Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File:                     L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier:          u+aMCmqkp19sw2SB8jggiSxKZ1IVX3AQntYVsGD5pvs=
Subject key identifier:   64:FD:15:85:41:3A:C6:9D:40:3B:5E:5C:1A:F3:FB:C0:18:06:00:50
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer:       /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial:       0193542C549278AC0A2174CA808FC18857D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number:          033D
Signing time:             Fri 22 Nov 2024 14:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:11 +0000
Files and hashes:         1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: H+bb+wcutH6730n09OdmsBvuj/biI4EXpiQHX1rK09U=)
                          2: cFjXXVCdAT3uP0esUxBPEEs4ZJA.roa (hash: BzUhhPNkSF+Xs9s2bbNUvXD6SNif74sUN1zjbcL/oWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:54:92:78:ac:0a:21:74:ca:80:8f:c1:88:57:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
        Validity
            Not Before: Nov 22 14:00:11 2024 GMT
            Not After : Nov 23 14:00:11 2024 GMT
        Subject: CN=64fd1585413ac69d403b5e5c1af3fbc018060050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:46:6f:3c:2e:a7:9a:88:85:3f:fb:be:62:
                    a3:83:ba:c9:68:b0:1d:f2:c5:63:09:68:ec:ac:21:
                    c4:42:8e:5f:05:bc:96:f4:b5:7a:50:30:87:7c:2a:
                    78:0b:26:b7:dc:32:e0:48:60:77:ca:66:e0:3c:47:
                    8d:7b:25:24:b5:cd:ca:1c:a9:71:d1:d6:1b:cd:c5:
                    68:62:17:0b:d4:b9:d8:da:c4:08:7b:d5:ec:64:bc:
                    f6:7c:f0:f5:b4:18:05:bd:41:49:cb:70:68:08:50:
                    9d:ec:54:61:9a:75:d8:8f:c1:d2:89:09:81:fa:9e:
                    0d:fe:34:37:18:be:5c:c6:78:64:c7:5a:d8:8b:ce:
                    d0:ff:c5:e9:d6:a0:84:6d:f2:b3:ef:d1:84:fc:97:
                    f1:42:3e:df:ec:19:a6:ea:2a:9b:da:a8:a5:a5:31:
                    4b:c3:06:ba:69:ea:39:f1:36:28:67:b1:ad:67:93:
                    b0:f6:de:4c:8a:2f:fd:52:39:dd:94:3a:ea:a4:24:
                    3a:b3:68:f9:af:9f:10:dc:6d:f7:56:26:41:e0:46:
                    20:a9:c7:c3:5e:93:3f:56:26:fe:30:80:93:b1:da:
                    27:18:a9:39:c8:4e:5d:cf:ee:23:c8:36:c0:b2:23:
                    d7:44:7d:e7:03:dc:70:0f:ff:5f:ee:e3:5f:82:3d:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:15:85:41:3A:C6:9D:40:3B:5E:5C:1A:F3:FB:C0:18:06:00:50
            X509v3 Authority Key Identifier:
                keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:53:ee:23:95:b0:81:df:5e:89:09:89:da:70:7a:28:5d:
         13:5b:09:02:c0:dd:5e:9a:db:52:7e:fc:cd:d1:99:95:bd:a4:
         e8:8f:10:75:52:fa:b0:81:56:ea:7e:20:b5:5b:64:df:78:a0:
         dd:24:d9:6d:7d:2d:13:28:55:f7:dd:29:ed:45:64:05:46:79:
         aa:e7:8e:c8:f4:23:6f:a0:2a:f6:50:11:b4:ff:00:a9:87:b6:
         65:bd:8c:1f:d4:e5:73:4a:56:f1:c7:ad:9e:a5:82:47:b9:98:
         4f:fc:89:63:50:ff:4c:26:5a:9f:b0:b5:24:19:e3:05:8f:3e:
         44:59:5b:bd:8f:20:c8:64:3a:1f:62:0b:1a:23:d7:d9:e3:0d:
         6f:b9:fc:53:58:90:5d:e5:18:5b:7b:d7:84:ea:34:d8:1d:32:
         da:ce:a9:ec:f4:d8:4f:83:81:91:11:70:6e:5c:4e:90:6f:a7:
         ee:93:18:a8:e2:cc:1d:7c:f7:4a:33:5d:de:5c:e0:87:bf:af:
         31:88:98:e0:2d:c5:00:03:13:af:06:67:30:d8:c0:22:d7:0d:
         e1:19:97:61:b6:ea:c5:f2:b0:51:e2:d2:88:a3:36:db:6a:ff:
         46:62:87:b3:55:8d:2d:21:92:3e:d8:a5:24:33:1c:d1:74:d6:
         18:a6:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:52:45 2024 by rpki-client on console-ams.rpki-client.org