Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
File:                     L1yrigmp_eI8ljX44WSu8J4XlIw.mft (raw, json)
Hash identifier:          GTRUjluI01gUq+gVMBnvwyPM2yLmt5PEZWZjxukf5bY=
Subject key identifier:   85:32:57:73:C0:1D:A3:8C:AB:C8:7E:A7:CB:22:1E:4E:8C:24:91:ED
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Certificate issuer:       /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial:       0193553F00A8610169B1DDEC271A59CD02A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
Manifest number:          0AE3
Signing time:             Fri 22 Nov 2024 19:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:12 +0000
Files and hashes:         1: 1-RxlRyygfeRidULSDCVw9BDLvoo.roa (hash: rNkZP9yBDG7yJ3OUbZEdFcMlQk31wrLry0/sX874pvk=)
                          2: L1yrigmp_eI8ljX44WSu8J4XlIw.crl (hash: csRFi+zV/iqAVz/czWJf7t8djLC3SlGZNeQQqiI3pSY=)
                          3: R9ECTGJZOxqblhgBDPVgQb4v0qM.roa (hash: Dh8mxxOXDXpFfKz9BJMTHn0EFRvpEfz0uo9R5VNrNqg=)
                          4: Y13ILNS63KARDK76GHeup0uuPmo.roa (hash: PcJwuBhDphQip+GtQQkq37CDhvrIrOsQRyfq31PfBMM=)
                          5: Z17Ca-3wpAdAGyuZ8ZrakW830ts.roa (hash: IhQelhqe8/ukvLEB8DR833OQfz6lCebNXrejFEQA5y0=)
                          6: m7bCfdzWhSAMvNkJ8Wi2-U6Rlp8.roa (hash: w5WwmE4hnTxjZzlvwsXIjFTsVJXWU/Wb1uBVsRDYsBI=)
                          7: q6lMLYBWWHaI77D3FXSw5Wr2ElE.roa (hash: RDjp+S5nCVNHZOUNOJBXdUN0SHwrIW2sMbv8OiahLGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:00:a8:61:01:69:b1:dd:ec:27:1a:59:cd:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
        Validity
            Not Before: Nov 22 19:00:12 2024 GMT
            Not After : Nov 23 19:00:12 2024 GMT
        Subject: CN=85325773c01da38cabc87ea7cb221e4e8c2491ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:a9:4c:04:b6:f9:85:84:b8:ee:8b:29:25:
                    f4:be:db:f4:e3:42:0a:2a:19:3b:5f:ad:b5:fd:48:
                    3d:9e:df:44:b6:07:a1:f4:d3:de:ad:60:23:06:5c:
                    25:97:ad:79:1e:ef:5e:79:9e:8b:2b:55:26:69:96:
                    1d:20:1c:17:2f:4f:35:7d:63:ab:4d:c9:88:1f:58:
                    c5:a2:c1:fc:f5:35:9a:e6:02:5e:b8:37:38:d5:10:
                    09:8d:38:7e:18:20:f5:09:52:f7:3e:30:09:d7:5d:
                    50:88:0c:13:59:4a:bf:a1:9e:36:c0:12:a3:00:b1:
                    83:14:86:c3:9c:da:e4:fa:a7:92:43:16:9b:3d:8e:
                    99:0e:e8:7a:b1:c3:d4:eb:4e:11:25:93:ba:ad:9c:
                    fe:44:50:10:27:d8:81:de:b8:10:3d:92:0c:e0:0a:
                    65:a9:68:4e:16:d2:0b:56:d0:8d:3a:97:76:de:90:
                    1d:fa:45:20:f7:d0:9b:84:1c:39:b4:75:96:68:b5:
                    23:16:42:81:b3:f6:0d:03:b9:71:f7:b9:81:8d:2c:
                    3b:0b:e4:56:4c:b1:b7:70:32:8f:45:b2:ba:68:d7:
                    bd:98:95:49:31:eb:ba:dc:6a:8f:7b:ad:c4:f3:ca:
                    0b:59:da:90:b3:f3:e7:b3:68:bf:ac:13:44:34:3c:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:57:73:C0:1D:A3:8C:AB:C8:7E:A7:CB:22:1E:4E:8C:24:91:ED
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:1d:13:a8:53:d7:d2:4a:ac:4b:f9:20:d2:08:fe:1e:aa:
         eb:3c:58:fd:09:cd:ea:45:58:50:0a:62:6f:c5:35:be:58:ab:
         76:56:10:09:5b:37:99:7c:30:8a:ba:a3:c0:0f:85:fa:b3:ac:
         11:da:f3:a3:48:21:8f:a8:59:3f:e0:cf:48:be:21:22:35:45:
         3e:d3:69:e6:4b:1c:f3:fc:73:ba:a1:22:f1:93:ad:82:5e:e1:
         1c:33:e9:bb:55:48:c0:5d:6a:b4:92:83:97:64:4c:d7:3d:39:
         c6:57:5f:e8:4a:5e:0b:04:92:3a:cb:3a:e9:01:ad:ba:31:4a:
         cf:84:1b:b6:b5:75:b8:6c:2c:94:f8:cc:8e:98:a7:35:05:0a:
         f3:0f:5d:e1:f6:a5:1b:11:01:1f:89:90:b6:96:71:af:66:1a:
         d5:61:fb:04:8b:b4:ad:ca:87:37:21:2e:54:69:63:9a:fe:04:
         b9:d2:8c:58:72:6e:25:77:04:79:97:17:51:f7:71:9b:33:3d:
         e3:a3:ad:a4:a9:23:c9:c3:0a:ba:fe:80:27:fe:15:ee:1c:73:
         49:7b:83:93:4e:87:43:5b:b4:99:69:cf:24:37:e3:7f:3c:55:
         26:88:a9:24:77:33:18:f9:97:b9:19:88:fe:d9:11:40:d7:b7:
         a8:ac:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:17 2024 by rpki-client on console-fra.rpki-client.org