Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File:                     LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier:          j8W/JSul/AMbihoRz/3bu8rsUtjNSRZ6CxjBTC8S4mE=
Subject key identifier:   87:59:4E:9D:33:4E:3C:FD:4B:0F:48:F3:C4:DD:D0:A1:4C:7B:C2:E3
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer:       /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial:       019364B21E751A988AA273DADEF4BBB98BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number:          0E6B
Signing time:             Mon 25 Nov 2024 19:00:14 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:14 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:14 +0000
Files and hashes:         1: H7NryRhsTB88AEPA7-axy1B9Bnw.roa (hash: Y/QFTaELz4QTjODxY0Ox7LKUb8C7z/HSVMsOaA/36ak=)
                          2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: WSwFoPfrpbKbQmDV4Q7Cl50mYF2JzgHsgkxekSiRC70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:1e:75:1a:98:8a:a2:73:da:de:f4:bb:b9:8b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
        Validity
            Not Before: Nov 25 19:00:14 2024 GMT
            Not After : Nov 26 19:00:14 2024 GMT
        Subject: CN=87594e9d334e3cfd4b0f48f3c4ddd0a14c7bc2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:0a:0b:d4:f8:4d:f5:61:12:97:5b:55:6a:
                    d1:d9:90:7c:b8:f3:21:e9:00:6d:13:a7:cc:4f:35:
                    8e:55:31:6e:1d:2c:94:fb:43:21:de:46:bb:2a:03:
                    e9:f7:11:82:ff:b7:45:d6:63:ad:69:63:f3:04:90:
                    21:61:f3:2e:fb:b6:fd:c3:43:63:b3:b9:ef:e2:e9:
                    34:40:60:35:2a:56:96:93:ab:c9:3b:c5:e8:34:a1:
                    a6:06:82:fb:3c:a1:8f:07:b9:50:bf:3e:da:5b:e4:
                    40:fd:f5:bf:de:e9:d3:59:b9:18:aa:dd:5c:67:08:
                    9d:65:86:ab:73:ff:50:75:eb:a0:38:eb:77:21:f0:
                    81:43:87:58:2b:e9:96:33:08:b8:7f:27:d7:e3:cb:
                    63:37:e9:e9:8d:41:18:8e:67:a2:e6:fe:36:48:d1:
                    b2:9a:74:d7:a0:a2:51:13:c7:c0:ae:b8:23:d8:ca:
                    34:2a:fc:11:50:9e:f5:b7:47:f0:aa:2d:39:50:e7:
                    f3:f2:ed:b5:6f:23:9f:6e:a9:14:18:97:bf:56:d2:
                    c7:57:b7:9b:89:1f:51:72:8f:76:98:10:6d:d7:7d:
                    b5:08:c3:77:90:e3:fb:f8:a4:3c:93:dd:77:4e:6d:
                    eb:d2:93:72:15:db:cb:62:4b:08:35:41:2f:87:46:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:59:4E:9D:33:4E:3C:FD:4B:0F:48:F3:C4:DD:D0:A1:4C:7B:C2:E3
            X509v3 Authority Key Identifier:
                keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:cf:2e:a3:c4:8c:69:ee:40:1f:3d:7a:7d:a9:67:9e:ee:
         34:9a:58:50:71:2a:0f:bd:8c:eb:82:c5:4e:7c:84:7c:72:b1:
         f0:15:e5:78:20:97:6f:41:33:de:8a:46:e7:69:b0:59:28:b9:
         32:21:cc:ab:db:91:9c:32:42:6c:35:9a:44:5b:f1:a0:83:70:
         94:a2:70:2b:d9:e1:61:ca:33:5e:83:8b:17:77:9e:ba:a0:56:
         f4:75:1d:d6:e5:cf:f4:cc:cb:a3:58:7d:1a:ee:de:7d:01:bd:
         76:eb:38:95:93:15:ac:2a:0f:48:81:65:13:11:ff:5a:a8:b1:
         54:9a:0d:49:3a:6f:7e:ba:89:4e:96:69:3b:c7:25:32:d8:70:
         5d:ae:b9:93:e0:f5:40:8f:a3:6a:09:7a:ba:63:a3:a5:fd:aa:
         f0:cb:27:4b:ce:47:f0:e0:e3:12:08:9e:2b:b4:12:05:ef:2b:
         94:2f:52:39:46:6e:9c:84:77:e1:67:bf:a2:a0:a1:cd:ff:6a:
         44:0a:ca:4e:94:5d:73:ab:fa:4d:2c:11:dd:b5:06:df:a0:29:
         d7:88:b5:a6:2d:0b:a6:dd:96:a9:a1:7f:d6:1f:4d:e6:79:df:
         13:4d:04:b5:b6:f7:9d:44:b8:cd:8a:d2:28:2a:6c:ce:14:d3:
         9a:77:22:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNksh51GpiKonPa3vS7uYv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjQxMTI1MTkwMDE0WhcNMjQxMTI2MTkwMDE0WjAzMTEwLwYDVQQD
Eyg4NzU5NGU5ZDMzNGUzY2ZkNGIwZjQ4ZjNjNGRkZDBhMTRjN2JjMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G4KC9T4TfVhEpdbVWrR2ZB8uPMh
6QBtE6fMTzWOVTFuHSyU+0Mh3ka7KgPp9xGC/7dF1mOtaWPzBJAhYfMu+7b9w0Nj
s7nv4uk0QGA1KlaWk6vJO8XoNKGmBoL7PKGPB7lQvz7aW+RA/fW/3unTWbkYqt1c
ZwidZYarc/9QdeugOOt3IfCBQ4dYK+mWMwi4fyfX48tjN+npjUEYjmei5v42SNGy
mnTXoKJRE8fArrgj2Mo0KvwRUJ71t0fwqi05UOfz8u21byOfbqkUGJe/VtLHV7eb
iR9Rco92mBBt1321CMN3kOP7+KQ8k913Tm3r0pNyFdvLYksINUEvh0ZykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdZTp0zTjz9Sw9I88Td0KFMe8LjMB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVznPLqPE
jGnuQB89en2pZ57uNJpYUHEqD72M64LFTnyEfHKx8BXleCCXb0Ez3opG52mwWSi5
MiHMq9uRnDJCbDWaRFvxoINwlKJwK9nhYcozXoOLF3eeuqBW9HUd1uXP9MzLo1h9
Gu7efQG9dus4lZMVrCoPSIFlExH/WqixVJoNSTpvfrqJTpZpO8clMthwXa65k+D1
QI+jagl6umOjpf2q8MsnS85H8ODjEgieK7QSBe8rlC9SOUZunIR34We/oqChzf9q
RArKTpRdc6v6TSwR3bUG36Ap14i1pi0Lpt2WqaF/1h9N5nnfE00Etbb3nUS4zYrS
KCpszhTTmnciVw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:29 2024 by rpki-client on console-ams.rpki-client.org