Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File:                     lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier:          9GTZwshtKgk3ek9dt4OdwH9n6t27PJQmg18MKsldF9M=
Subject key identifier:   4D:81:D4:89:5E:B8:BA:9F:C2:BC:AE:33:9D:3E:DF:2C:00:52:76:D6
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer:       /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial:       018F87ED02AA2BBCEE4792EC4302B9146E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number:          06A8
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: K8fs1xy91RnAa1_T90xbIAjQoW8.roa (hash: Gs4bpiOVTWmJYHWzLTg65IkD3rZqhCeSkltVMTIv0T4=)
                          2: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: 73WCkbBST8/e0Hb3+m3w5SEROjMrQMCpSg1899o1qEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:02:aa:2b:bc:ee:47:92:ec:43:02:b9:14:6e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=4d81d4895eb8ba9fc2bcae339d3edf2c005276d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:0a:18:db:96:b7:81:1d:46:6c:19:a8:72:
                    7b:6b:c7:f7:a0:a3:a4:59:32:4b:a6:85:78:15:6a:
                    0e:22:fa:20:49:02:4e:68:f5:f9:bb:ef:74:80:4c:
                    28:96:c2:c3:f7:9a:5b:07:62:49:97:97:f5:99:a0:
                    54:21:75:dd:3d:d2:8a:73:04:79:e3:0e:fb:c8:5b:
                    a9:09:8d:2b:eb:27:e0:bf:31:43:23:13:7e:61:aa:
                    39:27:ee:90:7a:6d:48:e7:6d:48:74:71:77:0b:3c:
                    34:5f:83:26:5e:9b:ae:fb:dd:71:eb:d5:0d:0f:33:
                    cd:08:92:80:1c:1a:c8:52:12:7f:e3:4a:4d:ea:d1:
                    8b:0e:e4:3f:cf:5d:80:5a:cd:fd:a9:76:84:05:7c:
                    99:f8:7c:9c:00:07:b6:01:3b:6b:18:bc:20:55:d9:
                    08:3c:e5:98:12:2c:01:e7:ea:ce:6f:bb:50:50:93:
                    a9:63:5a:04:8c:0f:47:8b:30:0a:8c:fb:c5:6f:f5:
                    d1:fa:6f:fd:af:27:f2:3e:df:68:7f:5e:ff:08:5b:
                    ef:49:2b:24:ed:84:f7:66:57:db:1f:1a:53:cf:2d:
                    63:5e:d9:96:d5:d7:d6:08:f7:e3:fe:cf:20:5a:c3:
                    70:9f:49:82:e9:e5:cb:24:44:01:af:af:1b:53:32:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:D4:89:5E:B8:BA:9F:C2:BC:AE:33:9D:3E:DF:2C:00:52:76:D6
            X509v3 Authority Key Identifier:
                keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:44:d1:23:ef:55:fc:24:1c:4a:9f:4c:5d:f8:f5:ac:6d:41:
         e3:68:0c:81:56:11:42:f7:f9:64:63:7b:e1:d6:d8:eb:be:ad:
         4c:7f:d8:33:05:09:9b:bf:4f:ee:55:bc:7a:7c:98:36:25:ef:
         9a:cd:d4:de:43:b8:e1:2f:17:03:ee:2d:09:d7:12:ca:fa:c2:
         79:5c:4e:b8:90:3d:d2:ad:fd:ca:bb:7e:bf:46:4d:13:f5:11:
         4f:22:08:75:f5:8b:6c:fb:3f:92:f5:35:7b:b8:cf:db:65:10:
         6c:5e:76:a7:c9:c0:f6:ee:6f:26:ef:c9:c3:11:ce:f7:68:8c:
         23:8b:9d:55:6b:dd:62:fa:fe:0d:be:8c:6a:63:f7:fb:85:a9:
         90:8a:1d:c5:84:26:83:8a:4f:26:21:fe:61:29:7d:3f:3e:d9:
         bf:77:96:cc:9a:ba:de:d8:a3:eb:bb:f9:44:50:f2:05:5b:31:
         90:50:38:f0:61:f6:46:a0:3c:46:64:6f:fc:d6:6d:fb:64:45:
         80:da:6b:41:10:39:79:29:fb:12:5c:7d:4b:de:09:c6:17:19:
         f6:44:4a:0d:2b:c2:3d:33:fb:b8:93:be:2f:1e:d1:3d:0e:d7:
         4d:4f:24:f7:20:48:8e:f5:cd:cc:2a:13:22:01:60:34:65:96:
         5f:4d:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:16 2024 by rpki-client on console-fra.rpki-client.org