Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
File:                     lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft (raw, json)
Hash identifier:          8iEwPhZybcM6X524s6Hy/0vCnV4dRoCYGkcQFWGXwpk=
Subject key identifier:   A7:C9:36:E2:7C:4E:EA:E3:1A:DE:1D:F8:D3:CB:0F:01:CC:E1:2C:0B
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Certificate issuer:       /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial:       0193568988E4FF3559598979D84A1B775FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
Manifest number:          0319
Signing time:             Sat 23 Nov 2024 01:01:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:14 +0000
Files and hashes:         1: QhprxYvdZjwi67Mb3W_zGibeP9E.roa (hash: B8UMsxTFzLbZcFm9E4OvYNU7vUmNelU96/zyU++WF5E=)
                          2: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl (hash: gJBDdsRf6qC+inoqKYFeYKooGPNqc5s3OFsFJHqc5wQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:88:e4:ff:35:59:59:89:79:d8:4a:1b:77:5f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
        Validity
            Not Before: Nov 23 01:01:14 2024 GMT
            Not After : Nov 24 01:01:14 2024 GMT
        Subject: CN=a7c936e27c4eeae31ade1df8d3cb0f01cce12c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:df:36:98:bd:68:6f:6c:b4:96:70:e0:c7:
                    20:66:30:c9:63:42:fb:89:39:1c:94:c8:46:26:c7:
                    b1:68:19:66:d9:51:ab:be:de:16:a8:85:d2:6d:c8:
                    cd:b3:5b:38:9e:fa:50:2c:ba:37:c5:39:4f:6e:b3:
                    af:f3:c8:76:1c:b1:f9:d6:f2:52:91:df:31:1e:ba:
                    59:aa:43:1d:6b:37:00:18:2a:3b:07:3a:66:92:82:
                    40:76:11:e8:a3:c9:22:cf:49:0d:67:4f:6d:a3:46:
                    94:b1:f9:ac:e6:04:07:6c:ef:3a:53:aa:11:2c:a7:
                    e7:eb:1f:30:8b:4c:61:0b:36:4a:02:18:0a:c9:d1:
                    4e:86:cf:1f:13:71:3e:19:28:52:d6:17:34:1b:42:
                    f8:b0:c4:5d:c8:be:86:74:a8:90:b6:fb:9e:24:00:
                    83:52:85:b4:10:f3:60:c0:24:a5:a2:06:8d:f3:5b:
                    23:a1:aa:3d:9a:18:87:55:83:99:d6:6e:79:2e:32:
                    a7:30:39:d0:b0:56:f8:54:97:89:0a:50:80:da:3a:
                    24:39:74:5c:bf:c4:00:6d:22:2f:2a:70:f8:90:e8:
                    36:31:da:e7:60:c7:60:78:d3:ba:bd:05:42:6f:93:
                    5f:99:16:0d:41:b5:20:1d:3f:d0:36:b9:af:aa:a4:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:36:E2:7C:4E:EA:E3:1A:DE:1D:F8:D3:CB:0F:01:CC:E1:2C:0B
            X509v3 Authority Key Identifier:
                keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:ea:27:7c:c3:fe:14:01:f0:10:32:78:dd:7f:8e:40:fb:
         27:74:ee:6a:1f:f2:a2:15:03:9c:96:fc:05:7a:51:d8:57:0c:
         0e:ec:71:59:e4:5a:86:b7:49:d9:b1:f2:64:62:81:d7:57:12:
         76:a5:ed:2f:bb:cd:3c:74:00:dd:b2:f9:63:12:a4:5f:39:d7:
         1e:72:64:44:5e:56:28:80:b9:bb:c9:67:7c:24:52:d8:f0:80:
         a5:d5:fb:eb:3c:fd:b2:af:a8:35:35:7e:31:53:69:40:73:6e:
         0b:3c:cc:dc:20:20:a5:f1:8b:96:c3:47:b1:31:4c:21:72:83:
         d6:ca:62:95:43:d6:ed:a2:23:de:02:1d:72:8a:82:c8:8e:ec:
         76:88:4d:25:92:ed:db:48:f2:dd:23:ad:af:c0:ea:06:40:dc:
         01:57:52:43:b2:82:9c:ed:e1:4b:9b:5e:9a:d1:f1:d5:dc:aa:
         64:91:98:21:e5:0e:45:a4:ad:3d:d7:84:97:10:53:07:4d:c5:
         ba:e5:4b:23:df:5b:54:01:e9:36:42:9e:ae:7e:03:d8:7c:a9:
         59:67:29:1e:53:de:0b:0a:7f:1d:35:38:79:d6:fe:39:bd:a3:
         4b:63:7b:58:f3:3f:32:45:74:fd:c1:b0:98:54:6b:13:ec:f4:
         7f:f9:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:35 2024 by rpki-client on console-fra.rpki-client.org