Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
File:                     lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json)
Hash identifier:          7MJacy+Eml67SMhchVacpvWP8D5rAFUQ/Ot6d8NVrhE=
Subject key identifier:   53:08:55:E5:17:1A:9C:A5:7E:4E:D8:69:4B:5C:28:E3:06:50:12:41
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Certificate issuer:       /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial:       0193523DFE0FEBE12CD0BDCB7902603DED3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
Manifest number:          04CA
Signing time:             Fri 22 Nov 2024 05:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:14 +0000
Files and hashes:         1: 1-oou6Tr4tqEFIGmM8DgS_goAqu8.roa (hash: wN2NAWwhQX9gaV5RcpWKyda4IITvSs57I0/QQuxkmiY=)
                          2: 4ej4XAE7wNsr1Q-7iKYDu8rEAz8.roa (hash: eDukHA8ZBqC66o4L0bamSmz4nlyBUIHX/eJVl0b3E3Y=)
                          3: 8QGlt44qa2LlFat3fmU2i7c1P_A.roa (hash: KmQkS4Prt093a8Qeur3spQilooVYTOZM22+Ww6ymA5Q=)
                          4: ClsMReouduSjS03K8nzGnBAT1j8.roa (hash: 3M4n8Qu2j3Hb0FRu3V0+ASy2+7C1hEcc4eOZm5j48vc=)
                          5: IuKFaLWdmO0X07_SgJk6aDGcquM.roa (hash: aN7ycUTtb9Av5V2mmetM+jGjZ7T1HsTJaSqraQ3Dtdk=)
                          6: R0ffCzVBW6uYPjExOxhnDoM29qo.roa (hash: pHe84LWvPSGq4irLO1zUslessNKHzXaAsR/kNg7jUiw=)
                          7: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: dy0NlnB0dBS6CJ9A7oqmmKbz0invALTk03EG9Qwcq2w=)
                          8: qCl3bUChG6tO703ra2xEy0Nevds.roa (hash: T/eRtOYgqf1ewfiimGc3hsB6lQd81r/xqZqo8WifHBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3d:fe:0f:eb:e1:2c:d0:bd:cb:79:02:60:3d:ed:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
        Validity
            Not Before: Nov 22 05:00:14 2024 GMT
            Not After : Nov 23 05:00:14 2024 GMT
        Subject: CN=530855e5171a9ca57e4ed8694b5c28e306501241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:2b:e4:20:a7:fc:4b:61:92:02:51:4b:a8:
                    51:c8:d6:38:38:9b:c7:80:b7:d1:ed:4c:dc:2e:94:
                    8c:5d:aa:99:f2:64:d1:a0:bd:8d:35:ee:29:4e:1f:
                    c3:78:e3:82:73:ba:8d:74:3e:86:ac:a5:48:f9:49:
                    11:7a:06:77:2b:ae:f9:77:de:4c:09:e0:84:58:1d:
                    5d:62:9a:da:eb:72:e5:19:41:73:5a:28:c9:86:7b:
                    0b:80:44:df:ea:04:9c:73:06:dd:3d:6c:a2:1a:94:
                    15:48:08:58:d4:48:56:0f:b2:4e:e7:42:82:12:e3:
                    04:b2:ad:c7:d7:67:6f:62:7e:04:a6:47:93:cb:27:
                    9e:ac:79:a4:25:f2:49:2f:61:c6:cc:22:f6:c8:47:
                    46:5d:c4:a7:4a:f1:32:ae:9b:66:3c:b1:08:e5:bb:
                    a1:90:61:45:fb:a9:60:b4:18:16:2b:79:8b:d1:9b:
                    af:97:aa:30:75:95:65:7a:1f:eb:e3:6d:fe:5b:14:
                    fb:4b:2a:06:85:52:78:2e:4d:bc:1f:e0:4a:11:c2:
                    73:d2:32:d6:7f:ef:a6:8c:bc:56:08:d2:35:d2:8a:
                    3e:4d:9b:28:3e:b8:d3:ca:cf:75:cf:cf:56:3f:64:
                    21:d1:d7:c1:b7:08:f9:a4:c4:24:d1:52:86:3d:d4:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:55:E5:17:1A:9C:A5:7E:4E:D8:69:4B:5C:28:E3:06:50:12:41
            X509v3 Authority Key Identifier:
                keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:cf:9a:75:3e:73:43:a5:d4:1d:7a:76:eb:ef:47:45:36:
         af:28:27:7a:f7:ec:7c:f8:7b:24:57:43:68:20:8a:aa:80:eb:
         44:67:a3:eb:59:0c:f1:11:7e:f1:b3:ff:34:a3:96:16:a3:dd:
         34:1a:a0:1b:c9:4b:43:af:44:ca:28:bb:06:ab:8e:1e:57:ff:
         65:2d:e6:d4:ab:d9:55:0b:21:a8:c4:38:2b:4a:16:8d:7f:76:
         7c:86:d0:73:57:83:9f:40:d1:67:84:72:e7:6b:35:99:70:60:
         79:f5:93:7c:e6:9d:b7:74:93:0b:50:c9:b3:fc:98:ce:f6:d3:
         b6:da:aa:ff:84:eb:0e:b1:ce:cc:45:cb:27:ab:a3:b0:8a:ed:
         f5:ea:e6:11:67:04:0b:2e:50:15:6f:fb:13:65:8b:7c:b9:1e:
         b6:c6:16:48:c5:23:01:48:32:2d:09:33:13:46:15:40:fd:a8:
         56:4e:51:a9:46:be:bb:e9:87:3a:5d:80:11:67:26:78:38:dc:
         f2:b0:3f:2e:2f:09:e2:f2:e5:8f:26:e2:8e:11:24:a9:ec:5f:
         70:61:57:89:11:8b:3b:69:50:46:2a:2b:41:6f:b5:b9:93:58:
         c0:9c:2e:af:56:c1:56:64:b0:7d:c7:f2:9c:a2:9a:62:b6:ab:
         4f:c0:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:02:30 2024 by rpki-client on console-ams.rpki-client.org