Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
File:                     LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json)
Hash identifier:          nNfb+bJrJfp8Wgi1OZlYygd35szQy5UwqH+OMYYQMV4=
Subject key identifier:   57:88:32:97:4D:6C:E4:77:7B:0C:5D:4C:6A:FE:4F:13:AF:07:8E:C0
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Certificate issuer:       /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial:       019352ACB5F7AD630C688E3C92E3469DB361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
Manifest number:          09CB
Signing time:             Fri 22 Nov 2024 07:01:10 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:10 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:10 +0000
Files and hashes:         1: 4lWHlorG663k0EfTMGJD2tDS2xs.roa (hash: DfQD/adOM6isn/EaEVyC0rW9bmSfup22Cphm02m7Kvs=)
                          2: 5QNlrMYuST4cXnfJcG_GygUVtGc.roa (hash: nugIBAGU7ZpKoo5cBm8dUCBADitw/ly2amGTvfqMRJc=)
                          3: 9OZMzYPlcEYElv5RzUNVPeaH2DI.roa (hash: KgImgmoX1P6NwqguoF3YEc2n40oZgS0YGsgxorcvCfg=)
                          4: A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa (hash: wqC9ig9c4r3ibxnGZkXomsyFuAUXNDfrCQNIAiK2dP4=)
                          5: BHl6R7BMWq26DHQO3MIbnXvW_CY.roa (hash: SRpkztK1HCNTFMImMxWaBTrWpB2PDazdB9S/jbOoL8c=)
                          6: Cy0g91pwXG3cE9xUNtHzBS1rDTI.roa (hash: yopyVlYjBpzZRR34pDtWN3PUTze/Q28UMHV+CelpsKc=)
                          7: HENDVzHWete4UTkP5d-58umtIZY.roa (hash: +owUQRC5cWM+lueLCqhgH9a/ttCIgCDV2ShJCMRZuII=)
                          8: I3XH35UIi75KmGxY5yJfuf8h02E.roa (hash: xn2PMU6un3K/kl/cNS+tl9QsPEDDj866jLyY6ydPg6E=)
                          9: IvF1rSgRq3BglceqaT4rL7PSftI.roa (hash: Y6z9/jeC3bc3HNb82V+o9UShGGoQYrFYcCut5dc8xPQ=)
                          10: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: /8MAWhTL5mSMNimERf+M48/mGaLWDUNK69dv6NT429M=)
                          11: e7a1iOVtg9fTviHXygkb6HooCdQ.roa (hash: n9Ig+1ewhbeFasYqHaSdSIHMPDWbAlsmkQrZ+ZE0IvQ=)
                          12: mD66CUPpa6fsPoCDyP6CvtcpkA8.roa (hash: b/hiKqSoELzwGmHW4n0KuWP1KzdByy5kXCN+pKVhC7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:b5:f7:ad:63:0c:68:8e:3c:92:e3:46:9d:b3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
        Validity
            Not Before: Nov 22 07:01:10 2024 GMT
            Not After : Nov 23 07:01:10 2024 GMT
        Subject: CN=578832974d6ce4777b0c5d4c6afe4f13af078ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:cf:c7:39:9c:01:0a:fe:c3:ae:49:5a:45:
                    83:88:c0:ba:26:24:bc:82:2a:56:15:27:3f:6f:c6:
                    c7:cb:1f:2c:ab:75:db:d9:05:62:52:06:cb:44:de:
                    22:7d:4e:52:13:ac:18:42:39:40:d6:59:2c:52:fd:
                    d3:4d:ea:38:f1:fc:64:d8:6a:66:88:80:60:37:8a:
                    cb:d8:f6:97:1b:c6:cc:3d:51:d9:38:95:05:e3:e7:
                    9d:ea:ca:ee:c7:7a:10:16:17:4d:e2:92:6a:45:39:
                    53:4b:6f:19:f5:c2:c0:d6:8a:ea:6b:91:80:ec:27:
                    9f:12:11:be:a6:10:01:53:42:ca:2c:19:b0:b2:e0:
                    a2:ff:25:d6:dd:8d:8c:fd:3f:29:0e:57:bd:11:ce:
                    38:b2:5c:5f:bd:33:1a:9d:62:54:42:0e:ad:17:36:
                    9c:85:e0:a8:33:34:44:41:b7:3a:c8:16:2d:61:aa:
                    6f:8f:cc:8f:b5:04:a1:78:f8:18:a9:30:d7:7d:e8:
                    61:62:df:65:f8:1e:d4:d5:01:fa:94:c2:a6:ed:5b:
                    a0:76:94:fc:df:de:f8:23:4c:39:81:a4:f9:b2:2b:
                    e2:37:8e:74:2c:70:4b:22:f7:5f:83:65:41:9a:f6:
                    b7:18:d8:04:e9:1c:45:05:40:1f:3b:09:8f:66:b6:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:32:97:4D:6C:E4:77:7B:0C:5D:4C:6A:FE:4F:13:AF:07:8E:C0
            X509v3 Authority Key Identifier:
                keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:c6:2e:be:8e:a4:d4:43:f5:4d:70:00:04:90:f9:66:89:
         a1:0a:30:cc:7a:3e:7b:91:81:82:73:7b:b7:e3:27:1b:d3:0d:
         ff:50:b3:23:9a:c1:d5:76:e3:4f:04:8c:96:49:97:78:c1:47:
         0b:ab:06:53:d6:37:ee:39:b0:33:eb:b4:7d:5b:e7:6e:4c:e1:
         59:c4:92:32:15:86:f0:21:14:18:c8:09:4b:bf:8e:04:06:a1:
         31:9e:c8:6d:7b:71:0d:3f:39:90:6c:bb:19:bb:25:76:2e:2e:
         91:cb:16:d2:6b:80:c6:c9:43:1d:d5:84:84:8a:aa:b5:43:2b:
         23:41:23:68:68:a2:46:cc:33:60:22:16:2a:c1:ea:39:58:96:
         4f:48:d2:30:b2:61:80:92:2c:1a:89:9a:2c:6f:ba:3f:5c:fc:
         cf:da:47:7e:92:85:c4:71:70:fa:e2:57:ba:05:fe:a3:55:52:
         8c:9a:79:4a:72:a6:8d:48:9e:21:79:e6:14:4e:a5:2c:66:21:
         87:67:cc:a5:77:1c:f4:17:a6:5c:57:d6:25:1e:d2:93:92:72:
         9f:2a:da:30:90:1a:1d:ac:a4:70:4d:16:13:cf:55:aa:a3:42:
         41:75:67:76:0a:81:43:9f:26:83:ab:2b:cc:26:4d:53:a6:80:
         29:df:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:40 2024 by rpki-client on console-fra.rpki-client.org