Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          pN1TUx5pZ7rFMFsE2YRN09cDYvobYCQTu6nk/2H2kyg=
Subject key identifier:   E1:A7:B1:79:FA:D0:59:CA:1D:D6:55:03:7A:6C:03:E2:90:DE:C0:94
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       0194BAF20B7CCA86118630439E831F8D3A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          0D68
Signing time:             Fri 31 Jan 2025 06:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:12 +0000
Files and hashes:         1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: zX5ZUxrUOpxxd1+sCggdsbnLyLfWf8xEBhUqK6n/zcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:0b:7c:ca:86:11:86:30:43:9e:83:1f:8d:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Jan 31 06:00:12 2025 GMT
            Not After : Feb  1 06:00:12 2025 GMT
        Subject: CN=e1a7b179fad059ca1dd655037a6c03e290dec094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:34:6f:80:89:b3:d9:22:f0:a8:ff:f3:c0:
                    37:44:eb:29:e5:5d:0e:35:03:cb:7f:3a:26:57:a6:
                    3a:62:40:67:cd:2d:d6:3d:3a:aa:a1:63:ab:c0:a2:
                    c8:21:3e:06:42:8c:87:b2:76:a8:c1:9c:54:fb:8b:
                    0a:17:06:3a:01:bc:7e:c6:b1:06:b3:c2:17:f8:84:
                    0d:7d:9c:d2:0c:5c:be:9b:d1:fc:6e:74:82:5d:88:
                    85:88:8b:63:fa:2a:08:db:86:04:9b:6b:b0:42:c3:
                    d9:79:4a:82:61:db:94:06:58:e4:54:35:20:d2:1b:
                    c7:8c:86:98:c9:7e:71:db:2c:76:7b:b7:5a:14:9d:
                    8b:ba:9f:e4:35:6c:6c:6a:e7:6c:4d:55:c6:24:ea:
                    ca:46:ee:54:81:2f:52:d8:43:b0:44:d4:f1:85:c0:
                    2a:b4:ea:19:ab:6a:0a:81:c9:54:6f:da:4e:29:81:
                    9f:7b:94:9e:e0:72:b3:b4:42:20:f6:33:54:b4:9d:
                    ee:85:66:eb:f8:95:91:e8:36:cc:d8:a8:df:5f:e1:
                    be:ba:0e:02:cb:05:cf:c1:9a:06:84:a3:81:3f:b4:
                    ca:61:0c:f2:29:97:ba:b1:e6:b5:2f:56:aa:f6:af:
                    78:ca:4d:5a:fe:3e:21:3b:b0:74:2a:42:bf:d4:19:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:B1:79:FA:D0:59:CA:1D:D6:55:03:7A:6C:03:E2:90:DE:C0:94
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7f:a4:33:f9:64:2a:fb:75:42:9f:4a:cc:ca:af:01:51:26:
         8e:a0:20:75:f1:5a:bf:97:f7:dc:6f:d3:c8:fd:df:bc:a3:96:
         2a:1b:89:29:0b:28:37:a1:5f:f7:24:74:91:29:56:f3:ec:63:
         c5:64:14:0e:53:b6:f6:a6:91:27:bf:0d:e4:67:4d:93:c0:b0:
         62:62:22:ee:83:33:30:da:b0:86:ec:f1:6d:d8:5b:bc:aa:0b:
         1a:17:2b:5c:10:b8:66:50:15:8f:ec:fd:d8:94:2b:82:31:ac:
         51:34:ee:5c:c2:ba:68:75:8b:d6:df:17:e1:55:11:1c:21:12:
         2c:29:61:23:19:80:5e:80:1d:be:b7:fd:2c:68:ec:31:d8:80:
         bf:4b:2a:6b:90:73:dd:5b:09:e1:4d:65:fa:3a:56:28:c0:38:
         71:6d:24:a9:a2:c8:5f:27:16:eb:cf:e9:ef:a3:b6:87:99:c7:
         1d:89:00:fb:63:00:1d:8a:cf:8f:20:4f:ec:ad:56:8d:f7:7a:
         6f:69:3a:ce:b5:70:ab:b7:31:4a:99:c3:0a:47:2e:25:0c:18:
         c0:83:07:c6:f7:94:f9:6b:59:6e:aa:0a:e9:df:6d:76:39:f7:
         1f:02:24:16:15:b1:46:a2:9c:42:8c:d8:46:ad:36:bb:25:0b:
         11:cf:be:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68gt8yoYRhjBDnoMfjToUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4
NjljZWMwHhcNMjUwMTMxMDYwMDEyWhcNMjUwMjAxMDYwMDEyWjAzMTEwLwYDVQQD
EyhlMWE3YjE3OWZhZDA1OWNhMWRkNjU1MDM3YTZjMDNlMjkwZGVjMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTA0b4CJs9ki8Kj/88A3ROsp5V0O
NQPLfzomV6Y6YkBnzS3WPTqqoWOrwKLIIT4GQoyHsnaowZxU+4sKFwY6Abx+xrEG
s8IX+IQNfZzSDFy+m9H8bnSCXYiFiItj+ioI24YEm2uwQsPZeUqCYduUBljkVDUg
0hvHjIaYyX5x2yx2e7daFJ2Lup/kNWxsaudsTVXGJOrKRu5UgS9S2EOwRNTxhcAq
tOoZq2oKgclUb9pOKYGfe5Se4HKztEIg9jNUtJ3uhWbr+JWR6DbM2KjfX+G+ug4C
ywXPwZoGhKOBP7TKYQzyKZe6sea1L1aq9q94yk1a/j4hO7B0KkK/1BlGuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGnsXn60FnKHdZVA3psA+KQ3sCUMB8GA1UdIwQY
MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt
YTAwMGQ3NjllMDI2LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2
LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon+kM/lk
Kvt1Qp9KzMqvAVEmjqAgdfFav5f33G/TyP3fvKOWKhuJKQsoN6Ff9yR0kSlW8+xj
xWQUDlO29qaRJ78N5GdNk8CwYmIi7oMzMNqwhuzxbdhbvKoLGhcrXBC4ZlAVj+z9
2JQrgjGsUTTuXMK6aHWL1t8X4VURHCESLClhIxmAXoAdvrf9LGjsMdiAv0sqa5Bz
3VsJ4U1l+jpWKMA4cW0kqaLIXycW68/p76O2h5nHHYkA+2MAHYrPjyBP7K1Wjfd6
b2k6zrVwq7cxSpnDCkcuJQwYwIMHxveU+WtZbqoK6d9tdjn3HwIkFhWxRqKcQozY
Rq02uyULEc++PQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:12 2025 by rpki-client on console-fra.rpki-client.org