Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          Hmhx4D5r5TJTQWrWbLVUuNSlDrph+9u0vp8JNTHh+Co=
Subject key identifier:   74:CC:8F:10:BC:4D:BB:E9:9F:77:B9:C0:02:7F:8F:09:A7:E8:E7:46
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       018F88925335DD1113E94FF337887086198D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          0AB7
Signing time:             Fri 17 May 2024 22:00:41 +0000
Manifest this update:     Fri 17 May 2024 22:00:41 +0000
Manifest next update:     Sat 18 May 2024 22:00:41 +0000
Files and hashes:         1: PhV_tsKZnei58iwXwDeSLep-nrU.roa (hash: bJ7n3SxAZ1X19PAYACWN/fXzFCykPAc9KpkO29LxdiY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: UmbcF13aNx60fZoHnxpTTOFr1+5KAep+fTz0GYSt4FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:53:35:dd:11:13:e9:4f:f3:37:88:70:86:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: May 17 22:00:41 2024 GMT
            Not After : May 18 22:00:41 2024 GMT
        Subject: CN=74cc8f10bc4dbbe99f77b9c0027f8f09a7e8e746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:73:84:61:66:b5:ad:74:16:ec:59:fb:45:
                    d3:16:f6:0a:f1:7c:0d:69:1c:04:c3:10:c4:d0:54:
                    a1:04:bc:da:2f:39:aa:ac:7c:84:d2:58:9d:76:2b:
                    17:cd:2a:29:04:a8:f6:0d:2d:85:3c:3f:34:8c:05:
                    22:40:12:59:36:3f:25:8f:1e:c9:1b:05:ae:34:da:
                    b7:28:47:8c:d7:46:cb:63:76:67:d2:13:2b:1c:d9:
                    49:85:44:cc:b7:e6:cc:ad:59:bc:11:6a:35:ce:05:
                    c7:88:00:a8:0c:70:5c:e2:d0:f8:56:39:c8:04:db:
                    05:74:67:02:86:f4:1e:cf:14:03:7b:e4:6f:10:f7:
                    3c:25:38:eb:61:22:c4:cb:6f:40:f0:18:1f:9b:d6:
                    8b:fe:c0:fb:bb:eb:c4:74:aa:6b:89:72:03:4b:91:
                    bb:9f:b5:93:ea:79:dc:11:b6:00:b9:21:4a:45:60:
                    a0:23:ed:3c:75:06:9a:1a:0c:2e:e0:0e:df:dd:43:
                    20:25:d1:55:cb:cf:66:29:e3:2e:47:18:9a:df:89:
                    fa:68:60:ad:61:2a:1b:2e:88:00:6b:9b:3b:c1:08:
                    0c:6f:60:22:58:f9:e9:23:98:b0:65:44:a7:38:b2:
                    c8:70:95:97:68:ab:f4:80:3c:cb:a6:bf:fe:31:1b:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:8F:10:BC:4D:BB:E9:9F:77:B9:C0:02:7F:8F:09:A7:E8:E7:46
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:f1:64:55:f2:3d:a7:8d:59:88:b0:39:de:1d:76:e6:cc:
         6a:02:dd:a0:23:5e:4e:58:f1:cd:74:de:6a:24:ab:90:8b:9d:
         90:1b:20:ab:00:df:de:e0:e8:a2:8f:fe:e2:b6:40:05:b6:12:
         2e:2b:ec:90:6b:c6:71:a3:a8:68:58:87:8a:95:c0:18:f7:46:
         46:ce:8d:cb:e1:ea:a4:dc:db:ae:ba:57:85:8d:2b:57:ce:67:
         2f:4b:a4:5b:3d:05:cc:42:47:7d:51:39:de:ec:ad:df:7b:1c:
         73:30:cf:73:2b:73:46:44:8f:75:99:52:a2:6f:a8:36:3e:b8:
         2b:0a:ec:19:0c:f6:8a:3e:ee:f2:ad:6e:17:02:8e:53:64:9f:
         e0:15:ba:ca:67:5b:f4:58:89:d6:00:de:35:3e:a9:5c:0f:66:
         7f:87:dc:e7:a5:cf:a6:24:fa:c1:ee:bc:47:24:e7:54:cc:e5:
         6a:33:ef:bc:86:89:ca:2f:e8:4b:d4:e2:1f:53:d9:48:19:a1:
         a9:02:82:43:89:d5:f7:25:38:28:d1:72:03:0a:98:27:22:a0:
         c8:c7:c9:37:2f:b4:82:26:b2:f3:6b:43:15:46:91:94:be:1f:
         00:a9:39:25:ae:b2:f6:0b:d9:d7:c5:ee:15:a2:73:70:29:20:
         e6:e4:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:54 2024 by rpki-client on console-ams.rpki-client.org