Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          7v7YSJ9AMIXwBf9SXmr6OGcsf504oP2lTdeF/BmdTag=
Subject key identifier:   C5:91:78:ED:19:F8:F7:5F:8E:9F:A7:59:16:30:07:E1:A7:F9:A9:1F
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       01935651C6BEC7DCF24F8904D87AEFB9370E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0C4C
Signing time:             Sat 23 Nov 2024 00:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:20 +0000
Files and hashes:         1: 6X-OxNlXuo3jcHegobZ1Q3lfe-s.roa (hash: RAwlQ5FqxhMqiKiLr11juRycFwcaVPyqB79O2YEw+aU=)
                          2: O0vuAvN7_1112yIjdqZzCLEu6Go.roa (hash: etxXhmpgDrLGgzreIRT12R77tWXn5gIXcbT9s8P2H6g=)
                          3: RoQN95RG5fj13aXQGiHNHfQpwHk.roa (hash: AD+Lz26XL/WcbC9G/pIGd5u8k9wuwWeodMj5htn4P3s=)
                          4: Wc9Gd40cZbvZDsuVux1npXj7fTA.roa (hash: Dt3yfGPSkfCG/dhwwGkKR6jtlyfNXsMxjzMSgspE2hU=)
                          5: gvqxPPwx4AOOnIDp-PMQMS3YxWE.roa (hash: B83XaZDlCehGsOqdmZqhTRFrWW+db/nAFhgCwjuaWa8=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: C4Cnj5ICZDIjG2owXLGOUmWdITSfUQub2m9tA5gbAQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c6:be:c7:dc:f2:4f:89:04:d8:7a:ef:b9:37:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Nov 23 00:00:20 2024 GMT
            Not After : Nov 24 00:00:20 2024 GMT
        Subject: CN=c59178ed19f8f75f8e9fa759163007e1a7f9a91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:5e:dc:e8:bb:d7:84:fc:9a:ab:34:6a:f6:
                    cd:6c:f9:92:0a:6b:47:e8:60:64:7a:3d:6c:de:4d:
                    9f:cc:10:47:27:c2:60:67:cf:46:d4:99:9e:0c:6e:
                    ba:9c:38:4a:85:26:c3:bf:47:6d:2b:a9:3f:cc:75:
                    d4:4f:5b:33:93:83:98:23:01:dc:f2:07:15:64:f5:
                    d4:bd:04:ea:5b:87:ec:57:6f:3e:f7:91:b7:b9:ef:
                    d8:0e:89:00:19:79:03:66:57:33:23:aa:77:2a:e6:
                    ba:9d:78:6a:43:7e:a8:06:92:b6:8c:b8:b5:72:7a:
                    3a:05:14:5d:7e:ec:96:2e:de:c7:3c:fa:fd:5e:20:
                    8a:e5:d1:88:14:cc:35:b0:f9:84:64:ff:1d:e0:b6:
                    f9:63:f7:cc:20:4f:fd:46:d7:11:bf:b8:4d:b8:96:
                    d5:c3:74:62:3b:e5:3d:bf:fc:68:d4:ff:e2:fd:ba:
                    d5:77:dc:08:cb:f3:31:c1:fa:46:36:47:a8:da:f5:
                    c6:08:e1:63:09:9a:11:df:64:46:8f:90:bd:81:53:
                    f6:08:b9:fb:e3:f5:14:cd:c4:d1:cb:64:cf:1f:55:
                    83:52:ed:39:91:8b:85:6a:cc:69:7c:f3:91:8c:9b:
                    d4:65:d5:0c:c8:a3:38:ec:59:16:a8:f9:62:ed:40:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:78:ED:19:F8:F7:5F:8E:9F:A7:59:16:30:07:E1:A7:F9:A9:1F
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:68:6c:a1:34:35:d1:ef:b0:70:ad:be:a3:1e:45:4e:28:b0:
         4b:5f:f0:74:92:43:a6:27:3f:32:eb:8a:b2:64:2b:4a:c8:f8:
         63:66:ec:33:60:2b:9b:c7:c0:3a:3e:12:25:46:95:70:bf:7a:
         93:54:28:43:27:87:89:48:00:1a:c7:93:c2:e5:16:1a:b0:2e:
         42:20:4a:2b:ff:41:f2:80:f3:4e:b5:a1:ff:2e:5a:4e:47:4f:
         0f:ee:d9:85:21:99:67:d6:16:37:c7:ff:46:bb:c1:f5:78:62:
         de:bc:1a:a6:03:c7:92:e8:b5:8d:43:18:f0:8f:01:8b:63:de:
         51:2e:74:df:43:63:ba:fd:cb:39:0f:34:e2:05:a7:0c:df:b8:
         83:5e:23:09:59:d3:38:83:43:38:d5:54:fc:45:af:8c:dd:f1:
         91:2e:25:a0:6b:21:1b:bd:2e:b3:78:a2:65:fd:9b:90:ca:fe:
         e7:64:05:cc:8c:fa:fa:81:0d:b0:a8:83:b1:c7:23:d8:3a:20:
         97:10:fa:7d:bd:53:40:ae:9f:5d:96:76:ba:de:a9:d4:b8:bb:
         91:d9:96:5f:1c:b0:1a:7c:04:ac:52:33:c3:98:7f:d1:80:3e:
         f4:ae:80:ed:c8:51:0d:f1:81:88:a1:70:2b:8c:11:7c:58:1d:
         65:fe:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:03 2024 by rpki-client on console-ams.rpki-client.org