Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          Ng3V5HikuxmrxKj2YFNNaRh5zrLNXr/lWGf1xUgAjO0=
Subject key identifier:   89:64:48:42:B4:7F:41:5C:1E:5C:23:1E:60:31:78:13:B8:80:C4:E9
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       019356894B3D20E1874CAA9349C39CB87AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          0EB4
Signing time:             Sat 23 Nov 2024 01:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:58 +0000
Files and hashes:         1: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: 1JFUq2Wdk6VEu3CsfJwQPjqVINLohX+vUtyLCT9wvqo=)
                          2: ubjggnBskmCG8_lyaNJnNjCvVqA.roa (hash: uEArYmxv/q/bdOl0jR8AYChURWPHuKdnKtPJYyP7/cM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:4b:3d:20:e1:87:4c:aa:93:49:c3:9c:b8:7a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Nov 23 01:00:58 2024 GMT
            Not After : Nov 24 01:00:58 2024 GMT
        Subject: CN=89644842b47f415c1e5c231e60317813b880c4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:09:ed:77:3e:b0:6b:03:40:3c:e8:ba:9f:
                    f4:11:3b:6b:6e:fd:f5:f8:95:eb:1f:22:d4:03:30:
                    13:95:74:f0:07:89:31:50:bf:40:1f:59:13:9c:ba:
                    15:70:4f:3d:a9:a5:ec:28:73:fb:c0:6c:09:ad:19:
                    95:0e:15:fe:ee:13:dd:59:02:fe:e4:ca:a4:5b:84:
                    63:f9:81:6d:e7:b6:91:42:59:b5:2f:76:3c:a3:d0:
                    ed:ae:ae:90:39:6c:b5:67:80:ed:7f:d4:dd:06:b3:
                    8f:46:9e:e7:5e:59:86:b8:04:67:c6:97:76:4b:04:
                    b9:0b:83:0f:73:24:93:7f:28:e9:30:15:8b:66:fc:
                    82:89:5a:48:83:70:a4:60:a9:7a:7e:dc:fe:13:e2:
                    05:72:b6:7c:18:63:35:9b:14:2c:33:03:18:cc:82:
                    47:56:2b:08:cc:67:07:66:97:77:1b:c7:aa:10:ad:
                    46:13:f8:f7:3e:be:68:bc:8a:8d:bb:c7:ec:12:de:
                    76:e2:65:dc:20:3a:5d:39:5b:5a:b7:38:22:3b:7e:
                    d9:57:72:30:68:35:26:5c:12:a2:f7:e9:31:77:20:
                    f6:ff:be:36:74:e0:8f:4c:22:0e:8f:b7:c4:9f:47:
                    69:5a:88:94:cb:9c:d9:14:f8:91:0e:cd:10:b1:17:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:48:42:B4:7F:41:5C:1E:5C:23:1E:60:31:78:13:B8:80:C4:E9
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:ff:0b:37:fa:37:1a:87:75:d7:50:06:05:be:2e:e7:f0:
         6b:c2:6f:76:ae:01:03:a6:eb:19:4d:2f:c8:0b:8e:fb:d7:e5:
         40:63:a8:cb:08:a7:49:9f:7f:a3:a9:d9:7d:6c:c3:b0:5b:e7:
         3e:8d:4d:e5:f3:72:97:ea:6e:21:ca:19:6f:fa:26:3e:d6:9d:
         67:1d:54:36:41:58:72:3a:23:fe:27:c8:22:80:11:43:93:d7:
         8e:26:fc:c9:1d:ca:e3:a5:04:3d:1e:c1:28:99:4d:f9:dc:7c:
         d3:3a:53:48:2c:b2:4e:e9:af:d0:19:1c:78:df:3f:8d:93:d8:
         a4:4b:24:a7:1a:17:12:03:0e:91:3c:2d:08:10:33:83:2b:55:
         e8:18:a4:f2:f1:4a:8f:b8:0f:7b:c3:30:36:44:23:77:72:4e:
         0d:ce:ef:63:8d:61:e6:b7:55:ce:8c:2a:c6:c1:a8:a3:3e:98:
         f3:83:cc:3e:da:9b:fa:6d:85:c6:ff:70:9c:3a:61:b5:0a:95:
         3f:f2:70:4b:08:d3:b8:03:79:71:d3:c3:f4:cc:95:03:cf:89:
         45:b8:f4:d2:d6:bd:1d:88:77:b4:00:8a:dc:d2:69:3e:b9:16:
         fa:f5:37:c8:c9:b1:c5:31:21:17:be:a1:44:99:50:6a:e6:dd:
         83:a4:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:38 2024 by rpki-client on console-fra.rpki-client.org