Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File:                     lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier:          OpfqW/yK6E4yuiF69HOl368TID925WNTJOTKgfd6C4o=
Subject key identifier:   94:1A:DF:56:20:98:0F:54:4A:EC:4D:D8:D5:90:DE:7B:2C:C2:CD:11
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer:       /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial:       01935274DE966E9F877CA7B75803FBAFC9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number:          07F0
Signing time:             Fri 22 Nov 2024 06:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:11 +0000
Files and hashes:         1: IsXlJVr4hClOkJL-3vmF95s6rec.roa (hash: f7ariwQoc3hUPsiD3EeDf1kwHLpX2QdwswTREcD7/zA=)
                          2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: UqCgAiVcZMr2T6NbnhjqVsN+YqfrAns0ZgNgKBhV2MI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:de:96:6e:9f:87:7c:a7:b7:58:03:fb:af:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
        Validity
            Not Before: Nov 22 06:00:11 2024 GMT
            Not After : Nov 23 06:00:11 2024 GMT
        Subject: CN=941adf5620980f544aec4dd8d590de7b2cc2cd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:be:53:80:6a:78:bc:47:4a:c7:5d:bb:b3:
                    b7:1c:c2:85:0e:0b:09:17:4f:b5:5b:9d:d7:da:75:
                    7a:41:56:6b:94:6f:69:54:cc:6e:e2:3d:22:79:5a:
                    6f:12:7d:d3:e7:6a:84:36:66:11:a2:2c:a0:11:67:
                    71:8a:f0:34:6c:0a:87:1f:65:5d:58:21:9e:c8:7e:
                    2a:80:39:01:ba:0b:c0:72:61:47:cf:25:04:5f:2b:
                    14:fa:cb:c0:6e:35:7f:5e:01:30:15:73:de:79:17:
                    44:98:c2:66:49:79:4d:92:0d:8f:46:c9:c8:fe:8a:
                    fb:ba:b4:77:d5:4b:2f:6c:10:ac:e5:87:8a:d8:f8:
                    3a:0e:15:58:26:0e:af:bf:c9:eb:69:3d:13:97:49:
                    2a:f7:10:83:ee:16:8a:7e:1b:79:52:61:12:54:85:
                    f3:2a:af:ae:74:b7:73:c9:b3:e1:0a:b2:41:3b:18:
                    ce:14:07:15:1d:69:5d:4a:fc:24:4b:35:ed:32:24:
                    ce:44:f5:ac:da:96:24:bb:b1:7b:ea:dd:01:4b:a8:
                    b3:e4:fc:44:00:2a:7b:6e:9e:24:91:7b:18:50:ec:
                    29:77:a4:f0:23:6c:90:a3:60:5f:d6:fd:f9:02:a2:
                    2e:a2:43:3a:fe:f9:d3:d0:24:73:48:e8:fa:11:e3:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1A:DF:56:20:98:0F:54:4A:EC:4D:D8:D5:90:DE:7B:2C:C2:CD:11
            X509v3 Authority Key Identifier:
                keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:52:4d:47:02:87:55:8a:ba:75:71:9f:e7:3f:59:8b:fe:c0:
         35:9f:62:27:c4:f0:f3:43:57:1f:89:38:03:09:93:90:af:55:
         84:31:1d:23:15:34:83:05:37:f6:5a:9b:d3:8e:a6:d2:b4:50:
         90:fc:80:40:c5:ee:c4:96:7c:70:4d:89:78:fc:6d:c6:d4:83:
         83:d7:0a:52:0c:b5:bc:13:df:f6:9b:ec:7d:89:91:fc:6d:3d:
         31:55:58:79:c2:ee:e9:2e:5a:70:de:56:45:ce:c4:ce:b5:af:
         e4:d8:32:70:0d:d3:1d:c8:b7:0c:f9:f7:73:72:81:3d:5f:58:
         c9:77:24:98:cd:ea:89:23:97:d7:62:16:c8:ee:b6:b5:71:48:
         59:f6:a7:ee:9a:f9:b0:8c:15:36:0f:f9:0d:d0:96:95:e6:a5:
         70:21:68:02:73:d9:6f:c2:e7:d4:ed:88:8e:d6:13:9d:15:d0:
         86:19:3c:f6:d6:45:33:08:d0:75:9b:cb:e7:ad:a5:b1:53:88:
         ba:c9:d0:b7:27:75:42:ec:27:99:fb:ed:89:d1:4a:d6:84:c0:
         12:c8:ab:79:ba:ab:99:77:76:6a:ed:21:58:65:e0:a6:df:d1:
         bb:60:cc:71:30:b0:b2:4b:24:b6:c1:55:d4:02:3b:b3:02:09:
         b1:a7:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:40 2024 by rpki-client on console-fra.rpki-client.org