Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File:                     lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier:          qkk/a9AFtxszbHKnL2R+OKcmUBKal3z5Zg5eQ9hF6f8=
Subject key identifier:   6F:FA:D0:C9:F1:2E:95:27:74:A4:F7:FA:FC:53:F8:E0:D1:F4:E2:ED
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer:       /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial:       019367EB286D5B806409699894B01870C9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number:          0C1E
Signing time:             Tue 26 Nov 2024 10:01:24 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:24 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:24 +0000
Files and hashes:         1: bCJffUiyVy7nw_kx6uiG7B8Kxck.roa (hash: 97X0P62yB3qNuVwqkJjzGe39aKJEAmqhvmlrGTq0qzA=)
                          2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: NpMAFrzq5Wh1/adz6ooFpuRhoPx4XfysE7KObhBsEuQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:28:6d:5b:80:64:09:69:98:94:b0:18:70:c9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
        Validity
            Not Before: Nov 26 10:01:24 2024 GMT
            Not After : Nov 27 10:01:24 2024 GMT
        Subject: CN=6ffad0c9f12e952774a4f7fafc53f8e0d1f4e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:9f:6d:e2:85:ba:a3:3d:3b:8f:27:aa:36:
                    ee:cb:b9:3d:e7:d3:60:7e:da:60:be:6f:4f:63:35:
                    0d:9f:4b:37:dd:2b:77:f7:26:c4:e8:e5:f6:7f:3d:
                    78:4a:14:ef:7a:d9:2a:40:32:ab:db:a6:73:60:4f:
                    b9:2e:3d:80:62:f9:b2:38:89:36:86:0d:d4:d5:ed:
                    5c:ba:fe:3e:db:62:c0:ee:90:8a:8e:41:ae:f4:af:
                    49:bb:1b:88:91:ae:99:78:88:07:43:58:6a:25:69:
                    aa:2d:e2:fd:ff:2e:de:39:db:d4:5c:84:07:07:3d:
                    83:73:a8:ec:29:73:ff:b4:6e:cc:20:11:20:42:12:
                    f7:bd:cb:08:77:81:39:c6:82:5f:6d:79:86:97:5e:
                    57:d1:a4:fa:95:0d:c4:47:1e:47:fa:0e:bc:ab:04:
                    0b:45:48:d6:e7:4a:fd:6d:58:b1:d1:a2:9b:a2:e9:
                    d7:79:4e:ef:20:f6:80:bf:a3:d8:27:3e:3a:c9:63:
                    e5:4b:cd:9f:c5:06:5e:18:28:20:53:78:df:55:b8:
                    fd:d5:a0:a7:a7:85:8e:38:06:01:c3:f3:40:c0:b9:
                    e8:ee:fa:50:e0:92:77:fd:17:c8:0b:33:a4:ed:57:
                    28:99:45:64:d1:9c:e0:fb:24:89:2d:6a:db:83:16:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:D0:C9:F1:2E:95:27:74:A4:F7:FA:FC:53:F8:E0:D1:F4:E2:ED
            X509v3 Authority Key Identifier:
                keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:46:f7:9e:64:ec:02:c7:25:1a:07:59:71:33:37:e6:4f:dd:
         44:23:9e:8e:ed:ab:5e:b2:86:5f:7b:2c:a9:7b:54:a7:ce:7a:
         eb:6a:0c:ea:ed:82:f6:c0:fa:d5:52:01:6d:e5:fb:21:4d:2c:
         84:32:a8:e0:70:08:70:53:3d:62:ae:86:f5:aa:86:3e:eb:29:
         24:a2:be:6f:8a:c8:b5:0c:0f:1f:4a:86:ef:45:9d:62:12:92:
         60:8d:7b:10:0e:58:1d:bb:3f:70:e6:c0:6a:5e:c3:26:91:b9:
         7a:bd:2e:3a:99:fa:bb:22:c0:d6:05:ba:52:80:b8:0a:e2:9f:
         c1:57:44:10:10:02:34:59:b8:88:40:42:d4:31:ff:65:a1:ae:
         18:af:cb:ae:85:07:6c:33:01:b6:41:2f:65:22:17:da:8d:ca:
         69:d2:e7:32:f5:6d:29:ab:6b:1b:44:a1:39:9c:c2:a4:a9:43:
         4a:d9:19:c3:cc:d7:a2:8d:0b:c1:56:8e:0d:5b:86:f6:a6:2e:
         b0:76:a1:2e:59:7b:35:92:ef:7d:2e:02:37:b0:cb:16:35:23:
         2b:3f:0b:2e:5d:22:8a:ac:08:29:f0:64:ba:11:c9:19:f7:f6:
         1c:db:9e:68:eb:88:dc:b0:de:c0:61:8f:90:61:75:c1:c2:c7:
         d0:44:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:41:19 2024 by rpki-client on console-ams.rpki-client.org