Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          rbKUktLPi/eSO0WOUnXr1PR5odSEQeW8wGkJQ+cVM34=
Subject key identifier:   C7:2F:7F:64:0E:12:5A:11:07:93:7F:9D:A2:1E:49:50:26:DB:F5:4B
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       019350BE43898C43414BDEED9DF971EADB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          1375
Signing time:             Thu 21 Nov 2024 22:01:06 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:06 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:06 +0000
Files and hashes:         1: IhPVI-B3UfglUnjwYWqmry8wGHA.roa (hash: FyYSVbf5UUBjyENFu9Y/5OKjkumgyiBGL8SQOn9Q+q8=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: IviQuV1I/lxpLQBdhh509YEVgVLssaav/VtN4TMvFt8=)
                          3: RXEEhyHtoVBsjsgZbGbtjTy2kBw.roa (hash: unZ5NoAbc3A558NicFa4i4RG5dMWnnbUpeiukKVmqAI=)
                          4: yns2H9tAIF_TyPIKHLSEjFqiNQI.roa (hash: KiJXW9bXEr145FNj/5PPI0lRzzwyA0LwFVVTIWN9R4I=)
                          5: z25BH6ICZHlUMA4_ImkQhf7wpCw.roa (hash: UjDQ1VHCrZv89mhsIPY1AeQzcmiNKfRY0Z3keLU6kQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:43:89:8c:43:41:4b:de:ed:9d:f9:71:ea:db:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Nov 21 22:01:06 2024 GMT
            Not After : Nov 22 22:01:06 2024 GMT
        Subject: CN=c72f7f640e125a1107937f9da21e495026dbf54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:11:55:ac:cb:c0:b7:9d:71:e8:65:05:17:
                    d4:fa:2d:eb:18:11:86:ba:14:3f:d3:41:d7:c1:9f:
                    7c:30:6c:ec:f3:e5:43:91:5b:22:87:5a:75:5a:e0:
                    53:02:21:a5:ed:1c:07:fc:70:e6:de:75:53:af:9f:
                    ce:f8:a3:63:87:51:d6:a4:1d:3c:02:b0:b8:38:c0:
                    7f:24:f3:60:ac:61:a4:dc:71:cc:8e:0b:39:e9:74:
                    2d:8d:18:97:7c:ab:a1:29:68:dd:fd:8f:28:b2:9e:
                    7f:3d:62:5b:05:53:97:0e:99:0d:12:e1:2a:1a:aa:
                    79:51:72:56:30:6d:ff:c7:79:0d:d1:0b:73:72:4b:
                    74:a8:22:a4:17:f0:c9:c0:3a:40:b9:c8:14:35:25:
                    91:ed:7a:c6:6a:50:bb:a0:a4:37:c1:95:df:ad:a6:
                    0c:23:f4:3d:a1:bc:bb:f1:2a:03:54:fa:00:0c:cb:
                    17:ea:c8:2e:2e:77:ce:46:87:fd:55:74:df:1c:5a:
                    f8:0b:56:00:0f:23:55:6c:ef:e7:86:00:45:f3:f0:
                    8c:10:2a:a2:ed:04:e4:57:c2:a4:04:57:5d:52:59:
                    09:8e:9b:dd:69:76:dc:07:bd:49:03:09:bd:40:47:
                    91:5a:f4:8e:0b:7e:55:8e:06:db:ce:da:ba:0c:d1:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:7F:64:0E:12:5A:11:07:93:7F:9D:A2:1E:49:50:26:DB:F5:4B
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:30:09:13:5a:f6:a0:81:90:ff:4b:74:33:74:66:b0:ac:3f:
         e2:d8:77:48:87:18:3e:f6:4d:20:f0:4b:18:18:fb:59:58:9a:
         e8:f5:41:71:51:a3:fe:33:50:d9:df:5e:9f:aa:f8:19:7a:6a:
         52:a0:09:0e:10:fe:92:e8:0e:f1:51:2a:ab:3c:d3:d5:4a:62:
         ad:6c:4b:93:03:c6:97:f2:47:23:fa:47:2b:a3:f2:c5:1d:07:
         7a:f6:06:b1:4d:84:e9:f0:5a:0e:4c:cc:94:9e:18:00:1f:08:
         8f:b8:4d:1e:bb:e9:e7:2e:ee:aa:2a:97:84:51:cf:5c:25:a0:
         3b:b8:dd:39:82:14:55:ce:64:a4:c7:f3:58:37:68:7e:9e:90:
         b9:46:f7:09:0b:ad:92:7a:eb:d9:4f:cb:d6:0f:91:b8:1d:85:
         db:15:e1:70:2e:cd:8c:c5:99:f3:ec:92:11:b7:a8:71:5d:6d:
         7b:82:e5:fa:01:6a:96:9d:1d:38:0c:3e:da:50:94:fa:d0:3a:
         e3:bb:38:43:17:83:02:3b:e9:22:26:2d:e6:84:90:5a:1c:08:
         a4:25:43:65:47:24:92:45:d8:c6:de:76:be:24:ef:e5:fa:5b:
         b0:2c:d9:33:e8:64:1d:e9:5c:4c:de:e4:75:0b:36:21:c6:7a:
         2d:ff:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:36:52 2024 by rpki-client on console-fra.rpki-client.org