Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File:                     LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier:          sh6FF+8RU5ROqp8AsugXdMiDdwN08gR0WBHYqbnhbDQ=
Subject key identifier:   96:42:E2:C5:84:24:18:B6:21:F4:40:4D:0D:4F:EA:50:6B:B4:78:CE
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer:       /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial:       0193568939285B6213D9A882C2DE2A5AC94C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number:          0C2C
Signing time:             Sat 23 Nov 2024 01:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:53 +0000
Files and hashes:         1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: HACd08idcAL6NJPlTGKNQGHarfoviP5J0ggRJmUL6RY=)
                          2: Vy9XUjXbvFpKj0uxN1ucO0Hrp84.roa (hash: p3IqWlnjVt1IEiT68y5rhP/25xipW2R7+/Tx5AYSh0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:39:28:5b:62:13:d9:a8:82:c2:de:2a:5a:c9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
        Validity
            Not Before: Nov 23 01:00:53 2024 GMT
            Not After : Nov 24 01:00:53 2024 GMT
        Subject: CN=9642e2c5842418b621f4404d0d4fea506bb478ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:36:71:2b:ad:55:cc:16:c1:6a:97:f8:98:
                    66:43:17:aa:a6:0f:28:5b:97:8d:99:e2:fa:1e:f8:
                    13:18:33:70:e4:9d:a3:0c:9c:a3:ee:7b:45:b5:ab:
                    c0:bc:6e:be:7c:3b:87:76:52:5f:f8:03:01:58:f3:
                    c4:a7:6c:55:ff:6e:80:5f:a1:bd:01:34:a8:ae:18:
                    05:b8:3a:7e:f1:95:ad:f2:b8:32:a4:f6:37:1a:eb:
                    cd:fb:cd:6a:60:82:3d:a0:51:92:06:fe:82:4d:55:
                    f0:4a:71:8b:44:9d:80:e0:82:d9:9b:ef:7b:f6:d2:
                    c4:e1:0c:8a:da:39:58:0b:f7:0a:86:57:da:c2:90:
                    42:12:8a:a2:26:fa:6a:38:c5:91:9f:10:2a:ea:1f:
                    00:a3:3c:e2:50:fe:e4:d8:bb:69:c9:6a:83:4b:b5:
                    28:90:91:c8:5c:49:46:6a:d6:b9:d4:4d:44:19:17:
                    91:b7:ae:ec:80:a7:a9:dc:8e:33:f5:9d:01:3b:9e:
                    a3:9a:14:0d:8c:52:79:43:c7:a3:6a:6a:1c:a1:60:
                    ad:4d:3c:c3:fe:c4:12:dc:c5:ec:0c:67:c4:1b:74:
                    9b:a3:23:7a:8b:b3:3d:a5:3b:96:2c:ad:05:4e:62:
                    b6:04:57:6b:2a:4b:38:db:fd:41:67:8c:33:45:14:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:E2:C5:84:24:18:B6:21:F4:40:4D:0D:4F:EA:50:6B:B4:78:CE
            X509v3 Authority Key Identifier:
                keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:95:be:be:de:99:9d:64:f2:e3:f7:bb:f0:45:2b:d1:07:a1:
         65:68:a6:e7:00:e3:3b:52:17:06:f1:70:a4:93:1b:1d:be:69:
         c9:98:8e:12:52:37:6e:2d:50:1c:9e:3e:18:1d:fe:c9:44:18:
         cb:6a:9c:b8:8b:2a:8d:d9:f3:2c:c4:e4:41:a9:26:ae:aa:a2:
         5d:65:59:50:fd:51:0b:9c:2d:fd:cb:0b:09:df:1f:4f:d9:bd:
         b2:f8:65:36:18:b5:ac:56:42:a4:91:a2:e9:ee:91:36:c8:9f:
         48:b0:8b:96:44:f9:8d:97:23:c9:d1:be:5c:2c:19:e5:91:34:
         b2:66:c3:98:0b:86:5e:5b:ef:e0:bf:94:42:5a:ba:4b:9f:15:
         ad:94:e9:88:1b:17:e5:76:ea:90:2c:ae:88:06:8f:7c:04:88:
         f1:33:40:cf:47:65:08:aa:e6:04:fe:26:35:69:95:f4:54:3c:
         c6:e2:3a:13:f4:f8:26:b0:5c:01:61:67:21:d5:aa:58:9e:4e:
         b2:e0:50:f0:87:8f:17:03:2b:ff:a4:bc:53:9d:7e:46:ba:9b:
         15:e1:f9:5d:f1:05:fb:67:02:af:57:ad:14:37:07:ed:cc:9c:
         bf:37:bf:3a:62:9c:be:33:ba:5d:45:24:6a:5f:f2:56:b0:47:
         db:0c:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:20 2024 by rpki-client on console-ams.rpki-client.org