Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File:                     lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier:          o+35AO5P7lC0COdIcI5v9D/gbQgjgLDB8gyYe/vUjvY=
Subject key identifier:   A4:F5:93:87:8C:58:CE:2D:63:36:7F:C0:85:05:63:4C:6F:63:E2:BA
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer:       /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial:       019356F725D977265B7C5342F38F7E57F785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number:          0815
Signing time:             Sat 23 Nov 2024 03:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:57 +0000
Files and hashes:         1: F5jHzpl-WL9u7crBRsE6wt5p5vI.roa (hash: OJ1ExGaBhCHguroIuPXyjNRATCLUWGkOVg2zVJTWGqU=)
                          2: evUofG1C5y0NlWVuq71v0dZUw_A.roa (hash: Mo7gFRJMzol0oyBUTjNTslmDK6QACTn/LsnG4Q+xQI0=)
                          3: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: sgJsrzGGXXU1pJj1i3GtzwXMcZyGrV8c1c+2IFD8Svk=)
                          4: mUz__U_PTME89cXwg7JRGzIGu08.roa (hash: X3i358+zNX5mM042V343Jn8EhF3HggGUbvOlvcTwdX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:25:d9:77:26:5b:7c:53:42:f3:8f:7e:57:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
        Validity
            Not Before: Nov 23 03:00:57 2024 GMT
            Not After : Nov 24 03:00:57 2024 GMT
        Subject: CN=a4f593878c58ce2d63367fc08505634c6f63e2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:09:b1:e3:04:ea:7a:43:58:a2:04:03:50:
                    18:c0:99:a3:f7:72:9d:cc:32:77:37:12:a8:0b:90:
                    1e:77:d5:ac:ac:0b:41:b7:cf:47:48:8d:cf:db:ac:
                    26:bc:41:77:b8:0d:d1:df:24:de:7b:43:81:e4:ee:
                    91:9b:fb:6b:2c:8e:82:3e:71:a0:f2:ea:5b:cc:f5:
                    d7:68:23:b0:9f:62:17:62:eb:61:50:b3:d7:bb:6c:
                    e6:0d:d6:24:3f:a4:23:8b:44:96:46:37:de:56:21:
                    0f:b5:ab:89:74:3e:65:04:89:e2:2c:bc:85:7e:74:
                    52:77:14:ed:9a:4b:b6:7d:63:87:37:97:5b:ee:5c:
                    1e:dd:50:15:06:07:ee:24:81:9b:7e:4b:86:20:58:
                    38:a4:3c:e3:be:f2:35:99:38:3a:77:e9:10:5b:45:
                    2a:55:3c:38:cb:57:81:80:d8:81:2f:6c:dd:22:be:
                    ea:94:6d:11:67:60:b7:f5:dc:6f:34:5f:1a:26:28:
                    4b:7f:b6:b4:9f:5e:31:0f:7d:50:09:38:dd:b5:3e:
                    00:a4:68:0c:95:36:0b:5e:ef:00:bf:9c:03:37:14:
                    c6:dd:34:a1:97:69:1e:f1:8d:c9:25:c5:0c:d4:7b:
                    08:9b:5e:70:97:76:e8:fe:bd:0d:2c:13:9a:e9:4c:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:93:87:8C:58:CE:2D:63:36:7F:C0:85:05:63:4C:6F:63:E2:BA
            X509v3 Authority Key Identifier:
                keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:dc:ea:86:19:bd:bc:72:b7:c0:62:6a:39:00:a8:db:74:
         1a:86:54:94:0c:75:cd:04:3f:f3:5b:4e:70:2b:a1:a5:dd:a6:
         21:b0:dc:7c:f0:bf:7e:36:73:79:26:d9:9f:d8:ae:68:ac:19:
         50:cf:38:bd:2b:52:db:44:32:fc:b1:cf:4a:7b:c6:e4:52:96:
         e7:38:96:09:db:b8:f3:b9:be:09:d9:24:d7:96:7e:3e:ab:1d:
         e1:37:88:af:64:cc:c7:41:21:ad:da:95:f9:6e:56:e1:bc:4d:
         30:ab:f5:b8:ce:23:9c:b2:ec:19:fe:3e:da:94:03:a8:5e:bb:
         de:3f:65:dd:0d:59:e0:5d:f0:8d:e1:12:34:b8:0b:68:96:81:
         8c:22:4c:ed:7f:0b:7a:27:07:1d:e9:d4:8a:5b:e3:6a:2b:b1:
         7a:0f:bf:85:86:e4:88:3b:b9:41:b3:64:83:8d:44:3d:bf:df:
         31:63:b0:0c:a4:a8:13:8e:5d:77:ab:2b:ff:f7:54:40:83:b1:
         21:6c:68:f6:73:d8:e4:cb:41:49:c7:a7:76:f8:dc:46:ca:43:
         51:d2:de:3e:d7:83:d0:9a:e9:e9:58:5c:cd:fc:70:57:d1:f8:
         73:48:97:84:3d:57:a7:cc:65:09:51:2d:81:af:b9:91:ad:60:
         4e:31:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:53 2024 by rpki-client on console-fra.rpki-client.org