Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File:                     ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier:          2HbeAVCJVOmoVcYvbTLoxywMMwY52Y4K5lzYiRVSXmE=
Subject key identifier:   07:31:DF:DF:B3:A4:7A:4A:33:A3:D0:BD:B9:74:05:61:F3:3F:EF:FD
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer:       /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial:       019364B2554B2E3E35649785B997446ED3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number:          0975
Signing time:             Mon 25 Nov 2024 19:00:29 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:29 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:29 +0000
Files and hashes:         1: 7jTXb2Y-vOHFYHx8j1pFhbtyGf4.roa (hash: /h+HzqcnF/Uo33wo/0/BPbZ5uuGf8s91M77cg9xhxhw=)
                          2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: GL+IxFOIEXw3e1VleI5CPk0u98iIFznoBVFrSr8n7Vw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:55:4b:2e:3e:35:64:97:85:b9:97:44:6e:d3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
        Validity
            Not Before: Nov 25 19:00:29 2024 GMT
            Not After : Nov 26 19:00:29 2024 GMT
        Subject: CN=0731dfdfb3a47a4a33a3d0bdb9740561f33feffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:0a:2d:62:c6:10:56:cb:f5:3d:f1:e1:20:
                    b9:c7:d7:cd:04:0c:6c:c2:f1:a3:d8:10:24:8a:a6:
                    62:61:dd:a2:e4:a3:29:fe:08:5c:39:7c:bd:57:d6:
                    63:2c:44:37:ac:8e:80:2f:83:92:7f:7b:20:f6:9e:
                    e8:d5:70:5d:a8:f9:70:04:ce:5b:11:a8:85:b0:9b:
                    72:1f:5c:28:0b:5d:f4:20:72:fb:1e:c7:e9:9f:a6:
                    a8:04:9d:4a:9d:69:d7:fc:42:3b:e9:ef:3c:d5:26:
                    47:d1:85:2e:c4:fc:48:34:51:57:97:04:ee:09:8a:
                    50:c6:55:90:70:24:1b:c1:35:bb:24:e6:2c:fe:7d:
                    df:3d:ad:56:e0:6a:77:26:bf:a4:9b:44:1a:34:37:
                    57:a0:48:f6:2a:cb:f8:84:9c:81:e2:61:db:af:77:
                    ee:64:4c:b9:8d:f8:07:7f:fa:75:fe:31:27:40:84:
                    dd:e5:8d:d0:02:57:f3:7f:0d:d6:02:42:9c:1f:1e:
                    ff:56:24:a5:ce:1c:be:35:a8:55:40:b4:26:4e:e3:
                    7c:a6:86:c4:ba:ea:1d:fd:e7:f0:91:f3:68:a0:9c:
                    63:02:83:e7:e9:38:10:99:fa:91:7e:85:c6:24:2c:
                    e9:66:14:ad:84:17:f4:88:ce:0b:d5:b9:69:09:1c:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:31:DF:DF:B3:A4:7A:4A:33:A3:D0:BD:B9:74:05:61:F3:3F:EF:FD
            X509v3 Authority Key Identifier:
                keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:7b:26:95:6f:ab:a9:ee:0b:19:91:dc:c4:8f:88:30:0b:
         54:5c:26:c3:ba:87:0a:09:52:75:51:85:8e:a2:53:f1:b2:50:
         eb:69:e1:c9:f1:65:fc:80:07:b6:56:92:e6:ac:70:44:0e:83:
         38:6b:e3:1c:1f:ea:69:a4:cd:94:85:78:9c:f7:0f:7a:6b:d2:
         53:85:d6:d0:8b:37:62:69:05:ba:79:b7:6d:99:fa:23:df:88:
         13:a1:43:8b:1e:93:3b:44:bb:81:b5:fb:fb:e8:21:8f:d9:b7:
         02:2a:9e:a3:5e:df:63:59:01:a2:b6:2d:09:13:89:a9:dd:e8:
         f1:9a:42:e3:c1:d7:ba:53:a7:c5:90:5a:6c:73:09:7d:ac:c6:
         81:a6:24:2a:e5:b4:a8:9d:ae:d4:e1:ff:93:f4:75:d8:27:01:
         9f:cb:6b:04:a1:ea:8e:13:1b:6b:30:3e:44:c5:e0:b2:83:45:
         8c:e2:fa:db:c1:f7:49:ce:31:97:79:e3:05:14:da:fc:df:57:
         46:ca:c1:ba:f0:99:b9:7b:32:c3:f1:d1:10:59:7d:fa:8f:5d:
         46:e4:da:29:b4:d0:68:27:50:10:4f:98:04:38:26:28:fe:65:
         9d:a9:63:86:1d:39:c2:c9:e1:7c:01:66:3b:98:70:5a:26:88:
         1d:05:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:34 2024 by rpki-client on console-ams.rpki-client.org