Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          j2Evzb4hkHJrvYHJoTSME6aC3EyMx+MyJ0Zgxjvmd7k=
Subject key identifier:   46:0C:64:91:0C:34:CE:F3:F3:BB:1F:AA:19:AA:6D:28:BE:EE:BF:7E
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       01935689969253D2472065B95B86FA57055A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          123F
Signing time:             Sat 23 Nov 2024 01:01:17 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:17 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:17 +0000
Files and hashes:         1: 6w9lU3aJa1ckQuutgHF9TWJTmDg.roa (hash: JuAwwU9CzpMK56mGnGFCpzhq8BB0uVWikvXGZ101fGc=)
                          2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: 6FD6puuHR/s/aQ+OWJmqPNXkmkklafN64iXAvUdZGXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:96:92:53:d2:47:20:65:b9:5b:86:fa:57:05:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Nov 23 01:01:17 2024 GMT
            Not After : Nov 24 01:01:17 2024 GMT
        Subject: CN=460c64910c34cef3f3bb1faa19aa6d28beeebf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:2c:2e:2a:54:10:22:8c:c6:59:5b:f4:18:
                    4c:49:d3:0b:84:b3:1a:31:06:8b:37:91:f2:90:77:
                    51:e9:13:f0:4f:ef:f4:7d:fe:c8:e8:7f:97:ff:30:
                    4e:ef:54:d1:c4:ff:3a:ad:76:e2:e7:6f:37:04:b4:
                    76:40:b0:b5:77:58:9a:aa:a1:9f:04:c6:7e:45:54:
                    6c:3e:20:90:1e:32:74:7b:67:92:6f:39:48:bb:20:
                    f4:4e:b2:c4:eb:5a:b9:35:84:80:b9:35:f8:9c:b6:
                    76:61:ce:88:b4:d3:c6:bd:fa:23:9c:8e:b2:d3:7a:
                    ca:9e:a6:68:06:2e:c4:93:f7:ba:0a:a2:7f:f9:81:
                    92:86:46:dd:55:2e:0c:aa:3a:81:d6:77:2e:cb:6e:
                    fe:09:68:df:58:24:90:10:d1:f8:1b:c2:ef:60:fc:
                    ce:57:1f:57:8c:f0:41:ba:aa:bb:bd:22:96:0b:db:
                    32:3e:33:da:3d:5c:f4:2d:42:b9:2d:ab:e4:9b:53:
                    1a:e0:98:2b:ac:46:0c:0c:24:e9:82:77:a1:9a:52:
                    8c:92:25:07:3c:64:c1:aa:05:dd:34:b3:1b:4f:4d:
                    aa:5c:6f:bc:23:9f:55:67:66:33:32:2c:61:01:b5:
                    7a:56:d5:60:9d:ac:c0:d3:3b:07:d1:c3:0f:6d:94:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:64:91:0C:34:CE:F3:F3:BB:1F:AA:19:AA:6D:28:BE:EE:BF:7E
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:e0:62:69:35:b9:32:5f:e5:ca:0f:fe:35:0d:4b:27:5b:
         8d:1d:ef:4d:be:49:12:3b:7b:d7:0c:ce:46:00:34:4a:8f:4d:
         57:92:15:23:57:64:a9:1b:77:db:7a:04:1d:b5:ce:f5:80:12:
         77:7b:4a:be:8f:84:47:6b:3b:e3:d9:82:32:ca:83:9a:44:49:
         d6:0d:68:d1:b5:84:44:25:95:90:91:2a:b5:48:3b:be:49:5f:
         12:0d:4e:ec:76:a4:30:a7:01:37:0d:7d:96:98:56:a1:c4:12:
         d4:4a:4d:8b:5d:84:a4:56:e9:e7:95:e2:77:a6:cf:d7:18:17:
         b2:2d:6d:43:66:a3:46:b6:c6:8a:93:ff:06:6f:59:41:30:0c:
         48:9a:0a:0d:2b:ef:03:72:44:72:95:bc:33:9a:21:16:06:1b:
         88:76:9a:21:c8:2d:fc:bb:7d:31:68:68:f4:2f:ac:90:fc:a9:
         68:bc:71:9b:27:fb:2d:b7:07:c7:02:e1:58:72:f2:bd:07:c9:
         e6:46:7d:41:bb:df:4f:94:20:03:16:9c:60:91:8f:12:7f:98:
         5e:47:73:a7:6d:eb:c2:3d:da:fc:39:8b:03:42:14:88:72:40:
         70:ff:b6:f9:3e:95:16:af:4a:39:67:b5:30:ac:b2:a0:ad:46:
         6e:c6:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:26 2024 by rpki-client on console-fra.rpki-client.org