Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File:                     1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier:          nLnRgl5h8kBwyMT8iClBXSR4e53snfNboNPNqBCJa2o=
Subject key identifier:   30:B0:F1:7C:66:67:EE:55:E1:58:8C:06:44:BF:92:89:1B:19:72:DC
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer:       /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial:       019355082B8C0B539C5292874D667017CD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 18:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:18 +0000
Files and hashes:         1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: gJCYVHmYYMB1b3YVYwevEpFTISipjCqi8lJWzXjN8XY=)
                          2: Cz73YCfrTtWLbjYWSfIbFdJDwdM.roa (hash: TSLJGGHPmndTqYUL6XJyE1xUAR18+YcgBHmmrKaQez4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:2b:8c:0b:53:9c:52:92:87:4d:66:70:17:cd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
        Validity
            Not Before: Nov 22 18:00:18 2024 GMT
            Not After : Nov 23 18:00:18 2024 GMT
        Subject: CN=30b0f17c6667ee55e1588c0644bf92891b1972dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:68:c6:e1:31:33:5b:49:d6:5f:e5:71:d3:
                    4a:ba:04:db:74:7d:6c:f8:5d:af:51:32:9b:70:ba:
                    26:73:a9:4c:bd:32:d3:6a:11:11:f3:51:9a:64:4e:
                    92:ae:5a:4b:fc:fc:fe:4c:6f:df:ea:ca:21:32:77:
                    59:42:cf:e4:a6:5b:ff:55:e0:f0:0a:0c:3c:8f:16:
                    5d:14:6a:fc:d9:7f:d0:31:8f:c5:3a:61:9a:a3:14:
                    88:79:47:cf:25:98:16:c4:67:a8:f2:98:dc:86:8d:
                    2c:2f:b8:98:01:3e:7e:43:83:67:1c:54:84:66:a5:
                    2c:d6:0f:ef:9f:70:fb:1f:ff:d7:ac:3c:4f:91:c2:
                    27:d9:c2:44:1e:27:62:05:f6:5b:35:0e:0c:34:66:
                    51:81:c1:f5:44:0c:dc:d5:bc:81:d3:95:ab:d7:f0:
                    35:54:2c:1a:1f:6f:4f:d3:2b:8b:d7:3d:ff:26:94:
                    f7:d7:7b:b0:f9:23:e6:0a:79:20:4c:58:ab:57:3b:
                    6c:01:07:f6:a7:b7:47:67:52:b2:70:43:07:5f:f5:
                    6d:57:87:2b:7f:93:a4:b4:33:c3:03:1d:14:3d:8d:
                    54:7a:6e:24:32:34:d7:7f:3d:76:17:44:e8:9e:64:
                    4c:04:ee:8b:95:4a:b4:c9:e4:02:19:4c:82:8f:8d:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:F1:7C:66:67:EE:55:E1:58:8C:06:44:BF:92:89:1B:19:72:DC
            X509v3 Authority Key Identifier:
                keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:97:26:d0:e2:2b:fd:ae:67:56:b9:14:6f:8c:fc:1f:3e:
         23:6e:22:26:eb:07:c7:8b:ad:7b:22:99:11:d2:d4:14:6b:d0:
         24:12:6c:01:78:6f:19:17:00:a7:bf:64:72:57:e2:18:cd:5d:
         0c:dd:f0:3f:80:b3:f6:e3:ac:f2:0b:02:3d:84:7e:2a:56:c2:
         bd:f8:1a:bc:d4:68:53:f1:f9:75:b2:7b:7d:2e:49:e0:35:0d:
         8a:03:2c:20:49:7c:24:40:f1:0e:70:45:43:4b:90:c4:22:f7:
         f9:52:fa:75:99:14:e3:e5:7d:01:53:39:65:f8:0d:19:b2:a1:
         83:24:3c:90:44:36:c5:20:3d:ab:e0:c1:27:39:59:8f:77:82:
         75:78:80:37:2c:d6:aa:6d:18:42:ca:f1:48:59:35:8a:52:19:
         a5:3f:30:b7:d0:57:c3:35:e3:00:43:7c:25:65:f2:01:ef:46:
         88:4f:86:b4:45:1a:9d:ad:27:94:5c:42:34:6a:a7:4a:9f:4c:
         07:64:df:72:70:de:cc:5c:3a:e0:c4:f6:2e:4c:e3:d0:09:85:
         a3:c4:f3:29:3a:07:9b:13:eb:e0:68:43:6b:53:3f:12:80:88:
         f5:ff:19:29:84:75:17:67:5d:a0:8c:c4:4e:58:44:a3:74:3e:
         ab:fa:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:35 2024 by rpki-client on console-ams.rpki-client.org