Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
File:                     LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json)
Hash identifier:          REN5exN0NOIWjvW950pBOl5KzPGzjJq3JQSGw7Yrhbo=
Subject key identifier:   69:11:F8:80:BC:03:29:89:F5:BF:C5:87:E3:B9:05:E6:C2:10:CB:5F
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       0193549B539440E0E23DFDAE93400D45712C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 16:01:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:25 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:25 +0000
Files and hashes:         1: 0vhbry9267z1bycFaeKiv2Y1xGk.roa (hash: 5eGxNGd4irinhUhREjnfSFwjMcYS8D+uMIZwb4U9zIo=)
                          2: 6TTJDyk0yAI7WETTwx9sGBhLjJA.roa (hash: jiRKVOMndM2wTqXsoHDqYGD+7PUkhfYD6jKsfp16GkI=)
                          3: 8AaWk5yqsCIShWFkavPhwhRcONk.roa (hash: mB+cemiNG5c4Su6pjDOpNZTpQnZab/t4R57EQPBNDzk=)
                          4: 8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa (hash: sLnBV1fQE5NbMtiVErtpDBryEwynDQfUbla2rHDC2g0=)
                          5: FVfeZmdBS01uRUol0vp78tTUSz0.roa (hash: 4aEgoAhQ3ch2tDNNzscmboR2LUYOG3WYhnAv1DkW2zA=)
                          6: IgvI_ChQQHgTIF1A_X5HJrbT4Rk.roa (hash: UJy9Tc1sFKroJXb5Cv/nKlNwwuyKlYbQjCZqQPteFeQ=)
                          7: JHuhKatMJbEWDjhPdzJcsyiWUUw.roa (hash: 6ngNDiFFa331NSPXYPWaY2H+X27VH69OEQm3fSh9SaE=)
                          8: L8DObnrkTpmOHWA7_OFC0zfG2Oc.roa (hash: rHrF5qnGm7rN7/qNwXeMYbmaflNMMX4VmfDwfOlCcJE=)
                          9: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: fvergK2/fcjOj68I54Yqi5/hpU7uGzKCWZyYMyoia1k=)
                          10: QCM7JT0BWjHmwYtSa8iC_Ma237I.roa (hash: /4cnJ6DhHbj/hpYY6g8AghFlJRfDhNPOZKPXU9dae44=)
                          11: UkTa21LQcdSQ4tU7mxD3lUi-UcE.roa (hash: angsn8IJ43mtO/ZzeIKHZobgiyUH0cGGqtBtiKab9Uo=)
                          12: a6EHlC0C-wLEmcYYvLbPUGzvYQk.roa (hash: GL/Y88IENoJ3kGFgyZEDBdqHxptupdxagbUJ3tdIWaI=)
                          13: cgIQiY9NdqbWObd8wZZffUaBL7k.roa (hash: /tVs8zgiwYWLvnt0Fj6NWbCxyqlcF3crmr8qUi81occ=)
                          14: k1IGWaEG30ks5Zuvl7_wMyNdmkQ.roa (hash: Pb8c5XwnDD9amytTtjJU/ifT6X7680m6pWwEl/ZT0Pg=)
                          15: sxbatb0Udc9WRm0mnACV_mLx3Lc.roa (hash: HyzVOeGuHQw3Vkj7x1JIMToCoEmSdYxPtNAtUjcb7D0=)
                          16: vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa (hash: 1pjMJ3hrfqX2cagkiCQl4f5PntKz20Xmrd9SmPJFpX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:53:94:40:e0:e2:3d:fd:ae:93:40:0d:45:71:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Nov 22 16:01:25 2024 GMT
            Not After : Nov 23 16:01:25 2024 GMT
        Subject: CN=6911f880bc032989f5bfc587e3b905e6c210cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:33:cd:8d:2b:91:6f:30:a8:0f:ab:e8:89:
                    99:6d:4a:75:b2:85:9a:db:e1:f2:e3:24:80:21:b4:
                    fc:f7:35:b2:e9:bb:70:a2:fb:0b:0c:a2:ba:58:59:
                    6b:fe:39:38:54:ee:b8:17:e5:9f:c2:30:8f:99:02:
                    e4:bf:dd:f0:d2:3c:b5:d4:4f:43:9f:0c:96:ea:db:
                    b1:2e:3f:fc:db:7b:54:cb:cf:b5:08:8d:52:91:ae:
                    19:b8:a1:ab:4c:a9:1b:2d:bb:0b:6d:cb:92:20:58:
                    bd:de:56:0a:cd:05:c6:4b:9f:e3:1e:79:00:06:6d:
                    72:b5:ed:db:3a:9a:c2:0f:87:1c:73:a6:7a:40:e9:
                    23:6a:9e:1d:88:d6:ee:9b:01:58:ad:5c:6a:d7:74:
                    88:2f:ef:08:0d:d0:04:fd:4c:d3:ba:0e:3a:a0:3d:
                    60:91:38:6c:c7:ea:ab:af:2d:03:83:cf:0b:22:81:
                    d1:dc:c8:3c:c5:81:c4:97:30:8a:4b:66:52:71:f2:
                    be:7e:a2:ff:0d:7b:b2:75:e7:22:84:e5:cf:3e:0a:
                    7d:e8:eb:24:24:6c:fc:f8:1e:0e:51:bb:dc:0b:43:
                    9c:cb:d2:df:91:a8:92:58:95:7f:08:00:dd:7a:3b:
                    46:f7:b9:a5:46:f9:88:66:7b:af:4a:ba:72:2d:69:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:F8:80:BC:03:29:89:F5:BF:C5:87:E3:B9:05:E6:C2:10:CB:5F
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:e2:da:2d:fa:ff:ba:09:d2:e1:41:b3:e4:6d:2a:15:6a:
         19:0d:87:58:dc:f3:29:b9:90:58:b7:90:bf:d7:c9:23:b8:2f:
         44:cf:2b:29:ed:e3:85:ce:d8:f7:95:25:25:85:ea:38:f3:1e:
         e8:fc:e9:4c:71:1e:98:49:c6:d8:54:18:50:14:c5:82:db:70:
         87:dc:19:3d:bd:41:fc:a7:1c:1f:79:20:26:cd:f2:06:00:1d:
         02:c7:60:18:0b:8d:3a:0b:75:7a:23:f3:4f:99:67:1f:19:1a:
         b1:17:7a:9f:fb:65:f8:57:c9:da:75:0d:7f:bd:86:96:e1:ac:
         8d:e6:3d:e3:88:75:d0:8e:70:5d:1d:76:a9:05:fc:64:3e:a6:
         f5:17:6d:f6:04:a0:f0:a3:3e:0d:81:01:88:63:f1:d0:73:09:
         06:51:3c:1c:95:73:59:c7:82:b2:ff:1c:a1:8b:1b:be:71:bd:
         d6:0b:e0:24:7c:3e:d3:7a:0d:f8:72:08:b1:bb:bf:b7:34:8c:
         14:ec:90:26:f5:43:03:15:99:5e:54:70:63:e4:6a:23:d7:a0:
         3d:b9:52:2e:46:70:39:c5:f1:58:db:11:70:a8:b7:35:b4:00:
         b4:0d:9b:4e:43:78:2c:e0:6e:c1:88:78:f0:10:3e:ce:75:61:
         f3:67:97:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:25 2024 by rpki-client on console-ams.rpki-client.org