Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          FQ3fLP9dABu/Ee9rWwG4x9aWruUDFMehNNg0rz4Foh0=
Subject key identifier:   9E:78:E8:ED:FB:AD:BF:25:1D:E8:EA:67:FE:AA:1B:C5:85:36:4E:81
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       01935989EA87718E6212310D513AA193EC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 15:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:30 +0000
Files and hashes:         1: 198EAo_AOrdl9gfZODM7SN4sRdo.roa (hash: MoIFvmQe/GHPQuehKprscwSa3OtS5uShBr2po6WN9Mw=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: TP06NUdUcnyjbMyvGMADb6V1iVk8zPF/HnIdl5mKyLQ=)
                          3: SoEj_qavwax6dgcyvzmLN783wQU.roa (hash: 9EQJjePcFP8dJRZ+3QxDEBMc3mJOJj8bgaVp1ipXkRI=)
                          4: ZufIpc7G6i1yaL3-5k4QZrH_ph0.roa (hash: qbpJ6bh7yEDQoqQeaTJ4ekYqK3GZH52c16k3SYjk8g8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:ea:87:71:8e:62:12:31:0d:51:3a:a1:93:ec:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Nov 23 15:00:30 2024 GMT
            Not After : Nov 24 15:00:30 2024 GMT
        Subject: CN=9e78e8edfbadbf251de8ea67feaa1bc585364e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:8b:6d:40:c8:73:7a:b8:ca:c0:a6:07:22:
                    1b:cd:2d:52:8c:4d:2a:e5:7f:cd:3f:42:e0:74:21:
                    08:a6:7f:fd:a8:f0:de:13:38:91:11:3f:92:a8:85:
                    93:39:f1:d6:5e:64:02:99:23:10:a7:36:86:71:31:
                    0a:6d:d0:0e:b7:2b:77:b8:c9:fe:7f:6a:23:bb:79:
                    bb:1b:33:8c:e0:0f:ee:8b:9d:80:94:14:0a:79:d1:
                    0c:cf:d8:7b:a0:88:92:9f:e7:79:00:30:62:83:46:
                    e2:3c:df:b4:04:c2:2e:05:02:0a:4f:69:ff:55:38:
                    c8:7b:0c:1d:b5:4d:1e:f5:a9:80:cf:b5:07:0a:b9:
                    dd:fb:d5:b9:9b:51:bb:95:5b:55:8d:3c:b1:87:98:
                    d8:d6:4f:86:b4:97:fb:87:91:8a:3a:d1:e3:ca:40:
                    d6:12:54:b3:62:fc:a7:06:71:c6:03:1b:8c:d1:c1:
                    6f:84:73:b8:73:af:88:bd:c3:e8:16:9c:8b:e8:1f:
                    01:75:ed:79:04:46:68:a5:d3:7e:a3:68:9e:3a:a1:
                    7c:0a:1a:0d:bb:34:8b:b7:24:65:d0:51:47:2f:36:
                    e0:76:91:3d:b9:4e:62:56:db:a5:65:59:30:63:43:
                    e1:ac:c0:dc:61:59:ca:de:3e:3b:37:1f:fd:94:eb:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:78:E8:ED:FB:AD:BF:25:1D:E8:EA:67:FE:AA:1B:C5:85:36:4E:81
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:75:d8:48:7b:58:5d:8f:c5:ef:67:e0:51:97:57:67:c1:
         e3:fd:ae:9d:21:38:30:53:b1:b6:03:98:33:16:97:7b:73:44:
         45:4d:a9:ae:19:b0:c3:27:ca:f9:ca:90:1a:a2:10:3f:d1:2a:
         f8:b6:92:d7:41:9b:0e:2b:da:0c:00:35:c0:71:98:27:76:ca:
         85:06:46:90:d8:43:a0:21:f3:0b:a2:94:1b:39:94:ec:d4:9b:
         a7:ef:17:c3:a1:6b:5a:af:90:22:a1:d7:f2:47:72:bf:45:9f:
         d9:11:d2:2d:37:87:80:ee:0b:a4:7f:49:a7:86:3e:58:ad:d3:
         2f:cf:18:4c:bd:0c:4e:0f:3e:5c:ca:76:ff:b9:ce:73:06:80:
         73:78:37:53:1e:54:6f:2c:9e:08:f5:76:f5:92:9a:e6:c4:0f:
         77:1d:27:7a:cd:84:41:98:d9:b1:1e:22:0d:8f:70:82:e3:8f:
         31:0b:d8:68:c1:4f:d8:e0:9c:ae:e2:c8:69:99:69:5d:0f:6b:
         05:7a:a7:08:40:0b:e7:e6:51:72:44:ed:16:13:f2:b2:07:34:
         7b:39:73:8f:e1:57:bd:a7:ff:42:8f:1e:c6:7c:c0:10:19:bc:
         75:8d:bb:5e:85:9d:e2:7d:23:e6:f9:88:07:ae:af:47:29:18:
         37:c0:1c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZieqHcY5iEjENUTqhk+wKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj
MmFhMDcwHhcNMjQxMTIzMTUwMDMwWhcNMjQxMTI0MTUwMDMwWjAzMTEwLwYDVQQD
Eyg5ZTc4ZThlZGZiYWRiZjI1MWRlOGVhNjdmZWFhMWJjNTg1MzY0ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsmLbUDIc3q4ysCmByIbzS1SjE0q
5X/NP0LgdCEIpn/9qPDeEziRET+SqIWTOfHWXmQCmSMQpzaGcTEKbdAOtyt3uMn+
f2oju3m7GzOM4A/ui52AlBQKedEMz9h7oIiSn+d5ADBig0biPN+0BMIuBQIKT2n/
VTjIewwdtU0e9amAz7UHCrnd+9W5m1G7lVtVjTyxh5jY1k+GtJf7h5GKOtHjykDW
ElSzYvynBnHGAxuM0cFvhHO4c6+IvcPoFpyL6B8Bde15BEZopdN+o2ieOqF8ChoN
uzSLtyRl0FFHLzbgdpE9uU5iVtulZVkwY0PhrMDcYVnK3j47Nx/9lOssxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ546O37rb8lHejqZ/6qG8WFNk6BMB8GA1UdIwQY
MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt
MjcxYTk1NzZlYWU3LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3
LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGt12Eh7
WF2Pxe9n4FGXV2fB4/2unSE4MFOxtgOYMxaXe3NERU2prhmwwyfK+cqQGqIQP9Eq
+LaS10GbDivaDAA1wHGYJ3bKhQZGkNhDoCHzC6KUGzmU7NSbp+8Xw6FrWq+QIqHX
8kdyv0Wf2RHSLTeHgO4LpH9Jp4Y+WK3TL88YTL0MTg8+XMp2/7nOcwaAc3g3Ux5U
byyeCPV29ZKa5sQPdx0nes2EQZjZsR4iDY9wguOPMQvYaMFP2OCcruLIaZlpXQ9r
BXqnCEAL5+ZRckTtFhPysgc0ezlzj+FXvaf/Qo8exnzAEBm8dY27XoWd4n0j5vmI
B66vRykYN8Acew==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:56 2024 by rpki-client on console-ams.rpki-client.org