Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          Jfu+Lw1KH3WtCeBf9oaLcCF5PdA9IEf60vPOExSFmlk=
Subject key identifier:   DE:4C:3E:F3:6A:AB:26:01:ED:D4:95:5B:2B:95:DB:D2:6B:DC:FA:A7
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019369A1AB615251DA36BFD9C61302909CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          05F0
Signing time:             Tue 26 Nov 2024 18:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:23 +0000
Files and hashes:         1: JshunVg1rqFV0If_3b0Q_aVYAog.roa (hash: ib8jJ4yI2KBFuRnPQ064XelUDtCrBhSXQ9jAziIITH0=)
                          2: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: X/idkkw7SRFAt70RfUSbWW5A38eRgpCcr1juastaaZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:ab:61:52:51:da:36:bf:d9:c6:13:02:90:9c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Nov 26 18:00:23 2024 GMT
            Not After : Nov 27 18:00:23 2024 GMT
        Subject: CN=de4c3ef36aab2601edd4955b2b95dbd26bdcfaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:16:53:28:ba:f7:d9:dc:2c:a9:ee:d0:34:
                    a7:95:ee:1c:ed:2e:85:c3:06:b6:1f:7a:28:32:2f:
                    fd:37:83:8e:7e:00:c2:82:a3:71:5b:0c:8d:7d:7b:
                    00:48:89:54:cf:84:73:f2:a6:cd:4c:7d:10:6e:6c:
                    69:cc:a5:24:d2:14:28:67:1e:80:d6:17:68:23:b7:
                    70:99:cc:70:fe:a7:ff:42:a0:1e:d6:4f:d7:5a:e2:
                    3c:27:1b:13:1e:2e:df:96:2c:48:0a:89:c6:d7:7d:
                    ee:bc:26:2d:e2:be:e5:11:f5:bf:af:74:6f:f0:fd:
                    51:72:d9:f8:ea:84:00:d1:f5:e0:83:fe:8a:68:98:
                    48:55:d8:9e:74:3a:b1:ee:08:6e:40:62:fe:66:28:
                    b2:11:d1:6c:b4:73:09:69:27:35:b4:8b:c9:99:68:
                    c2:12:d5:6b:df:56:1c:1a:67:2b:69:8e:18:90:15:
                    d0:7a:26:03:0b:3b:a1:73:00:6b:ec:59:0a:f3:91:
                    af:7f:c1:cf:b0:98:0c:5f:77:91:f5:98:3a:82:79:
                    c0:c2:79:85:35:8b:d0:d0:b1:be:ba:e7:e2:33:e0:
                    77:3d:b5:a6:7a:a1:b7:c1:36:6e:29:c7:c7:35:05:
                    ff:16:0a:08:ed:95:22:6e:fa:45:3e:2d:b5:66:0c:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4C:3E:F3:6A:AB:26:01:ED:D4:95:5B:2B:95:DB:D2:6B:DC:FA:A7
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:13:f0:7a:00:57:d8:39:0a:fb:76:50:e9:ef:b5:7a:15:
         33:93:79:7a:a7:31:78:4f:03:63:e5:06:9d:77:cc:a0:3f:be:
         cf:d1:a9:b3:13:2f:f9:5d:10:e8:39:4c:9a:fa:6f:a1:c5:1c:
         7e:72:fa:b5:35:73:06:25:7a:33:21:58:df:46:d9:96:b9:38:
         e4:fd:e5:f5:6f:ac:e1:83:cf:99:5f:d3:5f:0e:9a:00:22:05:
         12:ea:a9:85:4c:d8:28:84:98:34:ec:1c:7e:75:9d:6f:c7:73:
         22:7c:6a:7d:9c:56:1c:c2:e8:21:77:bb:f8:82:98:46:6a:66:
         40:89:61:90:ef:fa:3d:4e:65:7d:6c:96:de:be:6e:40:05:ae:
         e4:16:3a:70:9d:7d:da:34:de:70:49:1f:fc:49:ed:17:f0:7e:
         74:7d:75:28:4d:cf:a3:38:5e:99:45:cf:ff:c4:4d:0d:68:4b:
         0a:41:62:aa:42:9b:1d:29:f4:c7:a9:86:55:7c:74:cd:2e:a1:
         35:41:bd:69:b7:9d:5f:7d:e0:e9:0c:fc:17:e2:0f:50:f4:59:
         c4:03:12:ec:4a:a1:18:a2:da:03:2d:2f:4a:bf:07:2e:fd:a7:
         5f:ce:7b:e5:ad:dd:55:df:e2:f0:3e:ae:a2:e0:f5:67:74:40:
         b7:6d:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:58 2024 by rpki-client on console-fra.rpki-client.org