Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File:                     li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier:          dA5msadeoI2xSH2CkhcQI2NiNKT2hsYLDAw8FLQ3Dgc=
Subject key identifier:   C6:71:3B:2F:F7:60:2B:0D:CE:DB:6F:D7:FC:9D:01:76:33:0E:5E:5F
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer:       /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial:       019353BEFF1FFF22FAD5FC6628A1718BB4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number:          1300
Signing time:             Fri 22 Nov 2024 12:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:46 +0000
Files and hashes:         1: AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa (hash: Sdnu2H8sTIohyTZl1MPHFMtOPnKzaAQTpTgg1gQ6kUI=)
                          2: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: KqOIHbN7N+STAWTpEvsxqp+CZp1jd6GBDongPC0k5E4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:ff:1f:ff:22:fa:d5:fc:66:28:a1:71:8b:b4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
        Validity
            Not Before: Nov 22 12:00:46 2024 GMT
            Not After : Nov 23 12:00:46 2024 GMT
        Subject: CN=c6713b2ff7602b0dcedb6fd7fc9d0176330e5e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:e7:7f:fb:91:b0:8e:83:7c:c4:0f:ae:3a:
                    21:6e:10:55:1f:85:e0:a6:d6:e8:44:a7:bc:d3:99:
                    bd:37:6c:70:1f:57:3d:93:3d:94:99:69:d7:99:63:
                    94:df:19:f6:b7:a6:f2:5c:27:b4:a9:75:54:70:aa:
                    b3:3d:77:ca:89:46:8f:32:d1:ad:e8:11:6c:22:50:
                    5d:12:ba:05:43:77:29:d6:b9:f6:bd:a4:f6:34:ea:
                    b3:ff:3c:03:e3:c8:10:be:56:8a:ca:38:28:8f:60:
                    a0:af:b9:45:fe:08:e4:e5:d1:10:23:b8:bb:6a:07:
                    69:fb:76:74:4b:83:92:57:c5:db:de:aa:a1:91:b5:
                    e4:87:28:42:71:0c:32:c9:6e:96:53:35:38:36:dd:
                    85:76:58:95:8e:df:e7:65:2b:28:6a:36:51:bb:39:
                    14:72:7d:f5:c2:b9:d0:c9:f9:ac:2f:d5:c5:44:6d:
                    ba:e9:1f:85:8c:3c:63:a7:e7:08:4c:74:ca:b8:2c:
                    53:36:bb:1c:b2:91:f6:31:bf:dc:67:d5:5f:eb:af:
                    dc:92:2e:9e:9a:db:e2:10:ea:31:41:fe:4b:5f:17:
                    31:fc:9d:86:d8:87:4b:8e:24:3c:fc:d7:a6:8b:41:
                    d7:88:97:67:ce:96:32:9c:9c:64:cf:67:70:7f:a1:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:3B:2F:F7:60:2B:0D:CE:DB:6F:D7:FC:9D:01:76:33:0E:5E:5F
            X509v3 Authority Key Identifier:
                keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:7c:e8:25:81:04:f5:73:46:56:7c:1c:ef:df:aa:5c:91:
         b4:60:50:b2:97:09:5c:79:94:15:23:87:2a:7c:c3:a3:db:84:
         bb:4b:25:2e:2a:53:15:10:7e:ee:d5:66:de:a6:d7:cd:e8:5a:
         08:16:47:2d:c2:98:22:21:ad:dc:22:9d:30:68:52:84:a7:0d:
         f0:7d:f0:1a:a3:20:54:ea:8a:9e:49:ba:1e:a9:94:a4:71:b1:
         b2:6a:95:c8:f4:e7:f0:5b:38:cb:82:2e:d8:ca:16:8f:b2:43:
         c9:7e:86:84:6b:16:7e:67:46:88:6d:89:50:10:74:75:11:a2:
         02:e4:c8:71:13:82:90:31:94:70:4e:bd:6b:6b:8c:79:b2:0b:
         1a:54:31:f8:2b:84:ff:f1:9c:d9:ed:a5:0d:0d:d3:26:60:12:
         b1:84:8f:81:66:8d:4d:5a:a6:d1:75:94:67:ae:00:14:a3:69:
         0c:c2:76:e8:5a:e2:ff:43:2d:7a:7e:82:c1:72:36:fe:a2:a0:
         ae:b3:ad:ca:36:7d:98:ff:f0:8d:84:0e:8e:58:a5:b5:d5:8d:
         cd:06:1e:59:f6:a8:c2:99:ba:03:c2:91:7d:d9:39:90:15:2b:
         f1:3a:2d:8e:53:9e:9e:27:49:8c:a2:0f:a3:8b:bf:d2:1e:69:
         5b:52:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:02 2024 by rpki-client on console-fra.rpki-client.org