Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          ci/8ReVNTBQX2gHqS1pnNXAK0rrbtA926yeK0wzdPBA=
Subject key identifier:   25:83:4B:A9:E1:6A:A8:3E:9C:BB:63:CC:29:46:9D:DA:44:E3:86:00
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       019352ACDA5B776F1AC49BED8F6463F62B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          11C0
Signing time:             Fri 22 Nov 2024 07:01:20 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:20 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:20 +0000
Files and hashes:         1: 4mo5qgSLEKoDHQyQSZ7-QCSHy-A.roa (hash: lf2DCKcnbj2itYhpdv4Z2udUDMd8xPlfuE197NNPSUc=)
                          2: BXBut1SQw9cBiUFZjy2xg9Y58Dw.roa (hash: e3V7o5M5CZc9Hsvq/85n/35+7bk1S3MXNGNULreSRBA=)
                          3: VfcSF9_VVkuurOwshPRUZkgqYuA.roa (hash: uyzyqCwA7gbxXV/bQBbYvVpDsSBNPASEWvvWx7wykyQ=)
                          4: fKVzQRt_5xZx3CmrO_f2gIStbTo.roa (hash: 60bDrRN1Bk1SskqcuD9E5MKNXpCL9mQAzUTa6IPmErU=)
                          5: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: MFtrlJ6gS7X74qWD1h4uyil5l7OZaEcKlOKPDmHWlbw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:da:5b:77:6f:1a:c4:9b:ed:8f:64:63:f6:2b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Nov 22 07:01:20 2024 GMT
            Not After : Nov 23 07:01:20 2024 GMT
        Subject: CN=25834ba9e16aa83e9cbb63cc29469dda44e38600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:09:f4:26:e6:0f:42:fd:ff:af:b4:f0:2f:
                    3a:b2:2e:2d:0a:6c:c1:21:57:e4:09:07:08:02:23:
                    96:15:4e:bd:bc:23:e1:24:26:6c:ec:d9:d3:bf:f0:
                    56:a3:5f:4c:e3:29:68:28:b6:e0:1d:55:7c:74:ee:
                    20:b1:39:ce:cd:ca:e5:eb:e4:fa:0b:73:c9:d4:b8:
                    8a:2f:7b:83:f7:b5:e0:a1:a9:be:da:dc:a1:84:b1:
                    76:a1:78:2b:7e:2f:cb:b5:02:2a:06:d4:2d:ff:4d:
                    a2:70:9e:a3:85:a8:1c:21:2a:7e:fd:04:b8:62:d7:
                    75:52:7e:e3:d1:36:16:03:95:b5:87:bb:cc:cb:6e:
                    01:d8:d5:19:90:63:78:e4:fd:83:bb:a1:d1:4f:4b:
                    04:41:58:16:5f:ba:ae:ed:f1:4b:2b:aa:48:48:b1:
                    1b:93:68:2c:91:6e:a3:04:60:0a:38:e7:6d:54:86:
                    97:2d:a8:4f:55:c9:27:6e:4c:1a:3e:09:5d:57:0f:
                    7d:30:24:4c:c7:a4:d9:a9:b2:8d:fe:8f:db:25:1e:
                    f8:bf:8f:d4:27:29:9e:31:89:bf:57:cd:43:99:3c:
                    a2:e5:2a:c0:c5:0f:7d:67:d5:d2:68:ee:fa:73:51:
                    b8:1e:4d:fd:74:f3:53:2c:61:64:00:35:28:26:be:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:4B:A9:E1:6A:A8:3E:9C:BB:63:CC:29:46:9D:DA:44:E3:86:00
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:de:02:04:27:eb:7f:38:9d:8b:3a:d9:e5:20:ed:d0:f0:d3:
         1d:bb:c1:e6:0a:9f:64:0d:04:c9:67:16:1e:58:57:14:88:52:
         3f:ac:3b:6d:f2:78:1a:b3:ac:9d:50:64:91:36:cb:66:b0:d9:
         6e:9a:98:d0:e6:fb:d7:44:16:37:47:f4:86:43:57:c9:c2:7f:
         07:e3:4b:e1:12:7b:95:2b:27:84:0b:65:71:2f:8c:59:7c:e1:
         7b:ca:7c:6f:16:cc:8e:51:a8:81:9a:54:14:a8:98:55:83:76:
         10:85:5b:75:dc:9c:e0:07:9c:8d:74:d2:98:41:cd:51:93:0f:
         4a:5b:07:9b:52:cc:01:33:77:ab:3a:81:3c:e4:43:da:ee:fc:
         dd:36:d2:93:d0:2b:48:16:c7:f5:46:87:c6:bc:38:0a:9d:46:
         46:6f:12:74:6f:c0:58:c2:ea:23:2c:46:e3:6c:11:59:98:72:
         c9:0d:09:e6:15:39:d7:30:2a:87:d8:7b:77:9d:02:b4:33:6c:
         63:be:3d:bd:9f:81:8d:09:3e:80:c0:68:81:7e:1f:c9:22:07:
         ce:c2:54:75:bb:f4:29:b3:b2:b2:f9:dc:db:61:4e:80:c5:ac:
         5e:7c:70:da:85:97:7e:39:4b:4f:97:75:a0:73:5d:67:c2:88:
         ec:3b:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:56 2024 by rpki-client on console-fra.rpki-client.org