Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File:                     l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier:          f/z6QZQdMSv/oljdX+mAQZ7aNx6v2jOSzunqYpwt2S8=
Subject key identifier:   CB:C2:DE:DA:5F:E5:A9:D2:9E:8B:15:63:1B:D6:B1:CC:BF:49:FE:8E
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer:       /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial:       0193572DB99D1642A7879CDD884F2CA907FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: MhvWAE50wkc3iJBUqAcAxpSswow.roa (hash: oKAzseOxraW1Cu5QLTDmdb2JApt4G3EYO/O1eCjIMoM=)
                          2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: ZhGKxOS+U07Yd7QZqmQycgJygI194NAJ0HXqnWzG9KI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b9:9d:16:42:a7:87:9c:dd:88:4f:2c:a9:07:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=cbc2deda5fe5a9d29e8b15631bd6b1ccbf49fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:2e:db:46:79:dc:77:22:ba:fa:eb:f2:7c:
                    42:a1:d7:1e:c6:8f:d5:c5:73:1f:c7:f8:6d:75:d5:
                    61:e1:de:c0:8a:02:fd:90:b0:42:d4:d3:26:59:5f:
                    8d:c2:a7:3f:12:2c:ef:8d:9f:11:29:6b:ab:10:7e:
                    61:fb:99:44:35:ff:3c:cc:e8:92:d0:77:ca:77:2d:
                    15:1e:fe:30:65:7e:80:c7:cc:88:2e:62:61:61:0a:
                    0b:cc:5c:f4:f4:90:c5:16:9e:5f:1b:bc:fb:d3:7c:
                    6e:65:55:94:3e:6b:c0:4c:7e:82:38:c9:1a:b1:4b:
                    cc:98:6c:a0:5f:02:0b:7e:1f:49:f9:18:1f:06:64:
                    f5:40:95:3e:b1:b2:12:30:6f:93:17:90:dc:16:82:
                    b0:dc:fc:e1:7e:09:4e:e0:35:5b:bc:c8:30:43:00:
                    ef:e5:43:97:ea:19:27:0a:9e:4e:a5:7c:33:7e:eb:
                    fe:f8:a1:51:bd:0e:02:f3:44:41:a3:fe:d2:f3:3e:
                    ca:e2:a5:f0:34:26:c6:64:6d:26:8b:0a:0c:08:74:
                    d7:95:9f:13:ce:cb:ba:ca:c9:ab:a7:f4:a2:b5:56:
                    6c:c3:55:2e:7a:e4:c4:aa:8c:cf:20:73:a6:28:b5:
                    98:2d:be:84:51:4f:0c:6d:98:6a:e6:5e:56:7f:38:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:DE:DA:5F:E5:A9:D2:9E:8B:15:63:1B:D6:B1:CC:BF:49:FE:8E
            X509v3 Authority Key Identifier:
                keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b5:e7:77:04:84:3c:3f:da:53:e5:0b:84:2b:22:d6:8f:1a:
         d7:b7:dc:30:e4:4f:99:a5:94:4b:6e:d6:5d:1c:80:b4:96:c9:
         4e:aa:5b:d2:ee:43:e8:60:51:7e:43:db:1e:96:32:1f:af:5a:
         c3:21:3b:00:94:fb:44:35:c4:b7:7e:c4:9f:dc:27:66:54:01:
         09:ed:ef:bc:89:23:ca:14:23:7a:be:bc:72:62:92:28:44:3f:
         02:e1:0b:bb:79:9b:87:71:3c:2f:74:2b:bb:20:3c:e8:8d:2c:
         6b:3a:be:0f:a2:86:06:44:5a:c7:82:95:bf:46:1e:92:8d:45:
         8f:9e:89:2c:fd:0a:0d:12:9d:f7:5d:9a:21:6a:ab:74:ae:ad:
         f0:ea:09:a4:df:c0:15:85:34:76:48:35:94:c8:9d:fa:80:c3:
         f0:d1:5c:c7:79:d8:a1:22:69:d9:e9:2b:c0:e3:d7:33:f5:8c:
         c8:05:30:77:ff:32:e2:26:9d:11:28:14:9c:39:67:98:a6:cb:
         63:11:ba:8f:22:f2:83:42:c1:d9:5e:e2:20:93:c4:1a:ff:c0:
         95:1e:88:8a:a7:67:68:6d:4e:22:8c:14:8c:7f:af:00:c7:78:
         d1:7e:70:12:82:e3:7b:c3:e9:d2:2e:16:a1:e7:5b:0d:b3:be:
         12:28:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:23 2024 by rpki-client on console-fra.rpki-client.org