Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File:                     lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier:          j5R/pq/RzvmyRRCT0dvmaDM0X7/nL+Tv1nK5qr4KeKc=
Subject key identifier:   60:64:D3:07:89:1E:39:55:6F:BE:43:A6:38:08:8C:2E:73:71:FD:E1
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer:       /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial:       019369DA2D50DC3AB392EFF72B58937577FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:02:06 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:06 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:06 +0000
Files and hashes:         1: 0rh5B4XYLHgN4ie-Klb9PhKYJTQ.roa (hash: +SUQ68hMAN4Bmk83BlT/mha4XdtKuoyigFoY86j4XHE=)
                          2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: CxF3qT9axcivu+KwUpZsfqoLS1cQjRtMO0hgOxMGGpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:2d:50:dc:3a:b3:92:ef:f7:2b:58:93:75:77:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
        Validity
            Not Before: Nov 26 19:02:06 2024 GMT
            Not After : Nov 27 19:02:06 2024 GMT
        Subject: CN=6064d307891e39556fbe43a638088c2e7371fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:f8:59:7f:d3:27:b9:1f:00:88:42:f2:59:
                    53:d7:c1:9c:0c:90:10:43:67:ff:cd:e4:13:4b:fe:
                    f9:3b:81:59:7a:21:b9:a7:4b:16:50:e9:74:65:bb:
                    e7:f3:1f:bd:d6:1b:12:32:5c:ab:bd:2a:49:34:78:
                    cc:df:95:77:8d:8a:6e:ec:d8:f1:ef:71:1e:ad:e6:
                    e4:03:c8:e0:bb:88:75:78:f8:5c:1c:f6:28:64:8b:
                    36:4c:4b:bc:d5:7c:71:cb:77:ea:64:44:b2:74:0e:
                    4f:1e:62:c5:a2:58:44:ac:35:e1:8f:ea:2f:46:fb:
                    9c:f7:a6:11:4f:71:3a:b7:3e:0f:41:32:61:18:3b:
                    81:af:59:9a:e7:b6:f8:3d:cd:4c:90:7c:ec:a1:68:
                    96:72:f9:eb:12:43:f4:a8:b2:38:3f:09:92:35:3d:
                    ed:4f:94:fa:a7:35:51:35:6f:db:84:d6:84:de:df:
                    48:7d:68:0f:12:f5:d2:cf:e4:e3:67:8f:a1:0c:55:
                    e3:c3:31:39:cb:31:6c:f2:05:d3:16:85:af:d2:b5:
                    9c:04:3c:c7:1a:79:d5:ff:4f:c4:12:3b:19:a0:f7:
                    cb:84:f0:72:94:16:ac:4f:04:fe:e3:82:5c:13:8b:
                    fc:95:6b:fb:55:38:97:4a:56:bf:32:21:d1:41:e0:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:64:D3:07:89:1E:39:55:6F:BE:43:A6:38:08:8C:2E:73:71:FD:E1
            X509v3 Authority Key Identifier:
                keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:3a:df:6b:0b:21:00:c0:b5:70:16:bf:a6:af:8c:54:f7:
         db:06:ea:d8:cb:16:ef:2a:d1:7f:a6:0f:0d:0e:cf:e2:89:45:
         bb:26:f9:e0:04:6f:30:82:a6:31:ad:c2:a3:c1:90:1d:03:87:
         bd:5c:2a:e8:1a:e1:a5:2b:1f:ad:f0:4d:0b:32:dc:26:e2:9c:
         0e:eb:ab:01:0e:63:e1:34:89:60:4e:db:17:32:73:dd:b0:c2:
         70:e9:71:9e:c2:bc:b7:94:e0:93:0b:d7:c8:02:5c:9f:e0:01:
         13:a9:6c:3e:87:c6:51:63:95:53:1c:81:c7:cf:53:01:6d:11:
         83:07:49:11:4e:cd:36:f2:e0:c2:f9:f5:c9:c0:72:48:d2:03:
         6e:d7:7c:e1:5c:30:f5:70:39:47:f4:26:ba:eb:f5:e0:96:1a:
         41:9c:3c:1a:2a:22:c0:89:df:6c:a6:aa:8d:94:84:e6:21:c0:
         d2:2f:df:77:eb:fb:fd:9b:c9:4d:6b:3d:14:7e:35:15:39:85:
         6d:de:81:59:1a:7b:b8:08:52:da:8f:29:cd:e1:1a:4a:bf:30:
         25:36:76:7b:e3:79:8e:a6:98:f8:22:5b:36:0a:07:94:16:95:
         d8:30:ef:ca:a0:ae:0b:7e:72:bf:b9:36:99:d3:7e:37:73:d4:
         ae:50:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:48 2024 by rpki-client on console-fra.rpki-client.org