Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File:                     LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier:          IzAjh9oNsNILwSqTa66zsJoinPQvy5XWUflG2x8Weik=
Subject key identifier:   96:1C:47:C8:6E:36:39:4E:77:A2:1C:B2:D0:FC:FE:85:CB:53:64:77
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer:       /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial:       0193579B871E31D0D48003587767FC0C463C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number:          031C
Signing time:             Sat 23 Nov 2024 06:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:30 +0000
Files and hashes:         1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: Qa4Ouz89P6bXqV5zI5tiCG/3QFrDqbtzS8OisqW9ePo=)
                          2: vXiXqFTHkxigMYnUirfwZI2gL9U.roa (hash: 2tZI4nwuGWR3/gflq0kFrrK9P02MeUMKNITXIdpkZ7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:87:1e:31:d0:d4:80:03:58:77:67:fc:0c:46:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
        Validity
            Not Before: Nov 23 06:00:30 2024 GMT
            Not After : Nov 24 06:00:30 2024 GMT
        Subject: CN=961c47c86e36394e77a21cb2d0fcfe85cb536477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:10:35:06:f6:dc:06:27:e2:18:39:58:e5:
                    60:d0:bb:90:14:07:68:f4:19:67:01:24:07:2b:cf:
                    a3:87:73:60:6c:ac:ac:c5:f6:8a:9d:62:ba:03:a5:
                    be:dd:92:cc:e8:6a:ff:9e:89:17:da:3f:73:02:9a:
                    85:e7:60:2b:6f:9d:6e:5d:13:33:1c:1e:1b:c0:32:
                    d0:59:a3:c2:be:8e:63:46:05:40:20:65:a8:57:cc:
                    e6:8c:25:58:bb:0e:95:5b:41:6b:69:af:06:bf:93:
                    7f:4c:e1:a2:5c:e0:87:b6:4c:84:1d:d6:a3:d1:e3:
                    91:4a:a9:30:06:f7:1b:a9:9a:0b:9b:e0:0f:d7:6e:
                    76:a1:4b:cb:cf:3a:56:9d:ce:81:05:7b:da:65:7c:
                    cc:6c:2d:4a:ae:27:a3:dc:ff:90:6e:e6:d9:ad:ab:
                    76:f6:33:15:c7:da:f0:ec:9e:a2:d1:98:8a:39:1b:
                    9e:db:e1:76:df:3a:48:ca:ce:50:16:26:09:65:8b:
                    ef:a0:2d:8f:b7:fd:1e:6f:03:98:18:ba:68:4a:82:
                    6a:70:1d:30:ed:21:51:54:33:96:ee:b7:5c:85:22:
                    a8:8b:7f:f2:86:bc:07:2a:dc:df:60:1b:24:73:40:
                    38:0b:5f:64:95:6c:75:f4:ff:84:00:f3:6a:e3:0d:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:47:C8:6E:36:39:4E:77:A2:1C:B2:D0:FC:FE:85:CB:53:64:77
            X509v3 Authority Key Identifier:
                keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:7e:5e:3e:76:d2:52:02:e8:f4:d5:db:a5:9e:43:50:16:
         f4:72:0a:ba:60:bd:3b:d1:d5:77:b6:ab:af:ae:78:10:ba:a1:
         12:fc:f4:72:4c:33:db:6f:b1:92:d1:48:0a:80:21:92:13:1e:
         df:14:98:3d:81:8f:41:44:66:dc:c3:fd:b3:89:ac:68:da:9c:
         3d:e7:15:14:d4:ee:aa:71:ce:e2:b1:3a:84:1d:12:82:48:93:
         ec:34:21:cd:b5:8c:c9:73:1f:bb:8b:57:39:2b:03:c6:a8:2d:
         16:b2:9a:00:89:96:ed:78:6e:af:ea:44:7f:60:21:44:9e:63:
         8b:a4:b1:a4:a0:83:54:3e:a8:d9:93:7c:bb:0b:09:5e:49:d3:
         d5:9e:8c:05:60:65:ba:2e:d6:32:fa:be:36:79:74:11:2f:0e:
         4e:6b:d9:c6:88:72:3d:26:fd:89:80:03:8e:e6:df:cd:15:84:
         63:ba:78:d5:17:70:74:94:3d:7d:4f:c0:2a:c7:0d:26:82:d6:
         e0:75:2b:dc:77:71:2a:53:8a:81:e0:fd:1f:77:07:dc:13:68:
         6d:07:e7:7e:b0:28:bc:4d:81:c5:c2:18:0c:2a:11:7d:9b:06:
         77:4f:06:0b:4e:7b:ed:bd:71:30:6a:bd:a6:a8:75:1a:76:bf:
         ca:dd:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:20 2024 by rpki-client on console-ams.rpki-client.org