Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File:                     lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier:          0v9bA4Ie0XXxq1FRE44bDUYpmD/CsinWHw639cZxr1o=
Subject key identifier:   95:4A:0B:D6:72:19:0B:27:22:0D:6D:08:28:67:63:31:3A:02:58:13
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer:       /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial:       019353BF07170A1EA48A71545988879B62DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number:          0D9C
Signing time:             Fri 22 Nov 2024 12:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:48 +0000
Files and hashes:         1: Oj1hncm_xaYEZCLizehq0fSKORQ.roa (hash: MA0OpR/2AVW44anGMAuBd2Me5xMYy/KG5GbjnhkEyi0=)
                          2: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: wgAjc1WSkQMywf7qgNIpv32ix1mvlX3nCcwDXobrbfM=)
                          3: nPrwZWrzzVwkxV45w_AsBiayM48.roa (hash: OQ5+dIAjZFivff7vrs2+BRasFBFn01Rz3c4095XQKJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:bf:07:17:0a:1e:a4:8a:71:54:59:88:87:9b:62:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
        Validity
            Not Before: Nov 22 12:00:48 2024 GMT
            Not After : Nov 23 12:00:48 2024 GMT
        Subject: CN=954a0bd672190b27220d6d08286763313a025813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:b1:03:1c:48:b5:20:a6:95:87:04:ab:58:
                    dd:82:b9:1b:7d:50:17:65:3e:23:ff:ae:d7:f7:3c:
                    fe:1a:72:44:23:ce:c6:92:0b:e5:ec:b0:92:e0:c3:
                    3c:85:d8:0f:17:3e:06:52:54:bb:5f:b1:7f:1d:8c:
                    c4:53:d1:e9:d7:2f:6e:17:bf:60:2b:f9:07:10:0f:
                    ce:e3:e8:35:51:7f:d8:28:47:01:15:78:66:bc:9e:
                    6c:d0:ff:89:80:3d:ae:ab:7d:56:12:51:e5:c6:57:
                    b8:21:13:fd:1d:62:89:25:fb:b9:9f:be:df:2b:9a:
                    25:aa:88:a6:d6:55:d1:24:3e:85:94:2c:9a:94:0d:
                    63:92:bb:0a:0d:fe:b5:9b:e0:07:22:d4:fb:34:ca:
                    e0:2a:fd:38:7b:c4:1a:25:81:fe:29:b7:eb:01:da:
                    57:50:ab:51:57:78:f2:a1:6d:ff:e0:1f:5b:25:d2:
                    e2:43:b7:2a:a5:58:4f:e4:a5:f8:0d:2f:e9:e7:0c:
                    51:91:6c:03:70:c6:72:68:59:06:f7:eb:29:d0:4f:
                    51:6c:82:61:ff:6f:d2:f5:e6:ad:a1:13:9c:84:05:
                    6f:69:28:13:fd:eb:03:c1:36:10:63:4d:9b:b2:86:
                    48:2b:f4:ce:fa:14:f0:84:78:8d:46:d0:87:ca:99:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:0B:D6:72:19:0B:27:22:0D:6D:08:28:67:63:31:3A:02:58:13
            X509v3 Authority Key Identifier:
                keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:68:67:42:40:42:26:fb:67:b6:ba:71:a6:6f:20:b2:80:
         e0:b5:83:0c:5b:10:88:58:8d:74:1d:06:d6:00:71:4e:bf:47:
         8e:28:c3:25:9a:26:fc:99:9e:d5:de:31:17:7a:92:83:70:78:
         23:89:67:8b:cd:f3:50:8e:80:a3:6b:12:af:15:e1:8c:74:36:
         28:90:49:23:dc:15:95:f6:dc:b5:b5:a5:67:85:f5:c7:c7:ed:
         b3:5a:04:69:75:6f:60:cf:61:30:af:8d:98:4c:00:4c:8e:0a:
         2e:17:7f:87:ec:c3:74:65:7c:a8:9b:29:3b:34:e5:29:ee:c2:
         e7:e5:e5:bc:fd:37:b2:6e:35:c6:5f:ed:4c:28:8e:fa:e9:e0:
         f7:dd:41:cc:5d:94:2e:de:c8:3c:d8:f8:5b:7a:df:b5:ca:3b:
         44:04:b3:0b:e1:a3:a6:fd:3c:81:07:c1:25:94:67:d3:3d:6d:
         c5:e8:b7:6f:11:b6:c4:f2:9e:df:90:7d:a1:68:d0:b0:7e:c9:
         58:3d:4c:60:a8:a7:1a:33:c3:72:a4:c2:e7:3c:7e:19:41:33:
         b2:ee:e4:6a:fa:52:dc:d7:ca:83:a4:96:03:aa:8b:af:5f:cd:
         2b:7c:cc:0b:5b:5f:6e:62:2c:24:f6:bd:94:61:d4:02:38:6e:
         3a:93:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----