Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File:                     LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier:          3S5KqYepK5Iab3VXupThuKjehm0avxyvMhN6S8vhLzw=
Subject key identifier:   D2:E7:DB:94:30:BC:64:25:D9:29:71:84:30:48:1E:43:24:4B:12:9E
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer:       /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial:       019357D2EBE5CF46B757AB6785FB0833F377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number:          0CDD
Signing time:             Sat 23 Nov 2024 07:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:00 +0000
Files and hashes:         1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: hOg8OLHI7RrmER3b20gzuSzHru7lXJBAjkuRVD5e2Q8=)
                          2: scmT1cBX-2Z2viiSTphK-mT8QwY.roa (hash: N0EuTQ9cgi3BviB8pwLVmmkzELghXlW5sYCL9shLxEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:eb:e5:cf:46:b7:57:ab:67:85:fb:08:33:f3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
        Validity
            Not Before: Nov 23 07:01:00 2024 GMT
            Not After : Nov 24 07:01:00 2024 GMT
        Subject: CN=d2e7db9430bc6425d929718430481e43244b129e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:6e:75:07:23:a2:b9:e5:99:a2:f0:b5:9f:
                    c5:be:9e:d4:3c:d9:b2:74:10:62:be:ca:dc:0f:75:
                    35:c8:1a:34:65:ab:20:15:bd:65:6c:12:d7:8b:66:
                    c8:7e:da:ec:81:08:74:96:3c:ba:3a:ad:a3:66:a0:
                    70:8c:7a:9b:88:a4:b8:f7:0c:6d:49:e3:80:72:61:
                    82:ad:6a:d0:63:ba:e7:e0:32:b9:0b:57:3d:af:81:
                    66:ca:27:30:e0:d2:ae:53:ac:12:f8:c9:8e:37:f1:
                    9c:cc:f2:5f:68:50:e7:b4:09:d2:43:9b:d0:3d:02:
                    e7:30:61:e1:8b:cd:a2:b8:77:74:45:aa:e4:46:38:
                    63:33:6f:f5:46:64:ed:01:a1:e7:cc:77:53:b8:40:
                    7d:5e:c1:01:f7:7e:6a:e7:7c:8a:bc:71:92:97:53:
                    7b:5a:cd:97:6d:f1:d5:d7:5e:9d:1d:6c:e8:75:e6:
                    1d:ca:81:eb:4a:e0:da:78:9f:9d:20:1c:b5:3b:06:
                    f8:c1:09:11:df:49:43:9b:80:86:40:49:eb:74:1b:
                    6d:ac:85:44:cb:f2:d3:0d:45:f4:f0:f0:6f:37:ff:
                    a9:9a:35:e4:83:4e:d0:f9:04:d7:11:61:57:a5:57:
                    75:36:3a:cd:25:00:1f:66:ce:01:3f:f1:af:c5:ed:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:DB:94:30:BC:64:25:D9:29:71:84:30:48:1E:43:24:4B:12:9E
            X509v3 Authority Key Identifier:
                keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c0:cb:eb:17:ce:ed:4a:fc:92:ee:4c:e8:41:d8:09:60:2e:
         95:5e:80:49:1c:db:1b:60:16:39:be:8e:af:94:2a:81:1c:4e:
         ea:cf:2a:16:54:f4:a3:9b:e1:00:a7:fc:5d:32:34:91:25:44:
         a9:de:1c:55:d5:4e:d1:8d:9f:30:36:c6:3f:8b:7b:da:33:c8:
         5a:1c:e7:3f:d2:5d:bc:23:dc:a0:3a:e7:fc:c2:6f:60:a6:72:
         80:10:a3:b3:2f:5b:61:7e:8a:7b:98:e6:24:77:ae:d7:d7:3d:
         52:05:21:95:e8:b8:16:e7:83:09:bc:64:0a:52:51:11:ab:eb:
         66:a0:44:a1:0b:fe:27:8a:0c:1a:98:ce:fc:ad:67:01:ec:29:
         a9:c3:c0:a8:1d:b2:ce:c0:33:0f:c4:5f:3f:b7:7f:3a:c7:51:
         95:c2:9f:e1:eb:e5:f9:33:3b:50:60:c2:3d:0a:3d:5d:15:e9:
         99:49:79:8c:32:bf:6c:4e:e9:5c:bc:44:39:df:8f:33:94:47:
         d0:01:30:fc:a0:cb:39:00:00:94:27:f9:38:a2:b5:18:85:52:
         ee:c2:8c:b5:8c:1c:b9:90:00:a3:83:25:28:ec:a2:a4:29:c0:
         86:f1:26:dc:6c:b1:d2:33:d2:db:ee:d7:f2:0f:e5:92:4a:b6:
         a6:b7:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:07 2024 by rpki-client on console-fra.rpki-client.org