Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File:                     lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier:          CqlDkPCaaAPgZLiOw3Qt6HIUC1wpMO/ZdQUGgalAK08=
Subject key identifier:   B4:F5:BE:19:5C:84:7D:37:75:FA:A0:B6:11:DF:49:A4:F1:39:B8:0F
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer:       /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial:       019369DAF1CB4E1739E75F367AACD907AAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:56 +0000
Files and hashes:         1: Tm6vywKbShrDa7hi2tgKoT1EKvg.roa (hash: ebJwSpnFgLE2IPc9CL8i6f4VzVG2RaudvhzBtbu4Jk4=)
                          2: hOV92Qka12XZ-o_9Qo_AmAx6vIs.roa (hash: LHX4fuV3tnhHriCE+vnJCnmvbYbusXqNgz10ZSTq6yw=)
                          3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: CM7IotSIqJ4ufi13xekYxcoMldo+k6k8MuS6rwihmTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f1:cb:4e:17:39:e7:5f:36:7a:ac:d9:07:aa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
        Validity
            Not Before: Nov 26 19:02:56 2024 GMT
            Not After : Nov 27 19:02:56 2024 GMT
        Subject: CN=b4f5be195c847d3775faa0b611df49a4f139b80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:cf:98:35:21:48:62:88:d3:79:b9:5b:48:
                    bf:13:f8:b9:8f:11:e8:c6:14:e8:33:fe:2e:08:27:
                    47:66:ea:af:35:d5:2a:e8:a2:08:99:3f:c6:59:0e:
                    39:8f:88:b9:28:9f:6b:03:e7:a6:f1:97:da:10:dc:
                    cb:5e:5c:1f:a1:68:47:cb:5b:b1:79:fa:e5:18:15:
                    7c:6d:4c:e2:a9:97:27:35:40:8c:ee:0b:9b:62:fe:
                    82:9f:c9:98:80:e1:58:58:85:4d:4f:be:52:a1:d6:
                    43:85:77:0e:3b:a4:71:8f:ef:af:a3:20:65:cf:43:
                    5c:17:4d:d2:4b:56:f6:45:f2:f6:45:70:c8:da:da:
                    aa:1a:94:f2:4c:13:40:fb:b2:5c:6e:16:2d:87:58:
                    e5:d7:4d:f5:b2:49:89:ae:a8:66:bb:c7:ea:e2:8e:
                    2f:96:bb:eb:12:54:ec:76:41:63:b2:ee:93:a1:2c:
                    df:85:28:f1:d6:e3:df:1b:07:20:e9:c1:f7:1f:76:
                    3e:81:f0:56:ba:33:2c:89:7c:97:fd:7c:2a:36:da:
                    34:59:5a:f9:6a:38:24:11:3b:19:f1:28:d1:c6:8d:
                    83:c6:fe:cf:bc:b6:88:a1:6e:59:1f:d6:c6:d8:53:
                    a5:1b:e1:98:03:89:b2:61:77:9d:94:7f:68:b7:b8:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F5:BE:19:5C:84:7D:37:75:FA:A0:B6:11:DF:49:A4:F1:39:B8:0F
            X509v3 Authority Key Identifier:
                keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:30:60:f9:a8:d5:5f:41:7c:ab:62:89:fa:8f:83:14:8c:
         af:89:b6:87:c0:f1:6e:72:5c:ba:c2:2d:e7:47:57:f8:94:92:
         d5:5f:2d:22:8f:a2:c2:12:36:a5:1a:0f:f3:25:bc:51:bd:42:
         4c:e6:81:41:db:05:51:fe:2f:1a:4a:ad:d3:30:5d:bc:25:8a:
         4a:65:2d:88:cb:04:6b:1d:cc:b5:25:6b:c9:d5:c8:72:a2:ae:
         cf:95:dc:fd:de:18:48:1e:da:c2:8e:44:28:69:9c:32:12:07:
         92:f7:52:dd:dd:74:ff:bc:aa:93:08:7a:c9:54:7d:f8:f8:6b:
         32:91:64:56:60:db:4e:ab:93:77:9d:e7:71:37:fa:4e:a4:f9:
         9b:0d:a9:64:e3:7e:99:52:8f:f1:a0:62:ff:fc:b7:d9:9f:71:
         fa:f6:80:dc:44:50:a1:5e:6c:59:a3:c4:8d:b7:6e:1e:fa:b2:
         8b:98:c4:36:0e:b7:d3:56:1f:dc:98:af:64:1c:ae:43:87:c2:
         36:df:ae:cf:07:a3:18:52:11:ed:4f:63:de:c4:e2:dc:4a:28:
         16:09:ea:10:fd:d0:44:aa:01:e1:34:89:3e:a7:87:40:d0:22:
         fb:11:61:4a:fd:87:50:6a:e7:e1:eb:40:53:aa:ce:92:19:01:
         45:8b:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:14 2024 by rpki-client on console-ams.rpki-client.org