Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
File:                     1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft (raw, json)
Hash identifier:          TryjU5tjxltR3V1be5+4zxHnqPIyTdIgQe3WIpRZ7pY=
Subject key identifier:   1D:B8:E0:CF:DE:C8:11:6A:5C:34:E3:EF:E3:4B:39:10:DB:4E:00:7C
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Certificate issuer:       /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial:       0193579BE32B0D4DCC987325E750E0CD2C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 06:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:54 +0000
Files and hashes:         1: 1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl (hash: c9nH3pXS8dmBI/FQf+2bVFqtrKvMZQOFiDc4WXMMJdU=)
                          2: RkbZG4lDoNdDkvXvJqsa9cK-_i0.roa (hash: cfgU7k8XSxLWXOUwKPDq44MLV1gMFRHFYmWIUVH2Th4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e3:2b:0d:4d:cc:98:73:25:e7:50:e0:cd:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
        Validity
            Not Before: Nov 23 06:00:54 2024 GMT
            Not After : Nov 24 06:00:54 2024 GMT
        Subject: CN=1db8e0cfdec8116a5c34e3efe34b3910db4e007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:5b:1a:36:30:43:17:ff:01:6a:91:67:98:
                    87:dc:2d:83:b8:d6:31:ec:97:82:e3:ac:d0:83:17:
                    8d:b8:5d:4f:89:1a:32:68:55:ef:28:3c:4e:d1:b0:
                    bc:c9:9a:09:0c:01:37:5f:41:b6:ea:2a:8f:92:39:
                    ba:28:f1:90:40:5c:77:88:ce:f0:2a:fe:22:39:a3:
                    0b:b2:fa:87:21:e5:8b:ee:33:9f:4c:2f:9a:00:4c:
                    54:86:9b:fd:98:89:02:07:54:7a:49:35:29:1f:06:
                    e2:c9:ac:64:a3:a0:fb:45:87:06:77:bd:2d:d4:65:
                    d4:14:56:f8:2f:88:87:bc:de:99:46:9c:c9:6f:37:
                    e6:91:35:4a:99:91:b7:56:d5:43:ac:2a:b3:71:fc:
                    d3:07:fa:a5:7c:ed:10:48:24:da:2d:be:d7:59:3d:
                    81:8d:fe:27:37:d7:e8:8a:6c:16:47:1f:21:07:51:
                    a1:b4:b9:86:aa:b5:5e:1d:50:65:f4:5c:56:a6:ea:
                    46:ca:39:ac:de:d2:71:93:9b:01:57:50:6d:f2:0e:
                    33:1c:cd:fc:17:94:3f:1f:89:5c:63:66:8d:3c:07:
                    a3:ed:92:6c:a0:36:cb:54:e8:dd:ad:b1:6c:58:a2:
                    c5:75:74:61:2c:0c:21:e9:13:fe:98:23:8e:cf:6d:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:E0:CF:DE:C8:11:6A:5C:34:E3:EF:E3:4B:39:10:DB:4E:00:7C
            X509v3 Authority Key Identifier:
                keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:68:6f:9e:ce:50:21:4f:40:73:18:03:1d:7c:6e:88:bb:
         21:c5:69:45:7d:9c:33:26:b0:38:29:b2:d6:de:d2:ae:c1:e5:
         7f:c1:eb:0d:bc:4f:36:ed:ae:f1:b3:e1:68:91:cf:6a:81:b8:
         55:e8:4a:26:43:6f:dd:5d:66:59:d9:de:a5:a0:1a:54:e0:45:
         1a:39:fe:61:35:7e:c9:81:d0:f5:c9:7a:73:d1:49:98:97:a6:
         7b:a1:d0:f4:3b:2b:7f:aa:1b:4d:e9:7f:c1:1f:4c:80:ac:06:
         86:a7:0c:82:bb:e3:cd:e1:d5:16:02:85:e5:48:72:22:10:8b:
         cd:40:f0:14:18:d8:72:f5:00:55:58:42:0d:ab:ed:a2:96:60:
         ed:cf:d7:e6:03:f0:a8:58:f8:ba:c3:3b:1f:ce:44:53:dd:a7:
         2f:13:83:91:c2:13:97:e5:26:fa:a1:58:17:41:77:28:76:7e:
         29:70:ae:91:ed:7c:49:c9:8f:68:7b:3b:8e:ff:b4:b4:94:b5:
         72:d7:8c:a3:dd:16:41:39:17:9a:1c:eb:83:0d:c7:c7:19:e0:
         a6:70:82:3a:7c:4b:e8:88:0b:21:62:58:de:c8:63:73:4b:be:
         ca:86:68:1e:4a:36:e1:6b:d4:a1:76:db:93:25:0b:16:5b:f0:
         75:2d:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:38 2024 by rpki-client on console-fra.rpki-client.org