Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File:                     S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier:          Cso/dgMHpB+k4068Wbi/SAoEbA2YofZqox+/gB/gdJI=
Subject key identifier:   52:D6:47:14:5F:C8:F2:7A:F6:84:79:16:64:CA:B0:E5:97:0C:8F:BE
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer:       /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial:       019357646241241F90E00A4AEEF3E04FDD3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 05:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:16 +0000
Files and hashes:         1: DwSsD4Z4zweBJgTsJquv5pFelI8.roa (hash: VLmUjM7Hp45g9QbZ2eXZOTaDU41X6ognuymVTGKyDuE=)
                          2: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: uEH5gzeRcSXp/tTzlvFssFFGmanZT7cyF1wckdG+/GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:62:41:24:1f:90:e0:0a:4a:ee:f3:e0:4f:dd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
        Validity
            Not Before: Nov 23 05:00:16 2024 GMT
            Not After : Nov 24 05:00:16 2024 GMT
        Subject: CN=52d647145fc8f27af684791664cab0e5970c8fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:af:c3:19:72:57:43:28:0b:d5:c8:6e:40:
                    42:16:44:76:2b:4c:b5:5a:86:88:cc:a5:99:29:57:
                    66:fa:6e:ff:5f:94:7c:b6:48:42:67:94:fb:4e:14:
                    9f:93:8a:52:98:76:1a:0b:e4:e0:49:1f:74:12:d3:
                    d5:c6:37:67:50:18:9d:6f:96:9c:0c:11:28:ac:27:
                    a1:74:a1:ab:25:b9:92:0b:0d:00:56:44:40:46:58:
                    f4:22:d6:a1:7e:e6:88:b5:8a:6e:56:35:72:0b:65:
                    ca:a1:29:8f:a8:88:a8:e3:30:c4:37:4b:7a:5f:0e:
                    56:55:37:53:76:c6:1c:d0:64:bf:95:9c:a0:37:8d:
                    99:79:72:22:e9:1c:68:f8:0a:79:c6:e3:88:e5:61:
                    05:22:c6:c5:ee:e2:9e:b7:ff:50:5f:e9:a6:79:32:
                    ee:bd:7c:86:a1:d0:34:d6:c5:38:de:8a:34:bd:d3:
                    3c:2c:b5:d7:89:57:5a:21:e2:b0:19:53:1a:16:54:
                    f3:8b:e3:02:d7:9e:16:84:0f:b3:09:72:8c:52:f9:
                    6b:ce:b7:16:09:a4:f6:f8:89:cb:84:c1:93:2c:58:
                    23:66:e4:b1:39:b9:ca:8d:f6:14:68:68:48:09:25:
                    c5:f6:1c:54:3a:e9:63:37:bc:a4:d4:99:c7:57:bc:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:47:14:5F:C8:F2:7A:F6:84:79:16:64:CA:B0:E5:97:0C:8F:BE
            X509v3 Authority Key Identifier:
                keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:74:05:66:9b:a6:ee:59:c6:a3:2b:98:2f:46:87:e9:7d:83:
         9d:2e:ae:b4:2a:84:83:c8:81:b0:28:27:8d:5d:c9:72:67:4e:
         99:8f:8f:ca:71:6b:7d:ff:c1:fa:f1:f5:60:2a:52:7c:d1:f0:
         b1:c3:60:81:4c:c4:a6:21:87:bc:40:f3:31:01:a9:55:a7:ba:
         5b:d9:1c:92:83:b6:ad:c6:3b:bc:6a:15:62:71:39:56:95:82:
         4d:67:0f:29:2e:62:c8:a5:b4:73:67:2b:ca:f9:ab:b0:ed:4e:
         32:79:2c:78:23:66:22:fd:9f:96:58:df:a2:a1:f4:9d:0e:ca:
         47:e5:df:97:f3:38:d9:a5:c8:fa:7e:42:66:43:78:c3:2c:c3:
         04:17:72:2f:74:59:82:fb:ba:fe:27:13:ab:95:3c:c2:ca:66:
         f5:03:ba:68:b4:b4:19:47:a5:a7:a2:40:64:0c:bd:92:00:ef:
         dd:bf:63:7b:8b:b3:b9:11:0f:3e:b5:97:e6:5a:80:78:04:df:
         6e:e3:42:e7:fb:29:12:ab:63:f8:2a:49:3a:39:7d:75:0f:0e:
         38:fc:27:9b:2c:8c:f2:83:3f:e9:7d:34:b6:20:91:13:32:c1:
         ac:f4:c7:dc:0a:23:13:45:02:39:de:3a:ee:d9:02:9d:30:f2:
         42:19:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:49 2024 by rpki-client on console-fra.rpki-client.org