Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File:                     lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier:          7V4w7fG/m3QYJVeMvWYhOIl1Q18KW815+7REiGwI2fE=
Subject key identifier:   DE:3C:19:8A:72:0B:B1:E4:2D:CF:E2:EC:4F:20:FB:9A:AD:A6:0B:27
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer:       /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial:       019358403B38AAEC5954409CDB94B502DD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number:          08A3
Signing time:             Sat 23 Nov 2024 09:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:24 +0000
Files and hashes:         1: j4luM-N9dq41f9fYUSI4AlX6F6g.roa (hash: 6rlajHZ0kWhB2PziaNidxqQzRSSWVj2vOU9QX5RaQKQ=)
                          2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: it60ETh6uCCgHt+vh4UfvrZD5pz6wwzXd6N9kY3DrN4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:3b:38:aa:ec:59:54:40:9c:db:94:b5:02:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
        Validity
            Not Before: Nov 23 09:00:24 2024 GMT
            Not After : Nov 24 09:00:24 2024 GMT
        Subject: CN=de3c198a720bb1e42dcfe2ec4f20fb9aada60b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:9c:98:0f:4f:b0:0c:70:a1:f9:e1:f1:c8:
                    a3:50:52:78:27:a9:eb:1d:d9:7a:67:ba:c6:70:94:
                    35:c1:fb:13:af:ce:55:f1:48:cc:99:02:d5:18:20:
                    11:a9:66:56:f0:74:1e:07:4c:9a:89:79:8d:5d:db:
                    e9:0c:a7:07:bf:a3:7c:7b:3f:26:b9:ed:67:a4:09:
                    d3:56:ce:c0:58:74:cb:5d:f3:7d:e5:55:3a:3b:d0:
                    bc:cf:15:cc:40:e1:8e:9d:e7:eb:e1:01:d3:fe:24:
                    98:a9:6b:90:dd:a1:5e:8a:b1:93:1a:f2:3d:e5:3f:
                    ae:6a:bc:df:7d:fe:6b:9a:61:e1:39:30:2b:5d:ad:
                    4f:85:8d:d4:f1:34:0a:8f:da:13:bc:3a:52:6d:8e:
                    96:95:ab:73:95:6b:48:84:af:ec:92:74:18:b2:b4:
                    ad:fb:d3:a0:2c:65:07:62:e2:02:a0:b7:e2:27:79:
                    d9:c7:3b:e6:46:ac:81:de:a4:e8:75:7f:be:52:1c:
                    7b:5c:a5:93:ce:05:9f:f3:19:a4:e8:01:58:07:b0:
                    08:cd:0f:d7:64:82:b6:49:92:83:bb:da:12:a2:91:
                    9a:43:94:7b:b1:2d:9f:e3:25:6b:53:d9:a4:55:89:
                    de:9c:da:6a:3b:ad:d1:07:c6:31:b3:30:99:91:49:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:19:8A:72:0B:B1:E4:2D:CF:E2:EC:4F:20:FB:9A:AD:A6:0B:27
            X509v3 Authority Key Identifier:
                keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:8d:ec:56:a0:c3:28:98:22:01:52:bb:45:18:4a:a8:2f:
         cc:16:11:25:4c:95:d5:15:ff:a8:6a:d3:fe:dd:91:dc:76:73:
         92:2e:7d:70:04:03:6b:6f:78:45:9d:4d:93:f0:0d:12:cc:4f:
         0a:89:b2:0c:2d:0b:d3:48:0f:dd:1b:cd:22:f5:5d:48:95:fc:
         92:45:c6:47:dd:62:3b:7a:d1:2c:65:51:e5:cc:80:25:54:c1:
         61:d2:89:68:58:94:20:db:f6:5b:fd:e9:d3:48:8e:96:9b:b4:
         91:0f:17:2d:ff:d7:05:96:a8:2d:b4:d6:17:69:96:7e:23:70:
         12:ee:34:33:bf:bf:d7:65:87:21:e7:d7:12:ca:07:b3:ad:0c:
         01:09:bd:f3:20:b8:46:db:c3:11:86:89:bb:74:c8:98:15:14:
         76:ac:65:be:16:65:bc:0b:48:e2:c8:45:cf:4d:41:90:7a:04:
         71:48:41:18:53:c2:14:6e:ee:45:94:cc:f8:6f:56:64:15:92:
         d5:33:e2:ea:57:f0:0a:b5:df:05:e0:7a:18:ad:44:31:24:7f:
         71:ea:1d:39:a0:93:6a:88:68:5e:2f:00:06:9f:dd:26:0b:31:
         5a:d1:e9:62:68:d2:87:08:64:eb:29:b8:1b:00:5d:86:01:ba:
         04:2a:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:02 2024 by rpki-client on console-fra.rpki-client.org