Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          DzOe68V360n8L4VUgqaYxhKh9Ishl5LfrKazRUAqXfA=
Subject key identifier:   70:AE:FA:9A:9C:FF:BF:3E:69:90:71:FB:C7:FE:F1:5B:72:8A:72:DD
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       01935199C34BCCE6246F624BA019552FE934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 02:00:51 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:51 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:51 +0000
Files and hashes:         1: ChORsy3QU_JsKVmoAfD_lSMbrOM.roa (hash: UT/Ni+i+MsE3JKXlPwY7j0pYRfh87tK2nqm9GX6dS4E=)
                          2: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: Y0xbMLrfuMrnoAcrY3wsIKBJanQ4Ci6Xb480HtXWuBk=)
                          3: tg_L4lCNJ70dH65WdTdDLuQHGwo.roa (hash: gWppbhrUxYuIwVYcNpcTZI74HuBEAbjVhRJ4mV8ecfE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:c3:4b:cc:e6:24:6f:62:4b:a0:19:55:2f:e9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Nov 22 02:00:51 2024 GMT
            Not After : Nov 23 02:00:51 2024 GMT
        Subject: CN=70aefa9a9cffbf3e699071fbc7fef15b728a72dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:eb:51:32:d0:86:ff:e0:01:23:55:5d:d9:
                    a6:1f:a3:b5:5b:71:3d:b5:60:02:2b:08:2b:c5:33:
                    90:f6:ce:fd:72:34:75:79:2b:60:3c:8b:18:16:15:
                    2c:b0:bc:2b:38:50:8e:60:0d:cd:2c:06:29:30:34:
                    45:94:04:83:82:da:0f:ce:1e:1d:14:74:30:87:d8:
                    f2:91:d8:00:6c:f6:cb:53:22:48:e7:91:70:30:6b:
                    30:8c:8d:e4:e8:f6:db:42:29:15:68:9c:90:20:1d:
                    36:ef:93:a9:3e:cd:ec:da:0f:c7:ae:33:5d:fb:06:
                    78:f1:4b:4e:4d:32:18:46:c0:b2:ab:c9:d0:99:74:
                    ae:49:c3:01:92:62:4c:ed:6d:3e:9e:0e:dc:09:8b:
                    b1:34:3d:29:c8:64:dd:af:06:b2:b4:79:ca:e0:6b:
                    75:b0:59:1f:a8:a9:b8:82:53:e8:fd:0f:3d:71:0c:
                    a8:da:0e:1b:0d:24:29:15:fb:2e:72:dd:d7:d7:4d:
                    62:ca:5c:a3:da:30:f7:f0:db:cf:72:fd:41:5d:22:
                    98:4a:24:6e:a6:7f:8a:e0:e6:fb:20:a5:1b:b8:a6:
                    e9:e4:b5:72:73:51:3c:a4:24:13:ce:09:0f:51:b1:
                    17:3c:59:5b:ce:26:e3:5b:88:e7:41:08:b3:69:a5:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:FA:9A:9C:FF:BF:3E:69:90:71:FB:C7:FE:F1:5B:72:8A:72:DD
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:db:23:99:9e:e9:ba:ee:46:87:06:18:a9:b4:b6:83:4b:3c:
         91:84:dc:0e:b1:d8:32:bd:28:7c:a3:61:a1:cc:de:c6:36:3d:
         d5:ff:e2:25:52:f4:e1:a1:a8:9b:86:ac:86:e1:11:d5:d5:f7:
         a7:f6:d8:df:a0:c1:34:e2:d8:62:98:7a:4a:d8:0b:f8:e3:6b:
         0f:b7:8d:2e:83:75:b2:29:4a:d7:80:09:08:2b:3b:97:36:e5:
         cb:1c:01:23:99:b8:cd:52:ca:c8:98:37:0c:c2:7b:ca:68:28:
         1e:e2:c6:4b:b9:9f:5c:22:4f:e4:b6:eb:98:d5:d5:4e:25:dd:
         61:03:40:b4:f7:89:4a:35:c5:e5:61:33:30:bb:95:7c:84:54:
         f1:52:d3:19:62:e3:aa:19:31:9a:c4:7b:e3:e7:13:d0:1b:74:
         65:8f:f1:32:f7:d2:14:85:d1:e3:99:7f:82:bf:97:4c:6f:1c:
         1b:81:d5:4e:bc:6a:98:22:35:15:60:7d:0e:3b:32:9a:1c:01:
         8c:3d:1b:5d:05:44:c3:06:d4:03:2a:92:87:0f:b4:71:13:91:
         95:b8:07:1b:47:89:cc:d5:6c:e7:26:cb:f1:9c:02:bb:b0:40:
         d0:1b:b7:ff:f4:4a:95:8d:c3:ad:6a:c1:a4:b8:15:cf:a0:2e:
         f4:55:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:16 2024 by rpki-client on console-fra.rpki-client.org