Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File:                     lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier:          RCi8sF7zg4TKmX0ll8/1oKmDepFDU0eKL8Lkvy03HZg=
Subject key identifier:   B4:A5:A6:CA:F2:46:5B:C0:2E:9D:2F:BE:A2:10:3F:27:60:FA:D1:74
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer:       /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial:       019352076CDEE47FABB0F32483EE86E794EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number:          11B6
Signing time:             Fri 22 Nov 2024 04:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:38 +0000
Files and hashes:         1: b4qh9xACOq5XZXxhw3kbpvXNMcY.roa (hash: JFLdZICpgQDfQhL52Lu4EoImLg5XPA6RJpZhQoLCIp0=)
                          2: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: wu2OwD4/K+r3beg399nyoCKHP/AAzrovg2XAukVqiNQ=)
                          3: z8wFHcF7NLSbEzwnisx-No4hVvc.roa (hash: +8Ni+4/M3cKKplKn4ugaR4kb6clVsf+wT7vTUwpP4R0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:6c:de:e4:7f:ab:b0:f3:24:83:ee:86:e7:94:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
        Validity
            Not Before: Nov 22 04:00:38 2024 GMT
            Not After : Nov 23 04:00:38 2024 GMT
        Subject: CN=b4a5a6caf2465bc02e9d2fbea2103f2760fad174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:ff:a2:eb:e2:3c:53:7b:7e:4f:3e:ef:40:
                    f3:90:7b:08:4d:1e:e3:47:4b:eb:27:46:73:99:a3:
                    5a:d4:b9:31:22:06:21:d5:1f:62:09:b2:d3:b5:ce:
                    c3:6c:f1:16:d6:aa:5a:d5:08:7c:ed:56:d6:a0:9a:
                    50:a6:85:29:6e:69:73:2b:7f:99:50:d9:40:b0:aa:
                    ad:28:39:6b:c0:8d:4c:f3:41:46:e6:8f:fe:df:a7:
                    6b:2b:57:84:a5:90:11:38:a0:9a:50:94:19:59:83:
                    41:7b:d3:a5:67:7c:5b:ff:e0:7c:f5:3c:71:15:7c:
                    42:07:67:39:e6:1d:b8:cc:53:2e:8f:7a:58:6b:53:
                    1d:a7:4f:97:5a:e8:b0:9a:3a:dc:f8:7b:18:04:1c:
                    d4:7f:1c:c0:4c:fa:dd:09:ed:39:cb:3c:ce:77:74:
                    6b:7a:26:f9:d9:84:4f:80:76:c5:a6:2e:4a:94:be:
                    9e:9f:ba:8f:86:6b:a3:cc:8d:ef:28:43:76:32:f7:
                    63:81:11:59:37:39:aa:55:f3:6f:10:54:6b:a6:d2:
                    87:42:66:d4:d5:ef:19:ab:6d:60:c2:05:f8:24:7d:
                    62:d6:88:4b:dd:03:d7:66:b8:f0:26:70:31:12:51:
                    36:97:49:b9:d9:2f:e7:98:2d:69:6a:89:e8:28:ef:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A5:A6:CA:F2:46:5B:C0:2E:9D:2F:BE:A2:10:3F:27:60:FA:D1:74
            X509v3 Authority Key Identifier:
                keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:84:3b:63:e4:71:73:fe:0e:2f:1c:01:78:96:ab:a0:79:b5:
         6e:3b:a4:cc:04:69:0e:b4:98:e4:68:e6:59:0e:6d:eb:da:57:
         4b:65:8f:84:a6:2d:66:bb:b0:38:6f:d8:2c:c8:25:cd:58:be:
         00:fb:08:6d:73:a7:ad:ba:b3:ae:66:74:33:0c:02:8a:2b:a5:
         c8:74:b0:3e:e7:c1:7e:0b:c2:99:80:9c:45:c8:6b:65:26:78:
         46:6f:aa:1a:b6:67:48:75:d5:be:f8:df:67:17:54:79:84:c6:
         27:8c:ed:71:89:fd:a7:f7:13:d5:c8:ec:73:b0:9b:db:6c:7c:
         bb:aa:06:21:be:d4:75:38:48:24:3d:90:e7:a7:93:12:c9:af:
         1b:7d:a2:a6:d3:71:96:5b:30:75:61:b0:38:48:12:75:f2:1d:
         a6:97:c9:e5:55:8c:79:c2:33:4e:da:d4:fd:ca:d8:4b:fe:db:
         83:a5:70:00:bb:b8:43:69:c0:cf:9f:a6:bb:3a:a3:e1:9f:f8:
         65:ff:3a:0d:9f:c0:4a:2d:d8:de:91:f9:83:c8:7a:a3:75:b2:
         14:06:df:0c:2b:e4:bf:28:1c:db:10:c4:6b:c5:98:07:1e:67:
         61:68:fe:7b:17:41:5e:07:7c:df:11:04:f7:de:ae:b5:23:dc:
         14:75:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:32 2024 by rpki-client on console-fra.rpki-client.org