Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          ZyOQA25jAzpDk++zLF4X+eF5ZmtQb+2JkR3a+Vd99ko=
Subject key identifier:   17:81:74:49:30:1A:93:7D:5B:87:6D:02:74:6F:57:E9:BC:93:EB:E5
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       01935953226A4F22E2F5E5490ABDA60F184C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 14:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:40 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: hc59GSBia858HWUfLZ++mTcTNQYBrWtVEXWDeBzNGcw=)
                          2: 9QGnahV28bJhwnCPwABtzpfIbxs.roa (hash: iCZlPb8sAq/BNgWfg+hDugN1s/PGXJ3WXHINajuUauI=)
                          3: Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa (hash: dTGXyDfdtUVV2CzePxKiEmHN/y70KzHio+uSm4YC2Xc=)
                          4: vxqsKSvClHem1rkXsWg9SgycOSo.roa (hash: hl8FUcab8D07kUCMeEBw+apbdDp9p0mx/B7Ui6jzruk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:22:6a:4f:22:e2:f5:e5:49:0a:bd:a6:0f:18:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Nov 23 14:00:40 2024 GMT
            Not After : Nov 24 14:00:40 2024 GMT
        Subject: CN=17817449301a937d5b876d02746f57e9bc93ebe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:d0:76:4a:54:b5:97:ef:9d:47:87:cb:ae:
                    0b:d9:f5:fd:95:b2:c0:39:af:80:0e:d1:17:cd:1c:
                    24:ef:56:62:4e:26:f8:1c:fc:34:dc:d3:dc:1d:3a:
                    55:07:e0:fd:48:72:27:b5:67:03:f3:33:93:a0:66:
                    99:d3:2e:ee:23:28:63:3f:68:16:d6:37:75:25:c1:
                    ce:fb:92:3d:29:3e:19:75:60:ed:4d:53:e6:b6:82:
                    70:2a:b1:87:86:6a:b4:29:01:56:78:69:92:19:e4:
                    c6:74:8b:be:bc:96:a0:c2:45:5a:c1:48:b3:cc:a6:
                    d3:a6:ad:22:43:e5:08:40:63:99:04:00:dd:c5:cf:
                    1e:26:1f:8f:b7:83:db:0b:8d:ee:d2:e9:4d:d3:a5:
                    da:4a:e3:fd:46:94:9a:21:33:25:6c:4a:4e:a1:33:
                    41:a0:0e:22:b8:f6:31:bb:9a:b9:3f:7e:e0:47:b6:
                    49:7c:5c:37:80:70:d3:12:d9:3a:65:62:13:33:b8:
                    5c:50:dd:af:2a:3d:ec:aa:66:7a:14:0e:d7:75:a1:
                    2d:49:4d:7d:35:75:ae:7d:a6:a6:65:65:a2:ef:14:
                    e7:f0:e5:e7:54:e1:6d:eb:cd:34:34:2a:01:f1:74:
                    8e:ff:ff:3d:bc:c1:da:b4:57:4f:8e:2c:ff:ce:2d:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:74:49:30:1A:93:7D:5B:87:6D:02:74:6F:57:E9:BC:93:EB:E5
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:87:21:ed:e3:e7:87:77:20:e9:50:bc:56:11:5f:1e:8e:a2:
         e9:54:d9:c4:95:83:b5:f6:af:3c:3b:85:e3:5d:fc:c8:91:1d:
         3d:af:26:5c:eb:9a:f3:c9:3f:57:e4:d9:6c:53:2d:ba:fa:17:
         49:95:08:91:8b:f2:5a:69:2e:c6:24:8e:b5:9b:d3:3d:90:3b:
         6b:b5:ee:1d:40:e7:6a:25:1f:ec:ae:98:1f:01:b8:4d:5c:38:
         db:13:1b:02:3e:ac:cf:07:ba:35:f4:98:d8:bf:18:db:fa:8e:
         43:c6:93:c5:d6:79:20:30:bd:47:50:45:2e:40:b2:ae:3a:f7:
         6e:3c:fe:ff:4d:ff:eb:fb:a0:91:1a:50:2c:0c:5c:5f:00:3e:
         7b:de:ca:aa:74:b4:c0:7e:39:31:c7:f8:65:a3:07:f9:ea:98:
         f9:41:e6:67:61:a6:d9:5a:2d:70:0d:c1:99:ff:a9:57:78:16:
         c8:15:86:08:21:5f:e7:1d:cb:4b:ab:1b:37:8d:98:7f:2f:71:
         4a:94:74:a4:65:25:80:99:13:73:3e:0e:4b:f9:59:3f:0e:32:
         c3:db:bd:5a:f9:7a:25:fb:90:ff:25:59:1b:5a:a0:93:88:ef:
         24:f6:de:6e:18:f3:ca:c4:69:61:50:d3:d5:9e:03:63:74:fd:
         b4:58:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:00 2024 by rpki-client on console-ams.rpki-client.org