539A1C565C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1370
Signing time:             Thu 21 Nov 2024 23:00:15 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:15 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:15 +0000
Files and hashes:         1: HKzKLaEA_szmsMalXLBkpecuNPo.roa (hash: Vnbn/JOVJZP7Tb4z8ydifZ5MTQiPbrRix53uT7WiBaU=)
                          2: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: uOwI0FSHdcgb0baxftLOMy/nbdWx1Celij/wzSlSMLE=)
                          3: kf7Ui_vK3iDlmlPKEmT-QGUHa90.roa (hash: IDVCYL89gy3R4KqIeD/dhYzSp8jVizCWdYHbxBEVv7s=)
                          4: vEkhIQbjKt1qzZyuioN1NQB9x-A.roa (hash: /KwM/1CpjVc38VC6Xk0iJKc8a7LIQnSWKKs5b99Dcvs=)
                          5: zLVR5eHsVyF3v7DJZuYpTiYit7U.roa (hash: 9CiKI5OxCios8CUTCapBMdu2mulRUdKCWZ7HsE14B50=)
                          6: zXEhw2f1q37DuTfF2VBqv0sv82Y.roa (hash: 2JRLf2NNweXxKBwGQmFdygeT6IHzpALyFlb526t7MAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:6b:8d:d9:48:bb:d6:b2:e7:1f:53:9a:1c:56:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Nov 21 23:00:15 2024 GMT
            Not After : Nov 22 23:00:15 2024 GMT
        Subject: CN=dd81b264ee6c08b33566b8f9b33b7b090d95f2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:d4:e9:13:00:61:fe:67:a5:cb:4a:93:e1:
                    8e:0f:ce:75:b5:52:3d:3a:19:2a:e0:51:4f:7b:18:
                    19:e1:d1:0f:0b:85:9f:6b:97:46:22:fb:7d:29:89:
                    2b:b7:ec:5a:a0:fd:b0:8b:ac:6e:21:55:7f:63:3c:
                    5a:be:d8:cf:8c:81:6e:bf:0e:9b:6f:85:e5:29:2a:
                    29:64:5c:37:22:bb:50:66:ed:eb:2b:0c:29:7c:42:
                    29:92:a4:a9:dd:3f:e1:67:02:a4:fd:e3:6b:1e:bf:
                    ad:45:c0:a5:5b:90:7a:a7:83:d7:25:34:1b:88:b6:
                    37:e3:82:25:9a:43:53:dd:b6:c5:d6:6e:e0:a9:34:
                    ba:4b:ed:63:12:e0:bc:a5:84:70:8e:9b:b8:65:55:
                    90:40:22:d6:43:38:cb:d2:81:13:69:79:7e:dc:27:
                    fc:98:28:f3:be:39:1b:60:94:b4:7b:dc:b1:05:be:
                    c2:7a:f3:66:96:9e:79:44:91:96:ec:3b:7b:b5:18:
                    a9:c3:e7:ef:e2:80:88:d4:ae:65:a3:00:cc:5e:3f:
                    8b:cf:0c:3d:f6:14:43:ca:ad:64:f5:a8:8a:80:f2:
                    8b:92:11:f9:d2:24:89:73:e1:4b:99:c5:99:6b:27:
                    c8:0e:9b:41:e1:5c:13:ad:b7:10:26:97:57:c7:cd:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:B2:64:EE:6C:08:B3:35:66:B8:F9:B3:3B:7B:09:0D:95:F2:A6
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:d9:72:d6:e0:0a:c2:bf:85:a0:9f:19:91:34:3b:e5:7f:
         01:95:13:f4:f6:b3:26:12:57:19:05:f7:bf:17:06:99:61:04:
         9d:a2:a7:e4:9f:00:0f:fd:d3:0b:5e:12:60:15:67:97:0c:fc:
         40:36:72:d6:57:43:ef:f4:07:b7:8a:a4:fd:68:dc:c2:6b:ee:
         64:db:d6:10:7b:45:40:16:1f:61:ec:52:bb:68:26:9e:3a:c9:
         92:d5:26:02:7f:a1:75:13:ee:06:d7:ae:9d:95:53:57:c9:84:
         9f:63:72:58:f1:99:02:92:16:fa:d8:85:93:e4:71:57:eb:3e:
         c3:ef:c6:fd:8f:75:46:dc:a5:d2:4c:74:fc:c9:c7:f0:2c:69:
         90:46:b8:a6:8d:c1:a3:53:9e:54:0b:93:fd:b6:48:50:18:e4:
         01:f3:80:bf:46:10:1f:48:a1:da:a1:e2:9a:e1:0f:78:a1:3c:
         23:e9:80:2c:a4:38:5f:a9:b1:95:b6:2b:50:96:46:37:c7:63:
         76:4f:09:28:02:52:53:95:17:1f:13:60:c5:59:d1:c7:35:bb:
         42:b9:b1:fc:b2:d8:bf:5c:60:db:98:9e:a3:ec:6c:1a:79:77:
         6e:76:18:02:37:e9:91:43:d5:e0:ac:ae:1d:80:aa:2a:f9:74:
         e9:45:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:30 2024 by rpki-client on console-ams.rpki-client.org