Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          4SDPFf5GlQ1JcnIjYllqa2vtKr5bcBmxBltIIhNz2nM=
Subject key identifier:   23:F8:59:32:05:BC:A5:F9:E7:33:56:E6:20:06:95:2E:C5:BE:D3:79
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019369D9DC558BFE38E8800AA5269D6FF207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          02D7
Signing time:             Tue 26 Nov 2024 19:01:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:45 +0000
Files and hashes:         1: 3lngZbGtVJQy1njtJGDpmKyQysI.roa (hash: +Z3R0iyT0wliWm5YxZk9z0XWkYE2dW4/2BZp6nn1Hes=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: Mya32I/LzMJf7G+XeDpvGSvp+1Dr3lVUrD4+mjwGqfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:dc:55:8b:fe:38:e8:80:0a:a5:26:9d:6f:f2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Nov 26 19:01:45 2024 GMT
            Not After : Nov 27 19:01:45 2024 GMT
        Subject: CN=23f8593205bca5f9e73356e62006952ec5bed379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:76:ae:51:71:e6:0d:96:3f:2c:f4:f6:20:
                    86:bc:d5:24:cf:aa:0e:e1:59:e1:d9:b7:fb:dd:26:
                    73:6b:8d:e6:ec:93:04:27:6a:e0:25:cc:93:ca:a5:
                    66:01:1f:5c:ba:ee:8e:02:60:33:85:5b:de:50:02:
                    a6:10:53:70:a9:50:07:7f:ce:a6:37:6d:e2:9e:74:
                    5d:81:f7:b2:bb:de:f9:75:f5:96:d5:6e:d8:12:76:
                    6d:0a:1e:d5:76:4d:53:87:1a:66:a4:59:e7:ee:2c:
                    fd:6c:10:6f:41:ae:36:df:a0:02:f5:67:6a:3b:bd:
                    d9:4b:3f:6c:01:f3:27:5e:e6:4a:f4:2f:12:1b:6c:
                    ee:95:8e:a0:a9:ba:3f:d5:e6:f8:ab:af:f2:94:71:
                    e7:0f:e8:75:2e:10:ea:c5:1b:58:b5:78:15:1b:b9:
                    79:41:13:9b:b3:48:57:ce:1f:ba:84:24:6c:19:02:
                    c2:b6:d2:be:dd:e5:40:d0:7d:1e:58:1b:d5:5e:c0:
                    33:f2:b7:e7:1e:3f:1f:85:5d:de:43:f8:ff:b6:72:
                    49:8c:43:5a:9a:04:2a:57:f5:1b:ad:29:a2:6e:41:
                    fb:f2:11:a7:96:0c:68:ce:aa:c9:82:f8:77:23:3e:
                    8c:74:fc:c4:85:ab:df:ac:df:03:25:ff:8d:27:95:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:59:32:05:BC:A5:F9:E7:33:56:E6:20:06:95:2E:C5:BE:D3:79
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:32:d1:28:b2:79:a7:16:c1:e8:aa:a4:c9:f2:0a:c5:9a:
         3a:74:db:30:a6:b6:35:cc:95:b9:42:7b:db:2e:8e:5b:c4:08:
         8d:35:84:d2:be:bb:cf:b5:f1:b8:7e:47:cb:5b:01:61:69:78:
         c1:a5:1a:ca:c6:c6:d6:46:2b:00:58:5d:b0:75:94:41:5a:40:
         95:54:b6:e0:37:95:5f:e6:3c:38:5c:6c:7c:49:42:0a:23:dc:
         ab:2c:a8:70:43:31:6f:da:cd:16:88:ff:b1:54:0d:a0:b9:06:
         1a:0a:79:ff:70:71:0f:d2:91:53:d2:0f:31:a9:38:e6:b5:f3:
         45:36:1b:d8:55:3b:13:df:0c:cb:e9:67:f0:43:c8:5b:0a:96:
         fe:1f:ef:01:26:ca:d1:fd:9e:1b:f2:66:b1:05:ad:e0:32:4d:
         dd:25:1a:48:8e:79:ae:f0:97:70:77:98:84:16:06:61:33:dd:
         70:0a:7e:cc:89:ad:15:33:4e:e5:76:d6:15:f4:a7:d3:94:9d:
         3e:cf:5e:70:c6:a6:38:d6:41:d8:d8:65:44:6a:f1:92:ec:1b:
         ff:c4:82:17:44:e7:29:65:4a:23:6c:d5:e3:f0:e4:15:a1:a5:
         66:3f:a0:74:1a:8c:d1:f7:f7:d7:d4:1f:b1:e9:e6:bc:21:16:
         02:0b:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:53 2024 by rpki-client on console-ams.rpki-client.org