Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          pcEX+ZO8faYKqYicLkJVTDJppjfcKskxVmw5+NsL9tQ=
Subject key identifier:   6F:D2:48:3C:9E:96:F0:7F:36:2A:2F:A8:EC:8E:68:19:51:A4:6B:39
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       019351D0B347D3D20E9200ABB2C3AD48C9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          12DF
Signing time:             Fri 22 Nov 2024 03:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:52 +0000
Files and hashes:         1: AJ2s27gwNtCQDhqjJExCxUaPJCs.roa (hash: EBWV1AR6hXl9uMMchuATdzHoFSZ5zoKk/l9TjH33qek=)
                          2: FNGluFUdyMuD-OMIPb4Ao8KJ06o.roa (hash: i6yiWrQj78isOMLQ5FfxNbYE/+N01ZYjVvU/vvPVSqI=)
                          3: GVQ7yVEnB5zGtJssb6XNbidzcLk.roa (hash: zKpglyGxg8KYqMsj51OM9RX8UYUyTzhPMNyRGYkaHik=)
                          4: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: ExIQK4JV+DZRQ2UHpDgBTH3kn9C1URRIcfToGlUU0DA=)
                          5: Lx3dl21GBHYwzjFSTPLHnR73xQU.roa (hash: 2EKa141IfyLuIuyQGuT2rZSMerDcb0jOUeudYH1RSAM=)
                          6: Twk3h9dcMCJOqQL1PY7rBA_4-30.roa (hash: 5oZyZBaLHFIW1aqLzo9F7lg0LvpP1C7gzJxno2BChyM=)
                          7: Vn28edPl7ZwkU_ekocvlh8gUFNs.roa (hash: HjycG5KU3+R3J7DdxdDcnjnFjwh/u4mUBzFMoqMeT2s=)
                          8: X9y-Un66Bjpq4D1CPUXai9zIJFE.roa (hash: lJXVLbbSM9oPlfblnlydn+oMvh/AQivxOQR5C7WA9No=)
                          9: fk9it40M-2RQGR7NTq2hjOBLIqM.roa (hash: +iC8xTpeOe/OUqD72MK8NMkaK8V+82IrpBGyj/f2tms=)
                          10: l9rXlP79Lqf98c_kSuaTcQtvkMU.roa (hash: 4W25I6PGXTyTpC4WeSTZLYQg46htBAfk4OI/VN4l/SY=)
                          11: sE5CSHyVGLQwNhaRMwLILbVF7yc.roa (hash: HJaNOWnt9i/f15n97WeEIOgjoDQVFdAjPkyhrYbbuwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:b3:47:d3:d2:0e:92:00:ab:b2:c3:ad:48:c9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Nov 22 03:00:52 2024 GMT
            Not After : Nov 23 03:00:52 2024 GMT
        Subject: CN=6fd2483c9e96f07f362a2fa8ec8e681951a46b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:e9:8f:35:d2:36:41:66:46:d7:90:9f:5d:
                    f3:8f:c8:44:ab:93:51:e1:70:c7:ab:0c:a2:9b:27:
                    25:82:79:43:63:36:86:46:1a:f1:56:9c:88:2e:95:
                    3a:2c:32:ad:44:21:15:7a:75:bc:95:89:70:31:c7:
                    d7:0c:ee:86:c9:4f:39:d9:f0:13:f1:f9:63:f0:42:
                    0f:a8:04:40:f5:e8:dc:5e:73:d0:01:db:49:29:70:
                    db:f6:f0:aa:86:02:fc:51:15:5c:87:1b:fc:ca:18:
                    f0:12:8d:a5:e1:78:93:7b:f1:60:8c:6c:ee:1b:46:
                    af:3e:b2:08:a0:70:b1:d0:01:83:57:49:1b:e8:1c:
                    13:b4:a6:b0:bb:31:79:93:cc:ab:9e:5c:92:57:c2:
                    b8:28:65:da:d6:73:89:e1:bf:6e:54:af:2b:3b:8f:
                    1c:38:f5:0e:68:ad:21:e2:53:73:0d:91:d5:1a:21:
                    f4:15:36:0a:9d:2d:59:c9:b0:47:aa:7a:ca:c9:a7:
                    9f:9c:85:8b:6d:9a:71:5c:66:0a:3e:67:19:ec:22:
                    b5:c4:c2:37:85:a4:13:4e:37:31:8b:5e:43:23:c6:
                    79:cb:b2:c5:fd:fb:d5:73:99:a2:93:46:d9:48:58:
                    73:6a:c9:fb:42:de:1a:cc:52:42:3d:7b:4f:0b:79:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:48:3C:9E:96:F0:7F:36:2A:2F:A8:EC:8E:68:19:51:A4:6B:39
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:62:89:3d:fa:1d:91:73:7a:de:85:01:cf:ee:8d:a2:ce:
         d2:ff:b1:ae:a6:d8:14:79:bc:19:eb:82:5d:4b:34:c0:2b:d8:
         8c:05:48:47:4a:bf:f6:5d:e6:89:dd:07:8a:86:09:5f:60:9a:
         a8:1f:bd:ed:04:2f:57:4b:17:ca:f6:c9:79:c0:61:50:8f:ea:
         45:00:42:d1:71:e1:2d:0b:7c:01:68:71:5c:34:10:46:e0:24:
         63:e3:f7:16:19:54:3e:81:f9:cb:f8:0e:2d:14:7f:dc:51:94:
         e6:a7:76:a5:a8:ad:c5:41:64:70:da:a4:33:cf:e9:d9:9a:a3:
         0e:54:7a:c5:bf:b8:0b:91:e1:ad:c5:c6:37:2e:e8:fb:78:c6:
         74:a8:f8:de:d8:d7:d2:e0:06:d8:97:78:ef:1d:fe:69:ed:7c:
         ff:fb:f8:78:f4:12:a1:4f:ad:07:1b:68:cd:83:34:33:84:40:
         f5:50:9f:a8:6e:4d:08:03:b5:a6:03:a2:14:e7:6f:22:4a:ff:
         1a:e3:8b:57:61:32:b7:5b:3c:dc:e2:8b:35:b4:3b:96:00:07:
         24:3f:db:ac:27:03:85:e6:b8:fc:b2:0a:22:81:2a:50:d8:0d:
         ba:be:a8:47:5f:49:f5:4e:19:db:31:33:b7:df:6d:75:0e:30:
         54:62:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:22 2024 by rpki-client on console-fra.rpki-client.org