Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File:                     L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier:          gix162Y95BGPTeey6GpgvTCO3Sdp5SZLECYuGWfNoCg=
Subject key identifier:   40:93:A4:56:5E:BA:FD:13:3D:04:41:B0:76:82:9D:09:D5:18:8C:4C
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer:       /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial:       0193519933862A48FEC851C99D1EB98AC55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number:          136A
Signing time:             Fri 22 Nov 2024 02:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:14 +0000
Files and hashes:         1: 1tWUQzOjOiuMQjPWuP1yT3t6QXU.roa (hash: aPOV/HBGx7gXZPrSE/9CN35JE8+w7fIiy8b+3+ih1L8=)
                          2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: g+OPplYietEvt6ju7D2AvDXvH3C/j81WOSk7+lJETCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:33:86:2a:48:fe:c8:51:c9:9d:1e:b9:8a:c5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc20be6167890247303214197658ca7c9676150
        Validity
            Not Before: Nov 22 02:00:14 2024 GMT
            Not After : Nov 23 02:00:14 2024 GMT
        Subject: CN=4093a4565ebafd133d0441b076829d09d5188c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:79:0a:98:98:82:ef:55:7e:f6:f6:d6:35:
                    4e:1e:7e:37:19:e9:23:ac:2d:eb:a1:08:c9:59:78:
                    73:59:91:a7:3b:c7:9e:51:74:ff:69:3e:c7:fe:39:
                    1d:0a:82:ad:02:bb:25:b3:83:d4:6e:73:dc:5a:5d:
                    1d:ff:1c:19:74:fb:a6:42:52:77:ff:2e:04:9a:d7:
                    ea:ff:35:11:e9:c6:b1:13:98:3a:2e:d3:3e:66:98:
                    ee:d5:fd:f1:7f:46:18:b4:9a:c3:a6:f0:0f:ad:53:
                    43:c9:93:f0:df:a8:7f:d2:ce:40:81:d8:19:9c:e4:
                    96:cf:4f:46:cc:1a:2e:39:7b:db:39:71:1f:20:5e:
                    e4:c8:59:f5:f8:35:05:67:84:cd:f7:d9:ea:ff:15:
                    d9:83:83:77:31:0e:0e:cb:39:b4:0e:21:83:47:ad:
                    8c:7e:36:76:36:09:56:b7:b6:05:bd:3c:2f:40:61:
                    c7:48:a1:b8:11:6a:65:63:26:a8:c2:34:64:e2:2b:
                    32:ed:cb:db:f4:05:34:02:d9:fa:7e:f4:f2:1f:2f:
                    d7:41:bf:a7:35:29:50:be:cd:7f:fa:34:04:57:f1:
                    6d:0e:5c:7f:b7:a8:ae:24:f8:01:19:9f:39:19:55:
                    89:99:0d:27:56:2c:62:7d:44:7e:c4:07:c5:cc:0c:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:93:A4:56:5E:BA:FD:13:3D:04:41:B0:76:82:9D:09:D5:18:8C:4C
            X509v3 Authority Key Identifier:
                keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:12:b3:f5:ab:0a:2f:ff:6c:b1:6b:f4:f6:85:74:d5:d8:
         38:88:25:de:00:41:6f:49:81:09:d9:7a:89:a9:de:22:68:47:
         a8:b9:28:0c:6f:21:3e:d5:a9:58:9d:89:47:10:41:9d:8a:7a:
         52:3d:8e:09:48:a6:ac:81:fb:f5:3d:19:75:43:41:90:b3:ca:
         60:d1:34:55:86:ac:f0:b3:a2:25:11:3c:b4:0d:44:74:a4:6d:
         3a:e2:23:13:57:86:2c:4e:9c:ea:78:62:42:c0:50:15:10:d2:
         bf:6e:e6:6c:4b:f5:03:bf:aa:08:49:66:03:c0:a4:31:c7:04:
         4b:2d:a5:60:3b:92:4b:8f:66:4e:62:27:4b:12:62:fc:a5:e9:
         5d:65:4d:08:40:da:ce:a1:9c:a4:e2:ec:ce:55:de:04:20:dc:
         ef:15:27:7d:68:90:81:8a:21:ed:3e:e5:91:63:80:ff:93:a6:
         36:bc:8c:7b:59:2f:5d:63:94:1f:7b:79:34:52:79:7e:21:ab:
         96:5e:be:d0:f9:1a:44:ff:37:f2:91:79:6e:11:3f:6a:8b:8d:
         10:79:68:8f:ca:d9:8c:b3:36:fc:eb:f0:2d:42:3d:12:02:40:
         cf:70:3c:35:a4:8d:d1:36:e9:44:80:e5:3a:d6:7a:85:bd:14:
         0a:8a:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:42 2024 by rpki-client on console-fra.rpki-client.org