Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File:                     lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier:          1sKC818WlUtiveN5tjgE9JGsfBbVss6duYLH1KdIALQ=
Subject key identifier:   A2:93:6D:AF:22:E2:62:C2:3A:A3:38:A4:4A:D4:E8:C4:BD:14:EB:60
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer:       /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial:       01936A0F7C64BE665BF2343372BC4AAD6074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number:          0311
Signing time:             Tue 26 Nov 2024 20:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:19 +0000
Files and hashes:         1: 4NxxKvKOIIY0TqeBBK4wE_fw3as.roa (hash: ycfweKcJutLpmXYhD85BiolePE0B+KzNB5SExA8hy9o=)
                          2: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: 3UNlaU8ZpFZpBPJvg0bmzeDDlU4dz9eHHkMsBCD2s2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:7c:64:be:66:5b:f2:34:33:72:bc:4a:ad:60:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
        Validity
            Not Before: Nov 26 20:00:19 2024 GMT
            Not After : Nov 27 20:00:19 2024 GMT
        Subject: CN=a2936daf22e262c23aa338a44ad4e8c4bd14eb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:6f:c6:81:5e:a0:cf:cf:01:1f:60:04:64:
                    52:af:59:c1:54:ae:78:98:a1:af:4f:b2:5b:9e:a1:
                    99:d2:a7:85:a1:c9:70:8a:ef:94:02:f7:54:af:ef:
                    ea:c0:92:47:72:6c:80:98:8a:0e:8d:dc:21:4f:12:
                    30:1d:73:b0:6a:ce:1c:a0:6b:15:de:51:cd:14:23:
                    f3:28:a9:8f:89:fc:d4:27:f0:4b:f3:40:7c:51:e9:
                    b8:ef:d8:71:0d:97:67:30:d7:b7:e4:7e:ea:3b:df:
                    e6:15:fb:6c:b2:2d:ea:77:00:0d:04:7c:79:a2:ce:
                    e4:2a:8a:82:28:60:f7:98:ec:74:a6:51:db:c5:04:
                    8e:87:7e:4f:e6:97:00:87:28:d8:a0:a2:2e:4a:08:
                    ca:47:49:5d:7f:52:c2:c4:41:ea:bf:4d:d1:a4:cb:
                    bd:1d:15:ba:37:1d:ea:5e:54:7c:85:7f:6d:04:6a:
                    32:d5:e5:cf:a0:4a:0f:52:77:3a:a2:de:7c:ec:df:
                    c7:5f:09:45:33:16:3f:5c:21:58:ce:28:0f:83:ac:
                    21:bf:f0:78:de:78:84:c6:1a:ba:05:31:b2:83:0a:
                    1a:02:b8:0b:56:3a:f4:86:28:19:40:96:35:45:e0:
                    01:a7:21:2a:f9:2d:6e:5c:f0:56:61:39:59:6b:86:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:93:6D:AF:22:E2:62:C2:3A:A3:38:A4:4A:D4:E8:C4:BD:14:EB:60
            X509v3 Authority Key Identifier:
                keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:57:f7:ad:83:e4:36:53:c6:b0:3f:83:70:70:6c:77:a7:
         47:0d:96:71:b7:fb:32:70:b9:3f:50:ce:4d:59:3d:94:c2:a1:
         58:e0:8e:35:66:2a:5d:7e:ac:64:ac:bb:79:e9:6a:1b:f2:d1:
         1b:27:7c:58:5a:79:b5:5c:19:f9:f5:e4:f3:5d:a2:af:1f:5e:
         95:cc:76:4c:6b:28:bd:6d:37:58:e8:f2:17:5d:de:bb:b9:86:
         97:22:f6:05:e5:65:bc:05:a9:35:89:1d:49:d2:71:36:4f:92:
         a8:d8:51:ee:89:ef:d6:47:c8:cd:ea:ae:05:b7:bf:23:48:9c:
         7e:26:71:80:96:7f:a7:de:a1:ed:db:f6:5b:c2:b5:54:c3:e8:
         45:f9:2f:be:08:02:f1:21:e5:c3:8f:33:5d:02:90:52:b3:91:
         34:a6:35:f6:e5:ef:08:e8:d1:d4:bc:c1:d7:45:5e:f5:9c:93:
         26:2d:1d:aa:6f:88:ff:b1:d7:0b:9b:1a:ec:9d:bc:2b:e7:cf:
         b3:ff:eb:1c:89:55:58:4a:3a:83:e8:8a:b3:28:4d:bf:c3:92:
         0c:55:e6:93:f9:3c:ce:02:07:d9:d6:49:d6:4d:4f:48:f8:e1:
         f6:f7:93:d1:1e:ad:6e:f9:35:6a:5f:36:a6:91:21:24:db:41:
         24:d3:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:58 2024 by rpki-client on console-fra.rpki-client.org