Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File:                     LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier:          wIF2kYWVklnEBA6VXbqPzD50m/08MQjoJaUtH/MXrXA=
Subject key identifier:   78:4C:EB:E5:54:52:C8:7C:9A:24:B7:10:0B:90:8C:A4:D3:42:BF:66
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer:       /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial:       019354D1487F310C30B029FC92879EF12C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number:          95
Signing time:             Fri 22 Nov 2024 17:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:21 +0000
Files and hashes:         1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: W5oqOEXRSsiE9adaVU/tnCSUSQyt+0GYXqTwvihOKAQ=)
                          2: _2jCqwzoB6eIsFrh7pL9lNMJ8Zc.roa (hash: 4ag4JLhIe5/eQoFCxCENrQCG7cnpZ1Y4L2o90przkDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:48:7f:31:0c:30:b0:29:fc:92:87:9e:f1:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
        Validity
            Not Before: Nov 22 17:00:21 2024 GMT
            Not After : Nov 23 17:00:21 2024 GMT
        Subject: CN=784cebe55452c87c9a24b7100b908ca4d342bf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:e7:7b:df:b8:21:a9:4f:9f:a2:1a:eb:8e:
                    16:69:5e:5f:22:96:9e:91:49:62:cf:6b:b2:bb:b5:
                    bd:e1:ee:e9:10:9e:04:97:5e:ea:a1:96:70:f0:bc:
                    17:a0:5f:ee:59:36:0a:67:d8:db:6d:ec:54:82:64:
                    d5:d3:a0:84:71:dc:57:69:ba:3a:e9:12:45:e6:71:
                    c2:59:ca:5e:22:2e:94:fa:66:22:2f:60:00:e4:69:
                    a4:e6:93:1e:9e:1f:66:98:bb:ae:2c:72:1d:b4:e3:
                    ae:02:40:18:05:ef:28:5a:ce:06:51:60:a1:1b:dd:
                    4b:e2:88:bd:f0:88:50:13:88:ea:bb:dc:a9:b2:0a:
                    a6:cd:47:64:b8:b3:d9:62:62:2a:4e:25:6b:9a:83:
                    08:a7:be:ca:10:4b:ec:58:88:b2:ba:2a:72:8a:3c:
                    9e:64:0b:d0:0c:c7:0b:4e:ff:73:47:9a:9d:4b:0a:
                    6f:20:06:bc:c2:47:b2:28:e4:c4:0f:f6:96:62:12:
                    9b:05:f5:2e:05:80:d3:03:64:54:d9:bc:b2:31:9c:
                    b3:a0:6b:1d:c8:46:d5:d4:3e:2c:fe:10:a3:c1:db:
                    f5:7c:41:44:4e:60:bc:bc:d6:a9:bc:7e:5a:3f:b8:
                    fb:08:fd:71:c4:d1:f6:5d:71:f0:5a:84:89:a9:e0:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:EB:E5:54:52:C8:7C:9A:24:B7:10:0B:90:8C:A4:D3:42:BF:66
            X509v3 Authority Key Identifier:
                keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:6d:22:8b:7e:84:d1:12:05:28:dd:0b:9e:fc:29:b2:7b:
         ca:60:9f:40:e9:14:80:71:76:00:66:bd:ab:b7:e4:e9:a1:17:
         1e:83:b6:e5:91:06:5a:02:ef:ce:19:ff:af:e0:dc:e0:e3:6f:
         15:cc:7b:8f:c8:0a:c3:a2:d9:6d:56:5a:3f:52:36:2c:59:61:
         2f:ee:c0:8e:4e:bc:38:b4:28:56:21:cb:ed:37:0b:3d:28:b0:
         8d:d9:b2:b3:08:1c:4d:1b:d2:d2:c8:05:6f:33:88:50:35:07:
         be:34:b8:9f:3d:23:0e:9e:35:dd:0e:3c:d6:5a:4d:bb:8e:26:
         17:2d:00:a3:6d:53:e5:6e:2d:72:69:17:63:16:9d:d9:ef:09:
         01:37:23:52:c1:bf:61:71:42:45:83:38:a9:5a:e4:f4:c3:02:
         32:d2:c6:29:59:50:a4:24:75:ad:53:c9:bd:af:6e:11:5e:38:
         15:ba:0d:cc:0a:8d:0f:ac:39:e8:b8:e2:ad:49:67:7b:18:26:
         48:9e:74:e7:f8:bd:26:5d:ca:96:8f:2d:5d:a5:6b:45:14:96:
         67:a4:f4:eb:7d:aa:de:6a:01:41:da:9a:55:41:3b:b3:01:61:
         41:da:3a:fe:c5:89:f0:ba:06:ea:de:73:ad:4e:09:f2:1c:54:
         a9:7d:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:46 2024 by rpki-client on console-ams.rpki-client.org