Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File:                     LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier:          kcsD3MkF3+voUQfWwqIfFT4mZkboSg3Ik0rW+W5HkVo=
Subject key identifier:   93:22:40:64:28:B6:80:26:27:D3:C7:55:D6:73:7E:38:61:DD:62:B2
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer:       /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial:       019357646B53C4982D938F974EA1E07C94BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number:          136A
Signing time:             Sat 23 Nov 2024 05:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:18 +0000
Files and hashes:         1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 06+1z+G5RIqPZBMP5ATLoAyVxYvkZpria6/RT/iqWqw=)
                          2: gmYKckI_UW05q6CtpjRpCOmmDrA.roa (hash: BNKd96b5uy4xKU8zqdqNOK/LKCUlMZCHz4cGHP/blaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:6b:53:c4:98:2d:93:8f:97:4e:a1:e0:7c:94:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
        Validity
            Not Before: Nov 23 05:00:18 2024 GMT
            Not After : Nov 24 05:00:18 2024 GMT
        Subject: CN=9322406428b6802627d3c755d6737e3861dd62b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:51:2a:2b:67:aa:bd:77:af:7c:17:85:71:
                    64:4f:07:e0:f6:6d:91:62:20:e1:a3:e7:9f:55:b8:
                    72:60:3e:2c:92:4f:a1:41:89:86:ff:41:3b:34:55:
                    1f:a5:d5:04:47:6b:b7:0b:3a:e6:bf:ee:62:ec:a6:
                    9f:73:11:18:11:de:da:3f:7d:41:8e:71:91:ef:19:
                    17:7f:67:fa:c8:c3:3a:35:3f:08:2e:96:3a:37:f0:
                    8a:78:e1:ff:ab:39:a9:56:09:b5:ab:23:d5:b7:d9:
                    dd:e8:5b:a8:f6:46:14:e4:09:e3:9c:02:1c:bf:69:
                    ed:63:98:b3:2d:68:ca:ef:6a:97:64:0b:42:d5:88:
                    92:6f:f6:40:ed:48:62:16:46:a6:80:d7:e6:60:97:
                    e7:f2:98:c7:6a:49:c4:cd:38:2d:e6:a2:79:f5:36:
                    4b:80:7a:38:85:30:26:3b:42:bd:aa:c4:07:f5:a8:
                    60:df:9b:d9:b4:a8:7c:b5:d4:bb:79:ea:fe:dd:e9:
                    a3:82:59:a7:2d:e8:c7:d2:d4:3b:53:4a:c5:49:e9:
                    23:e2:2e:63:7d:d2:19:f1:0f:06:b8:12:47:88:58:
                    4d:99:c7:12:ec:18:c1:d0:f9:43:92:54:64:c0:07:
                    16:dd:cd:6e:de:61:cd:21:95:04:80:f2:18:75:c4:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:40:64:28:B6:80:26:27:D3:C7:55:D6:73:7E:38:61:DD:62:B2
            X509v3 Authority Key Identifier:
                keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:29:90:b5:71:9d:f1:5b:94:6c:f6:29:cc:05:81:4c:aa:db:
         46:cd:f6:0b:90:0c:d3:e2:2b:87:e6:e7:7f:cd:cb:6d:fc:9a:
         a8:98:c7:82:96:02:03:1d:4b:9c:31:79:5d:8e:72:40:48:ec:
         a8:ff:12:99:c6:82:24:5f:a9:ed:6f:aa:66:02:2f:b7:ad:28:
         5d:42:f2:72:fb:dc:62:0b:58:b7:02:6b:2a:49:20:71:88:4f:
         d7:d7:c0:da:e6:31:22:e8:7f:21:5c:94:9d:e8:0c:c8:c7:d0:
         f9:31:b2:eb:05:0b:4f:05:54:2b:a1:47:26:d5:96:e0:42:4c:
         8a:a9:dd:5d:36:f3:f3:56:45:60:d0:07:f7:27:ea:47:38:c2:
         cf:61:26:1c:d2:d1:3f:f0:65:c6:df:af:0c:4b:65:ba:36:02:
         e2:a3:04:3a:a8:8e:fc:64:86:78:5f:1e:66:e1:d5:94:20:53:
         a9:df:b5:45:56:7d:d9:63:ae:05:81:d2:4b:91:23:31:1d:2f:
         ab:e3:83:b6:e4:c5:25:d2:51:c8:63:6e:1b:23:b6:fb:0f:1f:
         10:db:5b:fc:6e:ff:96:29:88:9e:00:cd:45:41:80:27:e5:4c:
         8f:d6:54:b4:76:f3:0d:7d:ec:31:50:f0:7a:5f:7a:a2:eb:43:
         7a:13:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:32 2024 by rpki-client on console-fra.rpki-client.org