Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File:                     lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier:          7hXTO60vGv0XBtZlM1EgrkU02S91Bj7JrtiXp+w6QmQ=
Subject key identifier:   43:E7:51:72:F7:6A:87:0D:B7:C5:AE:DF:DB:E0:9F:2D:3E:D4:EC:04
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer:       /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial:       019352076CBA0379016493DE6E586D8F8D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number:          0949
Signing time:             Fri 22 Nov 2024 04:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:38 +0000
Files and hashes:         1: 2UMLwzKM2W-T7ofXE54FF3ZCvVU.roa (hash: u6bIEOuVnd7QBp1Y5cMrxN7p48reYsMrFcyn/QdxIoY=)
                          2: 9bLSB-NanigL8dKyQio3cXa2zOc.roa (hash: IIsbKS2ycb8d/MQJifg/2b1/+WRjk3hd3CxOYymFktI=)
                          3: ShMFVu7J7steUB1pNP3Dj7oVAgI.roa (hash: s443yPaFsZs+pnSGHJ7/+5YnhtFDumoGdQQGsL+PpoU=)
                          4: c44saO_74WqYPAu9UxLv52EyWJE.roa (hash: 2cfairtrKasX01Xll7L0D41o9hWRF7rCduyFgatM7Yk=)
                          5: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: hFGIdrtMJc/k2GQ+4PiwwGGWQt2xytfLB4FlZ2n+d8U=)
                          6: tpVFtOCTVjH-iTpQ-fzEcKiv8l8.roa (hash: oWIwSvnTsWu9V0Zv/QuoNlYCmAHobFmRm/GT1LLerpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:6c:ba:03:79:01:64:93:de:6e:58:6d:8f:8d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
        Validity
            Not Before: Nov 22 04:00:38 2024 GMT
            Not After : Nov 23 04:00:38 2024 GMT
        Subject: CN=43e75172f76a870db7c5aedfdbe09f2d3ed4ec04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:f0:f2:51:3c:e2:ac:19:b5:29:21:51:46:
                    a6:be:a0:53:d3:bc:c8:5f:0b:b0:b7:85:41:7c:0c:
                    87:95:9d:32:a5:bd:c0:12:ff:43:d9:40:ab:7d:24:
                    21:16:c6:04:66:fb:50:d0:ad:eb:95:3c:30:de:23:
                    03:05:4d:1c:fa:66:d0:b9:e0:3f:a5:5e:86:cc:d1:
                    d5:9c:1b:72:9a:5a:ae:96:10:51:ac:3c:69:81:67:
                    3a:80:8a:30:b5:72:35:ce:33:84:5e:26:25:17:db:
                    21:ca:2f:30:02:10:78:5b:81:04:90:74:41:46:97:
                    b0:aa:49:ba:a2:e1:97:9b:30:43:b3:de:b9:97:60:
                    78:21:f9:28:8d:85:27:eb:4a:dd:ca:3a:03:0f:6e:
                    08:ac:26:6b:ac:6f:83:aa:ed:ec:a5:0e:8f:d5:e3:
                    00:3f:4d:a6:87:8b:c1:90:7b:e8:ea:cd:98:2e:14:
                    03:ba:fa:30:63:f3:34:7b:b0:52:a1:ac:21:49:a6:
                    b6:3f:a0:db:cb:d2:d7:00:1e:c9:0b:9e:cb:36:c4:
                    4c:d0:35:33:0a:02:4a:8a:e8:0f:1d:fb:05:dd:b7:
                    ba:78:7b:35:7c:2e:f9:c8:be:b4:75:ee:b4:c6:31:
                    e3:f2:82:80:17:d3:b5:b0:1a:aa:2b:20:20:19:62:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:51:72:F7:6A:87:0D:B7:C5:AE:DF:DB:E0:9F:2D:3E:D4:EC:04
            X509v3 Authority Key Identifier:
                keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:b6:e2:bf:88:8c:d1:5e:a1:0a:98:89:08:88:5c:b6:0e:
         e6:b6:bf:8f:b3:65:45:a7:9d:04:d7:d6:29:95:ac:e3:1e:44:
         9d:dd:6a:9e:ff:6f:95:2c:50:5f:89:0b:e3:68:ba:bb:34:bd:
         49:26:b7:35:33:23:57:5f:49:cd:0c:8d:91:7d:ab:3a:05:af:
         6e:2e:a9:9c:66:20:c9:7d:67:13:54:45:3e:94:c0:b8:f0:ad:
         fa:fa:da:6a:af:46:c9:cc:9c:2f:90:b3:87:0c:80:04:99:e0:
         a4:88:a8:94:18:76:cb:a8:77:59:2f:14:53:b1:b8:81:d4:a5:
         29:e4:52:01:6e:e1:e8:0a:fb:a7:44:38:47:d0:1b:9f:59:83:
         13:e7:fc:16:11:c4:20:03:af:a3:05:49:b4:1d:b1:be:d1:b1:
         d3:53:75:0a:36:3b:48:c0:12:51:d5:ab:31:0d:0d:3c:6a:e9:
         90:5a:17:19:3c:18:ec:bb:52:cf:4d:35:f8:5b:71:4d:e5:c6:
         d4:d4:a5:83:cc:9f:88:d0:c7:c4:a1:c3:59:2a:f9:09:a8:46:
         82:7c:90:73:e8:d1:7e:fc:a8:0d:eb:4a:4a:50:5c:26:0f:18:
         4d:88:87:4d:a8:a4:57:b1:84:a4:4e:d7:10:17:f3:21:f7:ca:
         e1:65:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:59 2024 by rpki-client on console-fra.rpki-client.org