Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File:                     l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier:          DKHo68HWT68XZp86KF7uBvuaN0Qh/8eMG2aAEQAiMqU=
Subject key identifier:   EC:5C:02:73:FD:EC:FA:9F:B2:A9:07:4D:51:92:E8:4C:06:7D:02:AB
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer:       /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial:       0193561AC042ABE8C801882617CA128EC7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number:          0AA3
Signing time:             Fri 22 Nov 2024 23:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:12 +0000
Files and hashes:         1: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: Smd4HGEbW3SJCDh5d4xMUNmMoDVqjnbJWnDj/FU2wEc=)
                          2: qbahbC-G6iKoOuig33XM1KYRJ0I.roa (hash: qlfY/jG+a8BExzCqvzmPbWvmpJdCXEBtVkSbjV3RNvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:c0:42:ab:e8:c8:01:88:26:17:ca:12:8e:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
        Validity
            Not Before: Nov 22 23:00:12 2024 GMT
            Not After : Nov 23 23:00:12 2024 GMT
        Subject: CN=ec5c0273fdecfa9fb2a9074d5192e84c067d02ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:ac:21:bb:92:cc:6c:3f:78:2c:14:0f:e2:
                    fd:d7:63:3b:ce:7c:42:02:6e:67:d3:2c:28:09:b0:
                    85:54:09:6a:b7:60:c6:8f:57:20:1a:ff:78:44:c3:
                    1e:1b:43:7e:4e:d1:1f:9e:5b:10:49:e8:e2:b5:0b:
                    27:6d:7c:24:d1:d6:98:db:dd:db:09:8a:65:96:5b:
                    e1:52:65:3e:e0:8e:4a:ff:24:06:8e:8d:09:1f:90:
                    d1:e8:08:9d:e5:d8:f2:a8:e7:e5:7f:8c:45:07:02:
                    5f:e8:a4:5e:52:14:28:1d:a4:50:30:95:a9:76:a5:
                    99:97:e5:4f:4a:02:35:a9:7c:35:4f:75:ec:9a:96:
                    7f:91:de:c2:15:60:26:73:c0:5e:9d:53:2d:ab:07:
                    a9:01:b7:76:dc:f9:01:5e:bb:a0:6f:07:74:8f:79:
                    85:19:3b:fd:e8:55:eb:25:de:7c:53:60:7d:50:91:
                    d4:4a:4f:71:d6:f2:e2:ee:e5:a5:7e:f6:5c:42:ac:
                    20:1c:59:16:7d:39:bd:76:3f:a1:53:03:1f:53:17:
                    80:06:27:73:c7:5a:81:f2:fe:9f:cd:f7:53:71:ae:
                    70:45:7e:fe:2a:bb:26:83:c4:06:83:13:f1:33:f0:
                    ab:8d:6b:dd:9c:c6:0b:a9:e5:07:ff:49:b4:81:54:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:02:73:FD:EC:FA:9F:B2:A9:07:4D:51:92:E8:4C:06:7D:02:AB
            X509v3 Authority Key Identifier:
                keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:de:7c:dc:f5:17:8f:b9:12:39:0c:8c:75:82:3a:76:fd:
         aa:c5:c5:ed:b5:7a:8d:64:19:31:b6:2e:35:e2:ee:27:c5:6e:
         78:e4:c4:18:6b:79:99:3a:2b:a3:ce:61:98:0b:2c:6e:a8:36:
         6d:19:52:7b:12:bf:2c:6b:00:fb:5b:58:d4:1f:7f:97:0e:38:
         6e:4b:c4:f6:8f:92:65:97:a9:1f:19:03:c3:7e:18:17:ab:98:
         c7:b9:43:67:10:61:81:ee:2f:a4:6c:f0:24:71:be:4c:2b:25:
         ed:68:7b:ee:cf:c7:ea:94:d5:47:c6:3f:3b:90:6e:eb:98:9c:
         06:ce:64:06:e7:f2:6c:2e:4c:51:9c:ec:bb:8e:9b:42:4a:d7:
         f6:f7:22:f0:c7:11:fd:92:1f:d7:dd:b1:b6:be:27:0a:d3:c9:
         ee:15:64:e5:1e:54:98:3c:7a:ca:35:bf:c0:69:07:e3:86:4f:
         b4:68:5b:cc:cc:6a:a8:45:a2:4e:70:25:86:0b:0d:90:5a:8f:
         b4:d3:c0:97:88:42:a0:52:30:11:30:8c:64:09:ec:e2:fa:40:
         22:f5:78:9a:ed:56:e3:d1:87:b7:ed:b4:db:c0:9d:e9:e3:9c:
         52:72:ac:c8:cb:d8:ad:28:01:10:cd:1c:b4:7c:bf:67:d7:a3:
         56:64:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:31 2024 by rpki-client on console-ams.rpki-client.org