Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File:                     lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier:          svlR+K7dT3QYUuR0eXd6+moAF3acMjDO6cZTNNMueIY=
Subject key identifier:   D8:36:53:CC:72:DD:71:20:51:A2:D1:CD:75:F5:A5:88:38:C2:2D:50
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer:       /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial:       01935508C958BF0C693F1B1011D3EA59116D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number:          0ACF
Signing time:             Fri 22 Nov 2024 18:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:59 +0000
Files and hashes:         1: 7hqrQiwuo9vc2A0W22l55ns2t2w.roa (hash: Wttxsv+QDOB3rTQJmGLRAi8J+zSI/yaZ/VkBvnPvQ3s=)
                          2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: HeYwycl7xwMmrmQbeatEy65IK44W4zRE6ODqE/aQb1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:c9:58:bf:0c:69:3f:1b:10:11:d3:ea:59:11:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
        Validity
            Not Before: Nov 22 18:00:59 2024 GMT
            Not After : Nov 23 18:00:59 2024 GMT
        Subject: CN=d83653cc72dd712051a2d1cd75f5a58838c22d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:3e:23:83:50:2c:62:a9:8d:15:c2:9b:3e:
                    22:5b:54:5c:fd:78:4d:22:ea:58:8c:b4:db:87:66:
                    0b:30:6e:6a:51:92:a7:99:ef:4d:b5:29:e6:2e:18:
                    1d:f4:92:15:84:3f:81:bf:7f:0a:83:58:c1:58:58:
                    40:a1:e4:5c:77:a1:4b:d1:c7:a5:26:31:d9:d2:a6:
                    7d:34:ce:13:a0:02:0a:53:33:7e:c7:06:4e:85:00:
                    26:60:1a:a0:c1:d0:6b:75:e8:df:c7:0c:c6:71:37:
                    2a:30:c6:19:3f:91:2c:77:2a:79:0a:f8:33:67:a3:
                    3a:fc:21:0a:04:6b:f5:66:be:47:4b:9a:64:e1:a0:
                    9c:10:92:ea:a5:22:0c:24:da:ef:80:ab:8a:eb:e3:
                    94:04:ca:f2:1b:dc:cf:26:23:5f:aa:d4:95:5d:9e:
                    1a:1f:7e:05:80:66:cc:74:63:18:ee:1b:04:df:71:
                    78:6a:71:7e:1d:b3:a8:3f:33:4c:ee:3c:3f:d0:0a:
                    74:81:4f:da:5a:07:16:72:31:57:7f:7f:c3:01:b1:
                    0a:49:99:e0:d8:ab:35:d2:2c:14:e5:03:88:32:de:
                    a4:21:55:27:20:dc:e3:3d:c8:80:e5:b1:0d:66:73:
                    09:7d:f9:25:61:b1:16:9b:f2:ac:ba:66:b3:f5:da:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:53:CC:72:DD:71:20:51:A2:D1:CD:75:F5:A5:88:38:C2:2D:50
            X509v3 Authority Key Identifier:
                keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:e8:24:14:41:7c:32:60:b5:07:7f:8f:c7:bb:fa:0d:3b:
         bf:a8:4b:62:fd:9d:c7:6e:41:d0:cd:cf:cf:1a:6b:02:e7:13:
         3e:3d:4b:ff:bc:5d:e8:77:f3:f0:dd:3e:7e:59:aa:a5:64:9e:
         0d:5f:2f:95:5c:26:b2:2a:da:61:ed:24:47:be:6d:98:e0:aa:
         24:28:17:c7:90:3b:8c:31:9e:85:d6:76:33:e1:01:46:26:d4:
         47:6b:f8:b5:de:09:93:99:e2:dd:7d:cf:2e:3d:f8:07:c0:be:
         39:87:dc:8d:20:5d:f3:58:8b:02:94:8e:78:4f:5d:0b:63:a9:
         53:98:0d:1b:8c:34:18:5b:71:f0:98:49:aa:3c:a4:3f:c5:01:
         13:0e:9d:c2:f4:a8:d2:fa:f3:02:fa:58:2c:4d:b3:d9:22:c4:
         6b:21:24:90:d5:da:60:6a:81:88:12:05:95:40:4a:e8:2a:ab:
         60:97:08:42:6f:b5:9b:2c:f4:a5:4e:b1:a8:74:85:95:9a:2a:
         c7:f3:0b:f4:27:12:b8:d6:98:9e:8b:e6:23:1b:cc:15:35:79:
         4d:24:a7:85:ef:78:cd:12:90:20:1c:98:ce:d7:32:79:56:1a:
         b2:4f:93:c3:24:a9:37:3b:8b:31:66:61:2b:80:06:19:ae:43:
         96:e7:6a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCMlYvwxpPxsQEdPqWRFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MGM2ZDc4N2U2YjVlYjY0MjQ4ZGQ5YTdhMTA2NWIxMDUz
Zjc0NTgwHhcNMjQxMTIyMTgwMDU5WhcNMjQxMTIzMTgwMDU5WjAzMTEwLwYDVQQD
EyhkODM2NTNjYzcyZGQ3MTIwNTFhMmQxY2Q3NWY1YTU4ODM4YzIyZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp0+I4NQLGKpjRXCmz4iW1Rc/XhN
IupYjLTbh2YLMG5qUZKnme9NtSnmLhgd9JIVhD+Bv38Kg1jBWFhAoeRcd6FL0cel
JjHZ0qZ9NM4ToAIKUzN+xwZOhQAmYBqgwdBrdejfxwzGcTcqMMYZP5Esdyp5Cvgz
Z6M6/CEKBGv1Zr5HS5pk4aCcEJLqpSIMJNrvgKuK6+OUBMryG9zPJiNfqtSVXZ4a
H34FgGbMdGMY7hsE33F4anF+HbOoPzNM7jw/0Ap0gU/aWgcWcjFXf3/DAbEKSZng
2Ks10iwU5QOIMt6kIVUnINzjPciA5bENZnMJffklYbEWm/Ksumaz9doNgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg2U8xy3XEgUaLRzXX1pYg4wi1QMB8GA1UdIwQY
MBaAFJYMbXh+a162QkjdmnoQZbEFP3RYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGd4dGVINXJYclpDU04yYWVoQmxzUVVfZEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNWFiMTYtMjIyOC00ODhlLWIxNTIt
ZWIwOTIxODk1NzE0LzEvbGd4dGVINXJYclpDU04yYWVoQmxzUVVfZEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wNWFiMTYtMjIyOC00ODhlLWIxNTItZWIwOTIxODk1NzE0
LzEvbGd4dGVINXJYclpDU04yYWVoQmxzUVVfZEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm23oJBRB
fDJgtQd/j8e7+g07v6hLYv2dx25B0M3PzxprAucTPj1L/7xd6Hfz8N0+flmqpWSe
DV8vlVwmsiraYe0kR75tmOCqJCgXx5A7jDGehdZ2M+EBRibUR2v4td4Jk5ni3X3P
Lj34B8C+OYfcjSBd81iLApSOeE9dC2OpU5gNG4w0GFtx8JhJqjykP8UBEw6dwvSo
0vrzAvpYLE2z2SLEayEkkNXaYGqBiBIFlUBK6CqrYJcIQm+1myz0pU6xqHSFlZoq
x/ML9CcSuNaYnovmIxvMFTV5TSSnhe94zRKQIByYztcyeVYask+TwySpNzuLMWZh
K4AGGa5DludqJQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:29 2024 by rpki-client on console-ams.rpki-client.org