Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File:                     LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier:          VNK8HthAVA6hZTakd/kOWzOr3espfrRt7pf/19jcb1k=
Subject key identifier:   DF:12:9A:26:BE:3B:D9:0A:E8:44:8A:AD:00:28:9D:92:6B:11:32:91
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer:       /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial:       019357D2E12F29FE5D0B220D2140C313A68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number:          0B23
Signing time:             Sat 23 Nov 2024 07:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:58 +0000
Files and hashes:         1: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: IUlCQ36c4aBB/ka8qrl1R3//2UxqFkoFM3ypC0f97EI=)
                          2: vPTRsd9teKzc-Jp8pONz8RpDtfU.roa (hash: Hair8uSLGSar0YCOZt0EX1kQcY4jxDWEiIsJ8wSbw/A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e1:2f:29:fe:5d:0b:22:0d:21:40:c3:13:a6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
        Validity
            Not Before: Nov 23 07:00:58 2024 GMT
            Not After : Nov 24 07:00:58 2024 GMT
        Subject: CN=df129a26be3bd90ae8448aad00289d926b113291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:44:9c:09:b2:f1:49:6f:04:eb:03:ec:97:
                    f1:52:4f:5b:bf:40:0d:40:ea:08:92:57:5d:c5:af:
                    40:a1:ba:b6:57:2a:fc:1a:da:9f:92:9d:42:b0:30:
                    60:ca:d2:9c:d2:98:7d:93:99:20:e1:f2:6b:42:26:
                    94:cf:c3:51:bc:39:50:95:c6:74:97:eb:5d:57:6b:
                    23:92:0a:9a:69:df:c7:76:0e:7c:db:06:3f:f6:ca:
                    41:cc:ea:c6:a2:2d:99:4a:f6:1f:0a:54:ed:03:18:
                    75:a4:c3:81:05:d3:44:96:22:bc:1a:92:1e:50:44:
                    8a:5e:f1:d2:18:10:d0:08:7d:15:e5:1d:10:29:22:
                    d2:c0:bf:7c:11:97:b9:1c:c8:bf:8d:62:36:82:b5:
                    11:04:17:4b:6a:be:3e:71:e2:39:16:b6:e6:d9:f5:
                    1e:1d:7f:bf:b2:64:bd:9a:cb:c3:9b:7d:da:4e:40:
                    3e:f2:6b:8b:66:07:d9:20:2a:dd:bd:eb:44:2e:61:
                    72:08:49:c5:6c:6b:ff:85:63:24:bf:89:dc:f5:a7:
                    27:09:c9:15:28:d9:31:93:f8:a2:86:c0:7d:1c:a3:
                    20:e7:d2:a7:86:14:b9:1b:11:0c:79:f2:54:d9:13:
                    9c:26:73:e1:62:4b:71:67:6e:a5:93:a8:c1:e1:d5:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:9A:26:BE:3B:D9:0A:E8:44:8A:AD:00:28:9D:92:6B:11:32:91
            X509v3 Authority Key Identifier:
                keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:31:a8:81:75:b5:45:25:5f:dd:2c:f0:9c:23:33:d4:ca:39:
         f3:f9:b7:3d:2a:34:1f:2e:c1:b2:06:33:be:30:4a:2d:d4:a4:
         99:94:e5:35:ad:d2:f7:c9:0b:99:0e:21:d4:84:b9:5d:9e:51:
         b5:2c:30:a6:3f:f1:bb:d1:95:d3:6a:d3:19:b4:76:2c:21:03:
         ab:ed:38:fc:59:d3:31:a4:2d:f8:e6:e8:61:da:72:82:25:e7:
         e3:22:62:5e:39:0f:a8:15:ad:09:67:11:fb:44:bf:69:75:c5:
         e4:a8:18:24:db:b4:53:ae:70:53:74:f1:a1:7a:9b:7d:c7:b3:
         67:92:21:2e:77:af:8d:6b:5a:d1:38:4f:07:54:d1:2e:52:86:
         ae:a5:8e:e2:2f:d9:bf:72:08:8e:d6:6c:3e:7e:2e:18:b2:45:
         ac:75:99:fc:c2:ac:87:e6:fe:4d:df:86:34:99:6e:68:af:3a:
         be:12:4a:a2:33:f4:29:eb:a2:c5:9a:81:4d:35:34:4c:09:7c:
         27:b7:39:99:e5:ae:21:7b:81:32:8f:ff:bf:04:0c:b2:26:86:
         4a:1c:ba:03:4e:f2:27:2d:81:81:be:04:66:b9:4d:17:ec:9a:
         46:97:8f:8f:a4:54:bc:ab:2f:73:c7:2c:92:4d:98:1b:f8:6d:
         f3:42:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:53 2024 by rpki-client on console-fra.rpki-client.org