Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          8WmxPXsr3Yr1K5wfTvdVwIRKRtyQ5MRib33l8ZI2QoA=
Subject key identifier:   F0:12:5A:8C:1B:00:D5:83:2A:5F:5A:36:A8:1A:E2:00:E4:B8:7A:FC
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       019353881237488649B18C7A307B60A34149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 11:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:46 +0000
Files and hashes:         1: 7WmgXZpAKxveAgv_DDcoZ-M7Mrg.roa (hash: QmFuuAe99xIyxMMTpuTkvSeUUALZP8+W3W7IH7OuQGY=)
                          2: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: v/YeaRoZvC6eDueOsN41qG3eRLaav4aQDNU8D0Ib3y0=)
                          3: Y89DXWPW7-kVwT02BTSBCKQImg8.roa (hash: bGiHH3aymSGbPp9ZbgkW4SNPH1VZPdzexMT6N50kL6w=)
                          4: xmGe7JJreGajFrLjnndYWuVBq3Y.roa (hash: QVkkGv0Hl8DhEZ9Bo/ovH4gawvUGgcYGy4IlWy3O+v8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:12:37:48:86:49:b1:8c:7a:30:7b:60:a3:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: Nov 22 11:00:46 2024 GMT
            Not After : Nov 23 11:00:46 2024 GMT
        Subject: CN=f0125a8c1b00d5832a5f5a36a81ae200e4b87afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:18:e6:f2:a9:7e:00:65:c0:16:34:82:58:
                    e1:c0:32:9e:77:b8:78:6c:2b:69:1e:55:60:02:f0:
                    85:17:84:14:b8:76:bf:da:75:e4:e5:b5:0a:ee:6f:
                    b8:a1:ff:45:98:6b:ce:1c:49:62:63:22:f5:f9:c3:
                    08:e5:09:dd:0d:30:6e:29:b3:a3:52:f6:cb:1b:07:
                    c1:ac:0e:11:a8:7c:25:c1:ea:56:e0:ea:d1:bf:46:
                    e5:ca:7a:89:db:8d:21:d6:bd:ca:44:dc:48:69:58:
                    5e:8d:6b:4d:2c:e8:02:dc:c9:18:3d:2c:6e:1b:c4:
                    6d:49:32:9d:47:61:21:eb:89:68:8d:52:ad:e3:55:
                    b7:a9:0d:42:bf:d4:8c:6e:88:26:0b:41:cd:aa:e5:
                    79:c0:02:5c:39:85:a8:65:a1:a7:57:f7:f9:43:8b:
                    58:11:ad:d8:ba:54:a5:27:b4:9a:33:1d:d0:7b:09:
                    8b:fb:84:62:32:ae:4f:bc:4f:40:07:64:5e:75:5c:
                    4f:a7:2e:f3:bb:a4:b2:92:5e:e6:e5:37:ee:63:91:
                    12:64:1f:53:40:0b:ad:31:52:0c:0c:32:e9:bc:a2:
                    c9:9b:3d:95:bf:01:23:30:85:e2:fa:a8:8f:90:48:
                    ed:1f:25:29:f6:8e:9b:2a:5b:8c:d5:de:7e:40:ca:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:12:5A:8C:1B:00:D5:83:2A:5F:5A:36:A8:1A:E2:00:E4:B8:7A:FC
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:e1:20:a5:a4:91:94:06:c7:f5:4a:19:41:d7:55:cd:7a:
         a3:81:88:1e:e8:e1:ba:a0:f2:7c:f2:b0:e9:cb:de:ee:4c:59:
         34:4a:e7:6a:b9:d0:d1:92:31:9b:ca:ac:bf:52:17:af:b6:d0:
         1e:e8:62:2c:2a:21:23:8f:01:e6:38:f7:3c:7b:de:d0:82:33:
         33:ca:67:ba:bc:65:d8:c8:7a:01:08:b6:57:67:82:24:e0:c2:
         76:6d:dd:09:0e:5a:01:a8:36:83:f3:68:43:b4:e2:59:62:b9:
         e8:d5:65:b2:ce:e0:02:25:65:49:13:e0:02:d3:ac:df:1f:df:
         22:6d:c3:bf:80:da:d4:cb:b5:b5:5a:b5:1f:93:e1:97:c1:4e:
         48:5d:af:a2:0d:36:97:6e:33:f3:0e:e8:9f:61:8e:73:89:7e:
         5b:d3:52:45:8e:70:d3:f9:d0:16:e6:b3:24:d4:f0:94:d2:a1:
         12:44:29:1b:c9:97:d6:6a:02:27:a0:dc:10:61:c7:42:d3:4d:
         0a:bf:62:ce:07:64:eb:14:90:25:61:51:f9:2b:f1:0a:60:f1:
         50:37:d4:ce:90:89:e0:5a:a7:92:a4:51:ec:c4:90:e4:e8:c7:
         06:50:78:b0:ba:6e:8a:cd:8a:04:27:e2:05:27:89:d6:13:95:
         b3:4f:a0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTiBI3SIZJsYx6MHtgo0FJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx
YTM5MTUwHhcNMjQxMTIyMTEwMDQ2WhcNMjQxMTIzMTEwMDQ2WjAzMTEwLwYDVQQD
EyhmMDEyNWE4YzFiMDBkNTgzMmE1ZjVhMzZhODFhZTIwMGU0Yjg3YWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycoY5vKpfgBlwBY0gljhwDKed7h4
bCtpHlVgAvCFF4QUuHa/2nXk5bUK7m+4of9FmGvOHEliYyL1+cMI5QndDTBuKbOj
UvbLGwfBrA4RqHwlwepW4OrRv0blynqJ240h1r3KRNxIaVhejWtNLOgC3MkYPSxu
G8RtSTKdR2Eh64lojVKt41W3qQ1Cv9SMbogmC0HNquV5wAJcOYWoZaGnV/f5Q4tY
Ea3YulSlJ7SaMx3QewmL+4RiMq5PvE9AB2RedVxPpy7zu6Sykl7m5TfuY5ESZB9T
QAutMVIMDDLpvKLJmz2VvwEjMIXi+qiPkEjtHyUp9o6bKluM1d5+QMqWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPASWowbANWDKl9aNqga4gDkuHr8MB8GA1UdIwQY
MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt
ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1
LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz/hIKWk
kZQGx/VKGUHXVc16o4GIHujhuqDyfPKw6cve7kxZNErnarnQ0ZIxm8qsv1IXr7bQ
HuhiLCohI48B5jj3PHve0IIzM8pnurxl2Mh6AQi2V2eCJODCdm3dCQ5aAag2g/No
Q7TiWWK56NVlss7gAiVlSRPgAtOs3x/fIm3Dv4Da1Mu1tVq1H5Phl8FOSF2vog02
l24z8w7on2GOc4l+W9NSRY5w0/nQFuazJNTwlNKhEkQpG8mX1moCJ6DcEGHHQtNN
Cr9izgdk6xSQJWFR+SvxCmDxUDfUzpCJ4FqnkqRR7MSQ5OjHBlB4sLpuis2KBCfi
BSeJ1hOVs0+gUQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:28:46 2024 by rpki-client on console-fra.rpki-client.org