Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
File:                     LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft (raw, json)
Hash identifier:          uTraVZRz4eZ9srlBxYcrixqBCbvstLi7PAljjhsM2PY=
Subject key identifier:   06:FE:11:54:8A:C9:1A:C0:D1:52:86:FF:5B:36:05:DA:BE:BA:73:9A
Authority key identifier: 2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
Certificate issuer:       /CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Certificate serial:       019356F6F9F0DDA0F3ACEC313E96054C6E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:46 +0000
Files and hashes:         1: 1-dqFh1YsaZPjNe0IOZh3u6nVC8U.roa (hash: 1rcAoJcK4+eGde30IVdRHKUhsjNnMerIkEnXW6S3+CQ=)
                          2: LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl (hash: 1IFI2t1BR7UPyK/rLcAC4lXWncqHqVLQ0tJNJp/ldsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f9:f0:dd:a0:f3:ac:ec:31:3e:96:05:4c:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
        Validity
            Not Before: Nov 23 03:00:46 2024 GMT
            Not After : Nov 24 03:00:46 2024 GMT
        Subject: CN=06fe11548ac91ac0d15286ff5b3605dabeba739a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:58:ad:43:f7:06:97:9e:f0:df:39:7c:50:
                    89:cd:df:42:6d:0f:19:80:07:db:5b:49:fc:2d:b2:
                    d8:1d:9e:60:ef:ee:87:e6:cc:2a:82:59:c9:df:90:
                    cc:08:0c:38:bb:6f:4c:f5:71:37:4b:b4:fc:24:5b:
                    52:80:ec:12:e7:d4:18:b3:89:b3:a2:90:6f:bb:5d:
                    39:1c:ec:03:28:21:f4:cf:e3:9c:b9:4d:e5:f4:4d:
                    44:f4:c1:84:ab:b9:77:d8:26:fc:be:5c:0b:81:64:
                    5d:ca:fb:00:83:8c:7c:72:2c:88:78:93:fd:d3:1d:
                    ee:d3:56:e9:97:b1:09:a7:03:8b:7f:4b:2c:44:1c:
                    8b:7d:ab:95:cb:c2:49:75:52:76:46:b2:19:7f:0e:
                    b9:37:f9:81:f4:c1:35:35:1c:77:ca:2e:79:27:80:
                    75:53:07:19:5d:ea:b8:49:e3:28:d1:24:fa:d4:4e:
                    e2:ef:5d:d4:e4:bf:62:71:93:2f:e3:1a:fa:e3:b0:
                    a3:78:52:ea:b6:ad:1e:95:fc:19:f2:5a:71:10:bf:
                    b3:a1:5b:5e:9b:93:b0:10:b5:4f:aa:22:06:2e:47:
                    79:4a:ee:ee:45:a4:7a:b5:71:ef:42:e7:a8:64:2d:
                    d6:45:95:21:3a:2b:b7:0f:2e:a9:11:5e:84:63:a1:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FE:11:54:8A:C9:1A:C0:D1:52:86:FF:5B:36:05:DA:BE:BA:73:9A
            X509v3 Authority Key Identifier:
                keyid:2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9e:c7:ae:44:9f:1a:74:71:67:94:db:77:aa:98:f5:84:e7:
         f3:eb:15:d4:ab:0f:26:aa:99:10:ec:4e:d2:87:93:07:f3:be:
         79:ac:52:e4:98:9b:fc:78:9c:28:b7:c5:42:49:df:b0:a7:95:
         09:94:0e:2a:65:aa:77:00:98:21:69:17:1f:d3:7d:2c:b1:50:
         9f:1d:15:ea:4c:66:36:ab:25:74:02:7a:85:bc:1f:4e:0f:bc:
         84:f3:ab:3c:5c:60:95:3e:7e:16:ea:0e:5b:a3:e6:8c:d3:04:
         e4:0c:4b:48:e7:0c:89:c2:68:76:51:e4:d8:1d:7c:ad:15:52:
         69:0a:83:dd:24:0e:6a:30:90:10:93:46:8e:aa:9b:0b:da:1e:
         3a:bb:41:24:72:8f:d7:b0:ef:a7:ed:c5:aa:e7:c1:86:61:57:
         48:09:53:99:e5:a0:82:23:eb:31:88:f5:1d:15:af:a7:17:5b:
         58:41:0e:65:c0:80:e1:84:7e:6d:b6:47:17:5a:72:cb:a2:9d:
         2f:3c:4c:91:07:14:a2:9d:9f:52:98:5e:e3:bb:64:e0:b4:05:
         2a:38:04:13:ff:e1:e8:f3:8e:35:29:aa:95:4b:cc:b4:3f:58:
         f5:f3:46:f6:4e:63:9b:13:06:44:55:e7:e0:ed:59:47:d4:27:
         40:a2:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:02 2024 by rpki-client on console-fra.rpki-client.org