Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File:                     LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier:          DQ4CjlSEZBv0oG+LzNVw+VWVsEIU8LgKSdJkeqWSkXc=
Subject key identifier:   AE:EF:E4:27:F6:74:63:1A:56:B3:CC:48:6F:37:B4:54:CF:B3:17:E9
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer:       /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial:       019355E41947CBEF5317594D85605BFBB960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number:          0BF9
Signing time:             Fri 22 Nov 2024 22:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:32 +0000
Files and hashes:         1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 3kNpa7yqr1n/ijLnZqnLfyg9Um+F/BiQJW6ZUOCG5fY=)
                          2: oiGEPig_MWt2Tjhol_VI2Ys_9kQ.roa (hash: swSM228e6N+HikfI2gosftImWT36zpNYsonAnVvdp+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:19:47:cb:ef:53:17:59:4d:85:60:5b:fb:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
        Validity
            Not Before: Nov 22 22:00:32 2024 GMT
            Not After : Nov 23 22:00:32 2024 GMT
        Subject: CN=aeefe427f674631a56b3cc486f37b454cfb317e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:fc:42:65:60:ec:8f:ee:8b:7b:9d:76:b6:
                    6c:f5:c2:71:78:50:04:de:d8:19:31:6d:1d:18:51:
                    fa:4b:cf:7a:95:b4:27:d8:51:b9:49:6d:69:33:9d:
                    50:2c:19:0f:07:5c:a1:c5:b1:ed:82:f5:6a:70:45:
                    48:e4:45:13:bb:58:2b:6b:6b:74:a5:0a:c8:6c:1f:
                    a8:02:f4:a8:a2:0b:23:af:c1:dc:89:d7:0f:07:7d:
                    af:6d:73:99:f3:db:2f:e7:4f:e0:5e:3d:05:cb:e9:
                    4d:b8:c0:0a:24:ed:c7:f4:5f:fc:95:46:73:c3:a6:
                    75:de:1a:40:19:82:95:a1:c4:32:14:68:88:ee:30:
                    36:dc:2f:df:7f:fd:e5:a1:7f:6f:a0:4f:35:87:00:
                    8d:ed:8c:7b:ec:12:35:d7:5d:fa:e1:73:b3:18:e9:
                    f7:30:97:41:7f:fe:e1:ef:3b:72:a1:e3:98:43:37:
                    5e:9c:fb:c2:63:e8:a2:74:cf:44:32:80:27:6a:96:
                    b4:64:cd:02:8d:f4:4c:c5:e3:b1:b1:8c:c6:fb:04:
                    7f:23:ae:b8:eb:90:d2:b5:66:ce:12:bb:8e:d6:9c:
                    06:2f:9f:80:1c:29:40:ff:fc:93:fa:1b:2a:8d:ec:
                    ca:14:04:f6:bb:6c:5e:65:6c:23:f2:70:7d:90:19:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:E4:27:F6:74:63:1A:56:B3:CC:48:6F:37:B4:54:CF:B3:17:E9
            X509v3 Authority Key Identifier:
                keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:e6:3c:f7:8c:14:f4:62:0e:5b:d5:2d:ed:a5:6e:ee:95:
         e4:d2:34:e1:c1:1d:ce:fc:13:95:23:7f:f0:48:a8:e4:35:47:
         69:33:b5:f7:ac:63:2a:a6:c5:8b:31:eb:ab:56:2e:54:99:e2:
         f9:a7:09:74:24:c9:3c:81:36:98:8d:ef:7d:d8:1b:56:d8:e0:
         ee:88:e4:d7:cb:7e:8b:4b:0a:8a:92:cf:8b:f0:15:1c:d9:1c:
         8e:54:26:fc:f3:08:3c:97:18:f5:ac:a2:14:1c:7e:a0:f1:ac:
         d1:e3:a3:8e:18:0c:68:b1:a3:4e:a5:74:f4:0b:e1:9d:c1:af:
         56:25:fa:68:11:b3:35:44:c8:bd:70:86:5f:54:b0:46:63:85:
         f0:a2:f9:d3:ff:f8:15:f9:4f:d4:6b:be:c0:87:0e:54:b6:c0:
         bc:31:21:91:34:56:f4:e6:0f:f1:59:0f:6b:93:59:d2:1c:bb:
         0c:81:7f:c9:a0:2c:58:75:86:44:42:30:73:73:11:61:db:76:
         ff:4e:d5:13:7f:82:a9:83:b1:a2:26:17:bd:b0:44:30:90:af:
         bb:81:87:73:ae:8b:f8:22:0e:51:cd:0f:d1:c5:4a:c1:7e:b0:
         a8:8a:95:ef:7d:db:0f:0a:78:82:d4:ac:08:1f:38:fe:3c:14:
         97:5a:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:08 2024 by rpki-client on console-fra.rpki-client.org