Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File:                     llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier:          ujWS8tC47xYXSB4wyWO3Dvmh5/ddXC8hy0iH3NVYX/4=
Subject key identifier:   A5:64:43:56:5B:F2:60:EF:6B:85:9A:50:F5:CA:81:3F:D0:38:4B:22
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       0193647B54B95CB2AFC9A223B2B38B1AE5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number:          1377
Signing time:             Mon 25 Nov 2024 18:00:24 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:24 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:24 +0000
Files and hashes:         1: LBGD6RLvAlB-CcAERQE-D-Umkw8.roa (hash: qA9WgESe01mWUjrUzskMuWHKqjllWIEl3jl0nghf/Ss=)
                          2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: vza0I/rhEmnbpDQ7qMiqYbDzmTOrN2qCi1iLx6nq1dg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:54:b9:5c:b2:af:c9:a2:23:b2:b3:8b:1a:e5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Nov 25 18:00:24 2024 GMT
            Not After : Nov 26 18:00:24 2024 GMT
        Subject: CN=a56443565bf260ef6b859a50f5ca813fd0384b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:40:06:6f:d2:6e:c1:a0:42:dc:a8:7a:e8:
                    00:bc:9f:3c:0f:e2:5e:89:15:66:d7:d4:b9:05:ba:
                    8a:82:54:3c:9e:f7:09:ad:48:aa:7d:aa:ae:f4:69:
                    69:3e:e5:71:5f:7c:8a:6c:ee:7a:ae:5f:dd:29:06:
                    5d:e1:f8:28:d9:07:4b:3b:ae:15:41:03:ab:56:35:
                    1f:4c:a7:76:16:50:4c:25:be:f7:1c:cc:2e:ce:51:
                    22:db:24:02:00:6d:3d:b4:82:a1:6e:25:3a:48:63:
                    7d:47:43:57:59:55:9e:6f:85:bb:81:68:46:42:8a:
                    b0:34:83:df:63:fa:95:38:e1:6f:8c:ce:7b:f7:3c:
                    76:db:13:34:3b:a7:7d:94:5c:bf:eb:58:87:b5:7e:
                    3c:ba:a8:69:c9:a5:10:d9:ed:96:44:70:47:7d:72:
                    25:6f:04:a6:ae:9e:ba:c7:5c:35:2a:5b:e2:84:d2:
                    a8:d3:c4:8b:ca:d8:28:9b:69:be:4d:2c:de:32:5b:
                    2f:57:0f:b2:12:0d:76:26:14:77:31:03:b1:c6:70:
                    b3:21:29:04:58:8d:53:78:25:6c:83:33:b9:b0:96:
                    d5:f1:45:c3:12:b4:52:61:58:ae:b5:19:77:77:ee:
                    0a:4f:a2:29:22:50:d9:32:6b:7d:8c:7c:1f:12:8e:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:43:56:5B:F2:60:EF:6B:85:9A:50:F5:CA:81:3F:D0:38:4B:22
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5d:b7:68:d5:6d:48:cc:ef:29:44:63:29:a0:e7:82:22:5b:
         92:1d:5d:ad:c1:ec:58:79:9d:e8:da:d7:ab:f1:c8:ae:00:f9:
         a2:c8:09:f4:51:a1:58:36:32:18:ac:61:42:b1:fa:fe:1a:50:
         44:ce:cb:36:64:f0:93:d2:ea:82:6e:7a:01:6e:4f:98:cb:bf:
         cc:a3:4c:c1:57:2d:5f:e5:17:9c:24:f2:c0:24:7c:c1:be:d0:
         fa:a8:b3:59:b7:b7:af:e7:14:76:d2:58:3c:11:7c:cb:b6:80:
         f8:f1:12:d9:95:16:5a:7f:ac:c3:fe:91:d3:9c:ad:29:b5:7e:
         c1:e7:90:60:c7:14:41:bf:85:b7:aa:1b:56:0a:67:53:e5:6a:
         2c:9a:86:22:30:35:e6:90:3f:a9:4d:bd:11:cf:d2:d8:57:f4:
         5d:09:ef:94:f8:59:76:a9:f7:f3:eb:00:cb:cf:8d:1a:f4:63:
         1a:26:a5:c3:71:a6:ff:88:5a:8e:0e:80:07:69:6a:83:e8:6c:
         6a:4c:08:b2:11:5b:ba:8c:59:71:29:a0:52:dd:84:35:8e:c1:
         94:c0:21:af:ca:f7:70:e1:2c:09:64:08:54:0a:3f:2c:c7:6c:
         ea:6e:33:2d:8d:94:10:02:2b:d2:96:85:f7:3c:ad:a9:ec:fb:
         60:35:df:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNke1S5XLKvyaIjsrOLGuXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1
ZGU0ODMwHhcNMjQxMTI1MTgwMDI0WhcNMjQxMTI2MTgwMDI0WjAzMTEwLwYDVQQD
EyhhNTY0NDM1NjViZjI2MGVmNmI4NTlhNTBmNWNhODEzZmQwMzg0YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ZABm/SbsGgQtyoeugAvJ88D+Je
iRVm19S5BbqKglQ8nvcJrUiqfaqu9GlpPuVxX3yKbO56rl/dKQZd4fgo2QdLO64V
QQOrVjUfTKd2FlBMJb73HMwuzlEi2yQCAG09tIKhbiU6SGN9R0NXWVWeb4W7gWhG
QoqwNIPfY/qVOOFvjM579zx22xM0O6d9lFy/61iHtX48uqhpyaUQ2e2WRHBHfXIl
bwSmrp66x1w1KlvihNKo08SLytgom2m+TSzeMlsvVw+yEg12JhR3MQOxxnCzISkE
WI1TeCVsgzO5sJbV8UXDErRSYViutRl3d+4KT6IpIlDZMmt9jHwfEo6ylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVkQ1Zb8mDva4WaUPXKgT/QOEsiMB8GA1UdIwQY
MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt
NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx
LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADF23aNVt
SMzvKURjKaDngiJbkh1drcHsWHmd6NrXq/HIrgD5osgJ9FGhWDYyGKxhQrH6/hpQ
RM7LNmTwk9Lqgm56AW5PmMu/zKNMwVctX+UXnCTywCR8wb7Q+qizWbe3r+cUdtJY
PBF8y7aA+PES2ZUWWn+sw/6R05ytKbV+weeQYMcUQb+Ft6obVgpnU+VqLJqGIjA1
5pA/qU29Ec/S2Ff0XQnvlPhZdqn38+sAy8+NGvRjGialw3Gm/4hajg6AB2lqg+hs
akwIshFbuoxZcSmgUt2ENY7BlMAhr8r3cOEsCWQIVAo/LMds6m4zLY2UEAIr0paF
9zytqez7YDXf+w==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:25 2024 by rpki-client on console-ams.rpki-client.org