Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File:                     L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier:          DQvH6y/FDHrTMWoAk+xnsAmdjIxsnpWpPj95eRi9cYk=
Subject key identifier:   57:7F:78:FB:3F:0A:C6:C2:D0:C8:F0:0A:B4:12:7D:B8:FF:68:28:96
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer:       /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial:       019365200CAA53C3128CFB336A3FC452E499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 21:00:19 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:19 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:19 +0000
Files and hashes:         1: JtWmXiaWPpbjh6tVCs7_WaQVSCQ.roa (hash: EiQgPPMrSXFWCbf3TqOawKfdBaCTcjPnFY661j0dkRs=)
                          2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: fKylBTVfNBbXcneNnHe0KAESaUC+x2ih8lmfH3uWOHw=)
                          3: iSZMWapDTGBOQxFt2ZwwrM1xem4.roa (hash: XN8S/XoGYvfBQarBdySeFqYY2WEuVQRu0q6K1m5/P2U=)
                          4: zda3mVjh6RQUcPBhvwrtSyICaz4.roa (hash: 9iAOSHDDIlj2lGT9FtFEG5AGc34aYs3znRcExO0hjjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:0c:aa:53:c3:12:8c:fb:33:6a:3f:c4:52:e4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
        Validity
            Not Before: Nov 25 21:00:19 2024 GMT
            Not After : Nov 26 21:00:19 2024 GMT
        Subject: CN=577f78fb3f0ac6c2d0c8f00ab4127db8ff682896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:ac:20:bb:c8:7c:f0:e3:ce:16:1b:8d:d4:
                    0f:a9:6d:3b:60:3f:16:55:02:4c:50:9e:d8:3d:d3:
                    05:a4:ef:e0:f7:ec:46:1b:d1:89:e2:ef:7d:8c:12:
                    32:d6:42:5d:fb:74:03:cd:f9:99:8f:c4:7a:bf:d2:
                    d2:58:7a:8b:01:ba:e8:26:05:50:a7:74:57:22:36:
                    20:96:0e:0f:68:b3:e1:52:63:e6:b0:a5:cb:9d:84:
                    c0:f5:46:ef:4f:8b:6c:25:e6:93:b0:bc:7d:78:77:
                    d7:f1:54:48:10:b0:ec:f1:93:03:c2:52:d2:01:6d:
                    23:64:07:bc:11:e0:45:12:25:a5:82:9a:4c:63:d8:
                    4e:bf:fd:3c:32:62:18:d6:8a:cf:68:fb:4c:db:80:
                    02:88:21:52:15:57:a8:35:19:d2:71:c8:de:10:79:
                    46:6f:55:88:3a:6b:6a:f9:eb:59:9d:08:72:3d:a7:
                    68:5e:41:ec:3f:d1:44:43:22:79:56:92:d8:60:3e:
                    9a:74:cb:d6:3f:dd:58:be:f9:37:77:a4:12:c1:93:
                    25:4a:d7:b0:89:a3:20:df:c1:aa:d0:d5:8f:f9:79:
                    f6:a8:24:50:59:d5:aa:9c:60:76:33:28:f1:f0:99:
                    fa:68:18:5c:bb:d9:7f:82:6a:fa:e6:12:22:90:83:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7F:78:FB:3F:0A:C6:C2:D0:C8:F0:0A:B4:12:7D:B8:FF:68:28:96
            X509v3 Authority Key Identifier:
                keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:ce:9c:10:11:72:e9:f8:73:03:46:a9:36:3b:8f:c2:e1:
         19:e6:bd:14:e0:42:6f:78:29:44:b9:bf:05:72:8a:58:29:a6:
         a7:39:8f:ce:1b:c9:06:57:b2:67:f6:84:28:31:fd:93:e0:86:
         b0:ae:a0:c7:e4:68:b2:8b:79:10:10:ce:36:74:fe:ae:aa:ed:
         86:c3:8e:81:34:75:c0:ae:dd:0d:fb:21:6d:4b:33:40:66:ca:
         5a:37:e8:08:09:30:0a:65:ed:13:de:6f:ba:3b:66:01:cf:62:
         b8:5a:92:db:b9:71:f6:01:80:0e:44:07:30:c0:4f:f5:a9:a8:
         d1:70:31:54:b9:2f:d9:e8:c9:d8:2d:12:14:4b:14:8f:57:c4:
         f1:d6:56:f6:10:6d:f8:01:d2:d7:c2:2d:c8:04:f7:40:c0:3c:
         64:a4:bc:cc:bb:ef:80:5d:70:e9:78:c2:62:d6:ac:bc:65:6b:
         30:bb:bb:da:ca:1f:12:78:4d:46:2b:c4:ba:f6:4c:50:33:46:
         c6:8b:c9:69:8d:eb:37:de:7b:0c:72:94:0b:22:75:a1:36:53:
         2c:ed:0b:5e:ed:bf:2d:14:5a:d9:9e:1c:43:d7:eb:56:37:be:
         a0:a3:51:e7:d0:a2:01:d3:c9:b5:0a:01:a2:4b:46:48:81:0b:
         ce:b6:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:17:59 2024 by rpki-client on console-fra.rpki-client.org