Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File:                     l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier:          ZczHOS7dOx2zkpyWaFZTfU31/DcBzQ9C01xKtWzKKdU=
Subject key identifier:   53:1C:75:FB:01:F0:B2:C1:BB:6F:98:44:C7:59:79:D5:44:DF:F0:D0
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer:       /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial:       019368C5CF07AF76B76D53D2C184BCCFB569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 14:00:14 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:14 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:14 +0000
Files and hashes:         1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 9pwfAA3jDQEmvkNPO/lS+JtOEJAes3BE91uTFNQ2Rzo=)
                          2: nDS2mLN92bcisUae1hvP7E5y_Ys.roa (hash: 6z5kNP0dy9Pqb4W1zgfT/WYLBJgiGEpIJTpQMQc/jNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c5:cf:07:af:76:b7:6d:53:d2:c1:84:bc:cf:b5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
        Validity
            Not Before: Nov 26 14:00:14 2024 GMT
            Not After : Nov 27 14:00:14 2024 GMT
        Subject: CN=531c75fb01f0b2c1bb6f9844c75979d544dff0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:9e:22:d4:df:9c:19:97:d9:4a:98:03:93:
                    26:8e:77:35:c9:b9:fa:e6:2e:f2:26:42:cd:24:a7:
                    0d:d1:b9:73:77:4d:c9:63:51:5c:9e:4e:c6:3a:5b:
                    75:f2:d2:86:84:1c:13:53:34:25:45:21:4a:cf:7b:
                    05:b8:be:af:90:f2:17:0b:cf:8d:5c:4b:9b:20:72:
                    78:bb:24:5f:2e:37:dd:04:1b:66:b3:00:47:54:99:
                    1d:ce:50:e6:70:bd:fa:2b:24:fd:b1:44:c2:29:26:
                    94:1a:eb:2f:08:21:08:2d:d9:99:10:a4:91:52:3b:
                    94:f2:5b:4e:36:19:03:90:7e:45:50:eb:ca:3c:cb:
                    35:f6:94:90:14:fd:0f:5b:9e:45:19:10:98:7c:25:
                    6b:bb:67:cf:59:fc:4b:88:0b:5f:c2:5a:f4:e1:d0:
                    5e:af:c4:55:ae:0a:e3:aa:97:f2:d1:b4:8d:66:8e:
                    c3:89:5e:1d:bc:0e:90:0a:34:11:80:7a:f7:a1:7f:
                    48:8a:70:26:f3:b4:c9:1b:b1:62:22:42:09:47:33:
                    96:b2:64:b9:7d:ac:84:0c:4e:e9:30:04:7f:c5:68:
                    51:90:17:89:cc:fa:cc:b1:45:9e:c3:46:f6:68:76:
                    44:07:51:d8:16:da:b9:e1:92:cc:61:8e:7d:8a:36:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1C:75:FB:01:F0:B2:C1:BB:6F:98:44:C7:59:79:D5:44:DF:F0:D0
            X509v3 Authority Key Identifier:
                keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:d3:3b:e7:3c:4f:7d:2a:e4:da:d9:aa:0b:8b:83:6e:b4:
         05:24:74:a4:44:59:10:1c:52:b4:0b:ab:b6:d8:c6:fd:8b:e1:
         0e:a2:67:16:c3:2e:0d:52:08:30:15:c6:de:2c:54:1f:92:71:
         61:9b:7d:f2:1a:ef:7d:b2:17:fc:37:91:b3:db:ae:f5:7e:47:
         71:76:21:4f:06:dc:14:75:3e:78:77:28:38:54:6d:41:71:ad:
         e9:93:b4:9a:a6:3b:af:12:e6:87:6e:1b:86:44:49:4f:28:fc:
         88:5e:52:3d:3f:c7:38:84:4e:9d:31:63:cb:13:ea:26:c8:c9:
         98:a4:70:a6:46:46:53:83:f1:79:aa:05:6d:98:44:40:93:a6:
         54:d7:73:17:01:36:d7:ca:22:d7:10:42:19:c3:66:23:6a:a4:
         66:bf:7f:49:be:b4:e4:31:b6:97:6a:3e:86:8e:cc:8d:20:53:
         8f:33:78:df:dc:cc:f9:46:16:34:7a:6b:5d:dc:b2:9a:68:5c:
         98:d5:a8:b5:7e:eb:34:11:4f:c8:d8:c4:85:58:ca:40:98:79:
         08:12:4a:35:00:06:f5:73:b5:3a:6e:56:77:74:0d:bd:c0:e6:
         84:7c:9f:ca:b9:78:e9:e6:63:ed:47:6d:54:83:33:d0:d8:a6:
         41:73:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:06 2024 by rpki-client on console-ams.rpki-client.org