Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File:                     lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier:          Q+XlWsPOKd0d1vuywvA8EA+fziUFkc92NJMdq+rh3sA=
Subject key identifier:   24:F1:7B:04:DD:5F:84:17:E9:6F:15:17:C9:B0:68:6C:0B:D3:15:3B
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer:       /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial:       0193572D8C2857200B562F9C3714EFB67D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:22 +0000
Files and hashes:         1: 1FnYlUmT0z8WEcuve2nW8k3Z5Do.roa (hash: Os+7+sbyIFri+y/inYii5kRDGK+7D6pYYcqQeqTT6VQ=)
                          2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: B5rBIGP7qrs25fFu0JmaVu/S79+lHHcQy9sTGLZ6QnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:8c:28:57:20:0b:56:2f:9c:37:14:ef:b6:7d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
        Validity
            Not Before: Nov 23 04:00:22 2024 GMT
            Not After : Nov 24 04:00:22 2024 GMT
        Subject: CN=24f17b04dd5f8417e96f1517c9b0686c0bd3153b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:7e:6b:38:62:06:bf:29:f0:28:5b:e1:74:
                    11:43:68:cd:14:75:9a:67:7f:90:93:23:cc:e5:bc:
                    ad:75:61:53:ba:3f:4f:1c:e0:e0:a2:42:83:fc:96:
                    ed:65:52:aa:ce:89:d0:8d:cb:06:2d:ee:b9:8a:32:
                    eb:61:be:14:e0:d2:d9:54:15:bd:5a:c1:6b:bf:27:
                    3b:c0:35:8c:ae:25:7e:b6:44:3f:44:b3:d7:ae:ce:
                    f5:be:21:b9:46:4b:d4:79:73:e3:6f:83:8f:ed:fd:
                    cf:a7:e8:1e:b5:54:87:2b:2e:37:a3:f1:de:39:3d:
                    ba:3e:f1:9d:a7:fa:73:1e:5c:ab:77:b3:8c:cd:02:
                    77:34:6a:db:59:41:61:ea:82:74:59:cc:d9:0e:e4:
                    19:3d:f8:9d:c9:ed:a9:46:f6:eb:23:a8:79:6a:bc:
                    f5:f8:cb:d9:8d:ce:8e:89:b0:ed:2c:83:b8:2a:9f:
                    b0:e2:e4:9d:fe:62:ff:fd:53:c0:98:a4:f3:db:1f:
                    30:c8:0e:0d:aa:c4:b5:e4:de:88:15:3d:2e:8b:71:
                    72:d3:d3:57:3d:a9:31:5f:ca:70:4a:96:9d:e7:09:
                    9a:11:99:98:22:0e:3f:a7:70:cf:d0:42:16:dd:21:
                    8f:94:3b:fb:a5:e3:42:af:4a:d3:53:59:69:a3:15:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F1:7B:04:DD:5F:84:17:E9:6F:15:17:C9:B0:68:6C:0B:D3:15:3B
            X509v3 Authority Key Identifier:
                keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:36:0c:2e:95:d5:10:dd:f6:1e:27:01:ef:fe:da:62:cd:
         ee:8f:10:40:2a:69:df:4d:24:c1:9a:09:c7:3c:a5:11:33:2e:
         01:b2:c1:de:14:c6:d6:6c:2c:a8:04:6e:9b:52:c2:78:12:ba:
         64:4a:f1:d6:2d:61:25:72:86:49:94:32:c8:ac:f4:0a:9b:10:
         df:d7:28:37:8c:66:56:3d:59:ad:5e:0a:51:ea:2a:a2:90:ce:
         ae:c6:b4:d4:73:59:56:4a:1e:e9:a7:0c:b2:2f:fd:a0:26:10:
         0f:4c:43:e4:4a:26:15:a0:89:fc:52:d1:34:44:76:f8:37:fe:
         04:4f:8e:04:24:27:36:a8:8a:96:33:5c:52:be:8e:7d:7e:b8:
         53:39:6b:a4:c7:9a:02:ef:9d:df:11:3a:54:7e:c9:9e:ad:f0:
         8d:1c:6c:6a:d7:f5:1b:06:f3:5f:aa:3d:58:1b:1c:99:57:9a:
         ad:e8:bf:51:72:3c:bf:ba:7d:71:f9:d9:5a:f4:f5:7a:47:c6:
         ac:d9:5b:52:73:99:a3:dc:57:c9:d8:fa:46:5f:0e:91:e1:ad:
         f0:ef:65:f9:02:0a:d5:db:34:75:3e:df:08:9d:38:f7:2b:6f:
         89:39:06:ca:dc:99:d4:6d:8f:c3:08:1b:46:d4:9b:d1:fd:7a:
         e1:df:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:01 2024 by rpki-client on console-ams.rpki-client.org