Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          IsfqliAmWaJZKy/nJ2K6PkUG4L6hilaUBZQ/TE/zlj8=
Subject key identifier:   BA:CA:D9:D5:D3:CD:FF:5A:89:5B:EA:24:87:C9:EB:58:4B:92:20:95
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       01936A470420807EB8CF73353FA4E6E63599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          0579
Signing time:             Tue 26 Nov 2024 21:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:59 +0000
Files and hashes:         1: IdkicXHgBh98D1ruUOYuLUDfW_s.roa (hash: gYoLoA3NLnAJv5aQv5Ey5k6o7gEqnoeRd195UU9NwG4=)
                          2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: bQTqwE4hLz5omh5KsDHsDtoB1gFZY4EVGQ4V4a4nBTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:47:04:20:80:7e:b8:cf:73:35:3f:a4:e6:e6:35:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Nov 26 21:00:59 2024 GMT
            Not After : Nov 27 21:00:59 2024 GMT
        Subject: CN=bacad9d5d3cdff5a895bea2487c9eb584b922095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:19:0b:ee:e7:90:3a:89:7a:96:09:c6:82:
                    b2:25:79:ff:ff:c5:5e:02:2f:9e:34:c9:61:dd:be:
                    44:a9:37:fe:7c:5c:39:99:4b:ea:e8:1c:2b:02:ab:
                    23:11:72:e5:ac:94:02:20:6e:e3:3f:34:2b:e9:8c:
                    c5:57:40:7b:14:b6:ef:87:70:3e:4d:6b:ee:07:c0:
                    41:d5:a4:bd:c0:b7:b2:2b:a1:76:d9:16:49:09:c1:
                    63:5e:62:ba:6a:8d:a8:d0:24:1a:5f:e9:58:c3:d8:
                    40:54:d0:d8:82:53:0d:17:fd:c9:3a:d0:6f:9d:a4:
                    72:71:3e:da:87:a6:44:e0:28:74:bf:9a:6d:38:e0:
                    a8:47:de:3c:3d:5a:8e:82:d5:f7:d0:ae:b2:70:b7:
                    11:2f:95:c0:a7:75:10:d1:d1:9b:92:2c:39:04:fc:
                    7d:7f:6a:f9:a8:0d:02:a0:c6:c3:6a:57:f0:a4:c4:
                    a4:9f:35:73:94:2c:45:5c:ae:ee:9f:1b:b3:63:b6:
                    9f:7d:f0:72:e0:f3:dc:03:ea:9c:f7:fd:58:51:f4:
                    75:e6:8c:dc:5c:16:0c:5e:07:1f:93:fa:f2:10:93:
                    53:a9:be:15:83:27:73:f6:f0:4e:60:28:29:d9:dc:
                    d9:b6:42:56:73:2e:68:f9:0a:5a:30:86:41:19:da:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CA:D9:D5:D3:CD:FF:5A:89:5B:EA:24:87:C9:EB:58:4B:92:20:95
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:0c:a1:b6:cb:45:4b:68:b0:eb:fa:9a:0d:84:d4:37:1c:
         69:44:d5:45:4e:b0:22:fe:ff:ef:9c:f9:66:f1:31:8b:2a:c4:
         f5:97:59:aa:63:c1:48:b0:59:a2:15:9d:75:ab:48:e2:c1:9c:
         73:cb:ac:60:de:8c:0c:55:88:7c:29:e9:13:bd:8b:ae:b3:20:
         db:71:1a:21:20:4e:10:84:40:5d:2c:01:a2:1a:5b:6b:1f:98:
         db:c7:c5:26:1f:3d:54:30:6f:4b:ea:e3:1a:ad:94:da:c4:91:
         b0:99:5b:22:1d:f0:07:b3:77:4e:1b:37:68:6a:4a:11:f9:91:
         20:1f:9c:5f:e6:60:8b:c0:07:b8:a4:45:66:eb:77:a5:76:ec:
         14:30:a0:5d:6d:9e:6c:79:9c:4d:1b:25:67:96:ac:6c:96:1a:
         8b:bd:64:30:2e:d3:0b:45:a9:69:9e:70:e0:cd:31:a7:17:dd:
         10:c9:24:8c:b3:ea:0d:c0:bb:e5:c3:b2:69:74:9d:74:c9:29:
         33:fd:05:38:82:14:98:cb:90:7f:b8:c1:2b:22:26:c4:3f:28:
         5c:85:2b:16:0d:66:5f:84:a3:8b:aa:e0:90:c4:ee:b5:94:a3:
         77:4e:27:63:67:d7:a7:35:07:f5:9e:82:1a:7d:24:2c:e6:33:
         1a:e9:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:42 2024 by rpki-client on console-fra.rpki-client.org