Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File:                     lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier:          7lTehas17RtESKQq0o5TmQOBcxQQa8xoV7fjFfz5KeQ=
Subject key identifier:   22:AC:F9:DC:1D:33:96:47:92:1C:18:11:9C:6F:BE:2B:67:AE:D2:D5
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer:       /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial:       019234DC7861171F63249973489105CF2B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number:          126C
Signing time:             Fri 27 Sep 2024 19:01:56 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:56 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:56 +0000
Files and hashes:         1: bb_507pPaCwSO8NxAzy2glz-StQ.roa (hash: 4OABCrTqqW/8hx0C4T5gDnIKIr2a+mjKWGgAgzb231U=)
                          2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: pSXgTynggOlXwMCwJoFQfzcklL7n+EaQp/OOHox2OYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dc:78:61:17:1f:63:24:99:73:48:91:05:cf:2b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
        Validity
            Not Before: Sep 27 19:01:56 2024 GMT
            Not After : Sep 28 19:01:56 2024 GMT
        Subject: CN=22acf9dc1d339647921c18119c6fbe2b67aed2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:25:50:36:e9:7e:91:27:fc:8b:f5:99:3b:
                    ae:5b:60:2b:4f:63:ac:5d:dd:48:78:40:37:9e:02:
                    a7:ac:db:a0:3a:c6:47:24:98:13:43:04:c1:be:25:
                    03:51:f8:b3:2e:bb:ec:df:66:94:1e:2c:de:fe:c2:
                    2d:eb:76:58:36:0d:b9:cc:ee:be:29:39:8b:2b:8a:
                    d0:ee:e4:6e:d6:8b:23:43:fe:2e:f0:9c:3a:5c:f4:
                    17:9e:ea:8d:2b:ac:c3:03:3b:85:84:48:d4:47:22:
                    97:06:6b:1a:f8:6c:1d:f9:3e:2d:bd:3b:54:a4:7b:
                    ae:e3:ca:59:9d:10:22:7b:e3:89:16:8b:9d:09:2b:
                    e1:ba:2a:58:75:92:82:3e:da:d7:15:94:fc:21:e9:
                    34:cd:eb:5e:43:95:64:0d:30:f4:35:e6:9f:5e:67:
                    95:4e:3e:c5:a9:47:7c:12:38:c9:98:d9:d8:14:27:
                    79:3a:37:2f:55:55:11:fd:a8:79:55:fb:9a:df:38:
                    6e:98:98:de:d5:37:4b:a5:af:e1:d3:a9:72:62:5b:
                    c8:62:42:02:8a:91:fc:1c:3f:c5:01:f3:10:88:77:
                    10:3d:1b:30:d2:f0:cc:d6:49:8c:d3:ec:cb:cd:40:
                    52:81:6e:0c:45:15:fe:6a:e9:99:33:16:9c:ef:99:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AC:F9:DC:1D:33:96:47:92:1C:18:11:9C:6F:BE:2B:67:AE:D2:D5
            X509v3 Authority Key Identifier:
                keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:a3:eb:22:1d:6b:f2:fa:70:ea:c9:99:9e:46:66:37:e7:
         98:b0:14:0e:60:9f:30:94:a4:f9:a7:f2:dd:0f:fb:86:bb:fa:
         3f:20:e4:a8:b0:9d:fa:81:70:4e:ad:dc:c9:f1:20:f9:bc:c6:
         f8:31:bd:87:ca:49:d5:4e:27:9d:16:f1:20:51:5e:93:ad:11:
         da:8d:8f:92:2a:7e:c2:2e:c7:f1:87:93:fc:eb:02:05:ed:32:
         9e:56:d2:c2:1d:b8:0c:0a:e5:65:eb:25:4c:41:c3:60:26:38:
         ac:1a:f6:84:e4:50:39:df:8e:44:e1:0f:57:fd:d0:5f:ea:19:
         de:d2:e2:e0:55:51:5f:f7:ba:90:89:79:04:48:5b:5d:6f:a1:
         9d:ff:b9:29:9f:f5:eb:b6:4e:45:79:6b:ee:6d:80:8e:2f:9f:
         a9:17:30:0f:e8:f9:57:9f:6a:b9:d4:bf:bd:c5:e1:1f:24:d0:
         35:a0:df:5b:e8:56:8f:7c:ef:b2:e7:93:73:e4:b0:c8:c0:6f:
         95:4a:7d:40:1e:47:62:1e:ee:20:d0:a2:bd:1a:c5:71:fe:c3:
         dd:95:6b:f7:f0:69:1d:23:69:5a:be:4f:29:50:c5:5f:06:98:
         1d:c3:5c:ff:99:a6:85:62:0e:df:54:cd:95:5d:16:70:7f:d5:
         b8:6d:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:15:32 2024 by rpki-client on console-fra.rpki-client.org