Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          7tagZ/dKSy0LJVtbaj1ndj4zNnduXQOTtVahVdYul9s=
Subject key identifier:   34:5E:70:E6:71:6D:49:9A:66:3B:15:B7:CA:1B:19:5F:ED:56:79:7D
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       019350BDEB4F7FDBE5502A6DDE5CDE40B951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          0FB6
Signing time:             Thu 21 Nov 2024 22:00:43 +0000
Manifest this update:     Thu 21 Nov 2024 22:00:43 +0000
Manifest next update:     Fri 22 Nov 2024 22:00:43 +0000
Files and hashes:         1: C7zpZN-1q0H_M_S_vpNYnlFGVTA.roa (hash: epMhPon6PxtUyLTu/HBkF3J2cyCB/KYTILmUnDYVUrU=)
                          2: bJSCFqTukybTMGHt2jOsj1RN1Jw.roa (hash: F9VGPFtGfYW8PORc+zIuKedCDRVZ07YSKvNhB3wFeps=)
                          3: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: hj4Z8KfocM6nYMet485JG4bHhFNUGpFuWczdI2rsLMg=)
                          4: fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa (hash: uTIlXCxuxfn4l2zqV8sWOHfJaFDTjasJ/obkOnGL1L4=)
                          5: xH15JpMxA1SVuRoIJklxq0Le_mA.roa (hash: 6cVPKb7lD5VXFjrXWMg8gc0Rpz8Icrd/mFgn/NRlRuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bd:eb:4f:7f:db:e5:50:2a:6d:de:5c:de:40:b9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: Nov 21 22:00:43 2024 GMT
            Not After : Nov 22 22:00:43 2024 GMT
        Subject: CN=345e70e6716d499a663b15b7ca1b195fed56797d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:25:0e:cf:65:dc:98:4d:4c:21:aa:a7:98:
                    31:ab:90:ff:18:ea:81:23:4e:f8:52:cd:87:cc:00:
                    77:e5:5a:c3:ef:0e:03:af:f4:48:0b:01:52:e7:92:
                    98:09:4e:d7:cf:62:0c:43:c1:8c:3f:ee:c7:84:22:
                    cf:e6:bf:6f:cf:42:e9:05:f1:bc:e3:49:34:ba:e4:
                    0a:65:a8:c0:1b:1f:f3:35:5c:71:8e:e1:2b:93:60:
                    ef:58:06:e5:9e:cd:c8:46:13:c5:0d:53:90:7f:2a:
                    b9:cb:32:7b:e6:e9:26:43:9c:f9:38:78:90:66:0f:
                    ce:b4:53:4a:6e:5d:67:08:79:54:97:fc:2b:be:ea:
                    6f:93:d1:dd:b5:14:ba:7a:64:fc:c8:64:5d:6a:ea:
                    e4:dc:e9:fd:80:02:05:43:6e:aa:ae:53:dc:0e:d5:
                    51:16:68:72:c0:66:8c:5a:b0:9d:40:55:ee:f0:4f:
                    02:d1:b6:74:92:fb:60:76:36:38:49:69:0b:76:61:
                    be:2e:37:00:e2:fc:a4:48:6c:52:3c:5a:d9:26:4b:
                    6c:c6:fa:44:de:aa:f5:ef:94:45:11:a2:57:7c:2d:
                    12:3e:7f:3e:5e:ca:ff:61:f0:c9:7c:a4:51:90:6c:
                    cf:8e:78:0d:d8:83:ca:e7:5a:67:6e:5d:67:c1:d7:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:70:E6:71:6D:49:9A:66:3B:15:B7:CA:1B:19:5F:ED:56:79:7D
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:dd:ac:25:20:87:34:90:9f:21:6c:e6:83:16:48:52:25:
         c8:0b:00:fd:5b:cf:32:d1:75:3d:8b:dd:e6:d9:22:a6:5c:6d:
         59:57:59:ba:5e:db:47:35:2d:39:55:8a:98:cf:4c:1e:14:f1:
         0d:72:7b:c7:49:a3:03:a3:c2:2d:5f:2f:4b:0a:ab:18:c2:e2:
         5f:50:f9:3c:bf:bc:14:bd:f7:45:9b:5d:1b:01:a8:91:9f:cd:
         87:42:fe:a2:ba:db:7d:3b:e7:99:48:43:8c:0f:db:15:ce:7c:
         d9:b6:46:0c:ee:8a:14:7c:4e:ab:df:a7:55:57:37:63:c0:20:
         66:7a:00:ac:ac:3a:d4:91:b5:57:ba:59:3f:13:b1:ac:03:04:
         41:78:8b:4f:8e:f3:e8:e4:03:9b:99:22:a7:31:d4:81:42:0a:
         45:53:d7:40:18:dd:46:2d:ac:84:f2:fe:65:57:a5:39:a8:ca:
         ff:f3:58:75:c9:b8:1c:48:4d:a8:2b:36:2c:88:31:dc:b4:5b:
         f8:bb:74:6b:ad:56:ba:e8:2c:62:27:0d:54:17:7a:5c:57:62:
         0d:33:7f:7f:89:10:27:e3:6f:c6:e7:5d:8d:18:27:31:1a:92:
         22:ce:bb:95:23:b7:48:03:44:cd:66:99:98:5d:c3:c3:49:0c:
         f1:8f:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:41 2024 by rpki-client on console-fra.rpki-client.org