Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File:                     l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier:          p7ouHudgHAgrroCGS29GWkENqo2KKRyTe4UiHr4UP1U=
Subject key identifier:   07:44:75:59:5B:88:0E:A8:D4:95:C8:AE:A6:C3:83:F7:46:DF:E4:C0
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       0193553F1995FDF23480FDB1644FA9AA33C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 19:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:18 +0000
Files and hashes:         1: fD8gr1Ue9NyWseXpL826cmznNx4.roa (hash: nXLLN2qP405v0C0Srd0ROV7c8enVSwnL/7VPMERcMFA=)
                          2: kR1zvHVVOCJnJbI_VoKEpFHRfSs.roa (hash: 4pm4Ljyf9IDfRPrF198bmqdKyLRDjCE2jqUwpDjV3Ak=)
                          3: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: hIC57QI2dUTsYEAtexq/9ocHNVcK7uFCuK4RNHoegP8=)
                          4: lES1J-HfS5oAUx6lSdYmZyW1fR4.roa (hash: sbZGOBGiCtH+F+Ly9zJfDmhbNZAYp54rnSwJ1tfFbLw=)
                          5: rtFDYQVIkAHl98KjdeyVSb2kf8U.roa (hash: NDCvtobhGwMaMlukj/PGwVFEQkkyfYGj6St5MkpGXSw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:19:95:fd:f2:34:80:fd:b1:64:4f:a9:aa:33:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Nov 22 19:00:18 2024 GMT
            Not After : Nov 23 19:00:18 2024 GMT
        Subject: CN=074475595b880ea8d495c8aea6c383f746dfe4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:4b:45:1e:80:85:d6:e3:4c:db:1a:59:9d:
                    ac:69:ce:fb:b1:26:1b:71:94:93:f9:63:95:18:03:
                    56:1f:a8:2f:d5:ec:a4:72:07:17:46:f5:3a:a5:c4:
                    0e:7b:a7:66:33:20:e7:f4:ea:b2:12:3a:f1:b4:bf:
                    dc:8e:25:71:74:a2:a5:cd:ba:22:88:d3:7a:8e:71:
                    9e:2a:cc:17:94:3d:b5:c3:a4:d9:ff:68:12:0c:12:
                    90:90:2e:a6:15:e3:af:27:14:ce:3e:8f:30:35:98:
                    bd:c5:50:ec:45:dc:a0:c9:13:42:be:a3:80:cd:a9:
                    16:02:e1:20:cd:ab:0f:18:38:cf:46:35:cf:32:20:
                    d0:20:fe:f6:d4:49:1b:77:1e:25:25:a2:c7:a5:18:
                    0c:f8:30:9a:6e:92:5c:6f:96:3d:7c:10:5d:13:56:
                    61:28:3d:70:dd:8b:c6:f5:1d:58:38:4b:3c:01:25:
                    8a:39:b8:2e:4f:53:26:eb:0f:32:db:86:3c:31:4b:
                    f9:93:94:4f:d3:e5:9d:5e:7c:1e:4a:d7:c1:72:9b:
                    c0:93:25:bd:0f:bd:48:bb:69:ff:ee:36:41:fe:9a:
                    81:01:dd:0f:d6:7e:ba:dd:e5:66:37:43:77:3e:17:
                    b1:33:c8:2b:db:69:ee:7b:13:b4:20:a6:4e:0a:7f:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:75:59:5B:88:0E:A8:D4:95:C8:AE:A6:C3:83:F7:46:DF:E4:C0
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:ec:22:72:d1:85:02:7d:cc:fb:6b:a3:d4:44:85:4b:0b:
         4e:df:28:c7:a1:73:db:e7:68:ea:55:76:f8:73:78:63:ed:c1:
         51:cf:a9:c1:85:0a:04:55:45:60:98:e9:4b:ed:17:e3:27:1a:
         75:40:ad:9a:8d:49:05:38:75:09:fa:c5:87:0d:44:cb:44:7e:
         66:eb:de:c0:89:02:fc:48:cd:ab:74:29:8a:97:91:2c:53:60:
         36:d2:b4:17:97:cf:3a:db:bd:1b:4c:3e:df:87:d2:4f:4d:85:
         50:e3:35:77:d7:47:32:f0:75:33:66:de:42:53:45:ba:07:3f:
         6a:7a:4b:21:3c:6d:56:7d:16:98:e0:e7:b9:97:7c:1d:b0:0a:
         04:16:ba:87:75:eb:ab:bb:df:53:e5:10:e1:2b:27:7a:88:01:
         f6:93:27:f2:91:56:e2:0d:be:a6:30:ef:ca:43:3f:ea:d6:0a:
         0a:79:11:ed:c2:c4:ca:87:b6:66:38:23:ac:a2:2f:4a:fa:11:
         04:8b:25:a4:0e:7b:f9:f2:70:d6:fb:90:a1:29:7d:9f:29:30:
         44:66:38:76:f8:df:d1:d7:d7:b8:ec:1c:88:27:71:52:e8:40:
         99:a9:1a:98:94:fd:27:98:3d:c3:c1:9d:5f:b7:bf:8d:3f:a4:
         27:1a:10:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:51 2024 by rpki-client on console-fra.rpki-client.org