Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          LqwlU53/vt9nsgAcUf3joDp2DDSz9wkCjKZx/ms8mIE=
Subject key identifier:   D4:38:8A:97:11:BD:16:A0:9E:A2:FC:B4:E8:36:1B:E3:F5:CF:E5:0A
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       0193568B297FE7863F6D630C0D2585370D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          03E7
Signing time:             Sat 23 Nov 2024 01:03:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:00 +0000
Files and hashes:         1: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: JitXKrJgxvHYhnNnK18inLcAts4D5mnyw+i5DEEuGVQ=)
                          2: oF8Oo0HCyqgso79MJidJrJiWal0.roa (hash: dLXrM4BHKewQOmK56qwsV1pm0e8zzsvH7IEJPmaQtVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:29:7f:e7:86:3f:6d:63:0c:0d:25:85:37:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Nov 23 01:03:00 2024 GMT
            Not After : Nov 24 01:03:00 2024 GMT
        Subject: CN=d4388a9711bd16a09ea2fcb4e8361be3f5cfe50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:f7:e2:a2:c0:94:f5:59:78:04:60:44:f8:
                    28:42:6d:0f:06:8e:d7:c3:c9:61:0c:cb:e5:56:b6:
                    4a:71:c7:c6:48:a1:2e:3b:79:cc:79:95:b4:50:8c:
                    3a:7b:98:1f:9a:46:9a:c0:b9:8a:73:50:da:06:86:
                    aa:73:77:14:7a:f9:26:9b:9f:4f:7e:61:83:02:ea:
                    0c:7a:05:93:84:96:49:ea:8d:a5:64:77:eb:49:9b:
                    ed:8c:41:8d:f7:8b:70:94:a8:a5:02:5a:47:40:8b:
                    5b:00:81:d6:01:47:5b:d9:2e:25:f1:3c:3a:89:0e:
                    53:bc:ce:d2:70:72:45:8d:8f:fe:cd:bf:ec:65:b9:
                    fa:4b:4c:95:5b:65:4a:05:c2:96:8f:19:9e:56:6e:
                    ea:e2:fb:74:51:d7:99:ed:b3:05:a1:38:7a:08:99:
                    c6:0d:b6:08:a6:e6:f2:b7:4a:14:d2:3e:dd:a6:dd:
                    ae:3c:de:50:63:10:1d:53:20:f0:25:7e:89:1a:f8:
                    24:17:6e:78:38:0c:4d:96:c0:e7:f7:59:d9:e3:86:
                    07:eb:09:3d:44:61:95:d9:9c:1e:35:69:e1:c5:f4:
                    39:5b:14:35:21:dd:84:95:a3:f8:bb:48:5b:b9:e5:
                    d3:2a:7a:82:8a:f1:17:61:64:8b:da:a2:0b:7b:d2:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:38:8A:97:11:BD:16:A0:9E:A2:FC:B4:E8:36:1B:E3:F5:CF:E5:0A
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:a1:79:ee:0c:aa:ab:7c:10:c9:dd:94:8b:6c:ae:96:b8:
         92:e9:c1:4b:3d:99:df:15:2a:32:44:b0:9a:4f:f6:e0:aa:39:
         0a:b9:49:a2:29:6c:2d:b5:13:b0:11:f7:0f:f5:47:12:95:7f:
         59:8f:7a:93:b0:67:9c:7c:75:7b:9d:0e:07:d1:8c:fb:26:81:
         55:ac:c7:ac:74:eb:95:7d:9c:01:3a:a9:af:91:d8:73:ad:08:
         e5:02:4e:e9:2d:76:89:4d:fe:f9:6d:03:2c:41:39:c4:ad:a8:
         3a:5d:7a:e1:92:8e:95:20:a4:14:4b:c2:55:54:5f:af:83:b4:
         e4:b5:18:27:31:ff:24:e5:d0:f3:a7:fd:42:6b:8f:3e:52:09:
         46:15:33:62:f9:f4:20:26:c7:70:f4:25:a6:2c:6b:65:73:8d:
         11:fd:38:00:3f:99:e8:b2:96:b5:a5:24:73:3d:e7:0e:37:81:
         87:f5:10:8d:19:ff:b4:91:da:ab:7d:a9:c4:65:e4:09:65:84:
         41:32:2c:0b:0f:9a:fe:30:32:3b:37:30:c5:61:b8:81:5b:3c:
         66:38:de:7c:9a:50:31:fe:ca:ff:e4:d9:22:87:61:0c:84:53:
         15:bf:fb:d2:e1:d3:68:d5:84:69:be:53:22:24:62:7d:0e:96:
         eb:f0:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:34 2024 by rpki-client on console-fra.rpki-client.org