Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier:          jbj/DnZiWNQb+SkqzAuIuabe5wPjvJMsVa+uHsw/++8=
Subject key identifier:   D1:69:F8:A7:4B:57:86:4C:FF:6F:57:AC:1F:13:9B:ED:33:BC:69:98
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer:       /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial:       019365FCE8A260BAD9AFEBFD43803C9436A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number:          0331
Signing time:             Tue 26 Nov 2024 01:01:33 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:33 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:33 +0000
Files and hashes:         1: cKQ_RP6azBnCbnQKnzWTHCSk6bM.roa (hash: y2O8a/80Jrex0GO2BFeXVW11W7a8LiraL+kB+Iixxw0=)
                          2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 8ptBQdQsE2w0ta55Qwsxr9rYotcx3IZadEsoIcPTF9Q=)
                          3: mS64GVdRbmaOQwT8ImvfKnitDBA.roa (hash: ovSHOD234wFcNgW14nayu5qbcGWsMGE4HicyOyV0EnE=)
                          4: rNuqeW2fWS1-upGWcoJ6PqdJgtw.roa (hash: JqZbDS3TghfJh/N+/XvAWqkGcdNWWGuV8sfdpQyhUCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:e8:a2:60:ba:d9:af:eb:fd:43:80:3c:94:36:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Validity
            Not Before: Nov 26 01:01:33 2024 GMT
            Not After : Nov 27 01:01:33 2024 GMT
        Subject: CN=d169f8a74b57864cff6f57ac1f139bed33bc6998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:34:77:af:5a:47:e9:91:ca:e6:e4:a3:4f:
                    89:a6:ad:a8:c4:af:f0:06:bd:0d:ad:09:06:71:8c:
                    c1:d0:1c:b8:4e:47:be:ac:88:1d:23:aa:6e:26:98:
                    5e:a8:a5:b3:04:39:01:c6:18:13:24:a9:a0:48:3f:
                    0a:8d:a8:6c:11:37:de:97:07:36:fa:9d:fa:86:8f:
                    63:5d:da:24:6c:70:34:ac:70:a4:72:52:46:8d:d4:
                    63:07:22:3b:4f:25:48:6a:a1:0a:20:32:57:50:ad:
                    0e:a8:52:e5:4c:3a:3f:17:5d:bb:e0:80:87:e0:aa:
                    f0:c2:d4:67:96:42:1a:19:78:44:77:a8:e8:4e:c5:
                    2a:e9:9b:17:7f:24:c1:66:e1:eb:04:22:d9:18:f4:
                    64:00:a4:ba:06:c5:97:e0:2c:a7:97:e1:b3:10:27:
                    64:87:55:95:a6:bf:59:a7:b2:ff:5c:7d:b5:fc:82:
                    6f:ce:f1:65:13:33:09:ca:c0:d1:87:18:46:07:a8:
                    5d:35:d7:36:e0:5a:c2:6e:c1:5c:71:8a:8a:a8:cd:
                    23:39:d0:ef:ac:88:1e:86:10:57:3e:a6:67:d4:f5:
                    ea:2c:b3:81:01:4a:19:19:ca:18:18:88:cb:8c:14:
                    9c:ac:e9:f7:6e:52:15:0a:55:8b:03:b3:a9:14:f1:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:F8:A7:4B:57:86:4C:FF:6F:57:AC:1F:13:9B:ED:33:BC:69:98
            X509v3 Authority Key Identifier:
                keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:ef:ce:46:02:e3:29:8b:31:09:5f:26:c2:7c:47:e0:59:
         d3:25:1f:e0:e0:c0:a0:61:38:69:5d:1c:00:5f:08:94:0b:80:
         68:df:02:21:4c:28:d2:22:b2:f8:57:0f:4e:7b:75:97:e8:e5:
         60:21:3a:96:ea:14:b0:e0:f0:02:cc:e8:c5:79:ee:c5:d0:98:
         da:f7:96:ae:c4:d7:a8:c7:58:1a:a3:c8:52:25:1e:8b:3f:3e:
         f8:81:8c:b8:69:a3:47:aa:60:b7:7c:7a:af:8e:51:0a:7a:f9:
         65:ed:99:8f:15:6f:a2:21:0f:29:82:7e:d7:a0:d3:7a:b5:79:
         2a:f8:70:f2:64:9c:0d:29:dd:0f:81:97:ba:5f:84:6b:8b:78:
         8f:88:99:85:be:c5:50:b9:94:36:dc:1b:2d:0f:66:bb:16:c5:
         53:3b:d6:06:66:64:b1:15:66:5c:bb:d0:35:35:2d:85:2e:4a:
         5b:e1:29:00:99:b9:86:d3:2a:cb:b4:ce:b8:ab:b3:94:73:11:
         d2:78:59:b9:50:8e:a5:62:9a:4c:0d:30:f6:c4:97:f7:e7:9c:
         f2:fc:f9:cd:95:e7:0b:93:c1:17:53:4f:c8:7b:b3:17:87:17:
         fb:e6:55:3b:d7:0f:00:6a:f0:e4:fb:ab:0e:83:8c:b9:e4:41:
         f3:b3:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:50:55 2024 by rpki-client on console-fra.rpki-client.org