Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          XOkR4x2CR0yUdS72jeZtHsNyKbT2K4/p6ec+91dsNX0=
Subject key identifier:   CE:88:5C:6E:EC:C3:50:4A:69:DA:4B:90:1F:38:FD:69:2B:D0:41:7F
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       01935508423C9CACD3A3284511FA2BB1EBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 18:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:24 +0000
Files and hashes:         1: Ug0y31yGl2J0nFHmhKDep2_41nE.roa (hash: ucxH8nh3JGfHyWk4oP8fy92T6lP2Okm+PJysr712HrQ=)
                          2: gXnm7OJj9FBnD6F4vIHLJowKXPA.roa (hash: DEA3LN9SBpqoeGVPASt8J4vQQkDVGeMBj15plAUSAlk=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: aB9WJLwbBpqBKSFpOVsYEI0KUgMx5Z8MGpctzTe5qFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:42:3c:9c:ac:d3:a3:28:45:11:fa:2b:b1:eb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: Nov 22 18:00:24 2024 GMT
            Not After : Nov 23 18:00:24 2024 GMT
        Subject: CN=ce885c6eecc3504a69da4b901f38fd692bd0417f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:91:40:c8:a4:d6:2f:b5:41:af:60:4f:1c:
                    91:9b:2d:39:09:d9:12:db:c0:17:61:d8:4e:60:ec:
                    79:78:f7:a3:28:48:b0:8e:ff:7d:15:78:6a:73:f2:
                    6f:bd:71:cc:43:19:b8:b2:a0:76:06:97:89:e3:af:
                    f1:38:ce:99:46:cf:2d:5e:85:24:d8:e5:91:ad:43:
                    89:39:07:e9:c4:11:47:c6:1d:09:01:70:29:3d:a6:
                    65:37:90:94:e1:83:f6:07:47:63:df:6d:de:28:e8:
                    52:83:f0:60:32:63:18:64:dc:fa:fc:cf:2f:e2:8e:
                    a2:7e:f9:29:f0:8a:16:d7:2f:ed:c1:75:37:9a:66:
                    c8:08:e1:27:96:6f:c5:22:aa:6e:df:c0:52:cc:f4:
                    3f:21:75:d9:6d:c2:ef:0e:10:a5:26:e4:f0:52:5d:
                    fd:8a:33:55:eb:d9:7a:ab:3f:2f:1b:72:8e:d4:8c:
                    d1:7d:8d:fe:c4:85:ab:20:a5:66:ec:d2:b2:6e:28:
                    23:8f:bc:bd:89:ac:24:bf:2e:96:ef:bd:3f:79:0d:
                    e9:22:5e:fc:20:29:3f:42:1c:a4:67:2b:6e:30:ed:
                    a4:73:4f:ba:ab:46:0e:ed:f4:3b:d3:56:9a:18:6a:
                    fd:5b:d4:ce:ac:9a:b9:6a:f1:3a:e0:9d:d1:08:33:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:5C:6E:EC:C3:50:4A:69:DA:4B:90:1F:38:FD:69:2B:D0:41:7F
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:4b:84:12:df:47:1d:57:f9:f2:5e:c6:52:4e:85:cd:28:
         50:b3:1c:dd:5e:89:a3:e7:56:58:38:d9:94:49:08:28:a5:04:
         9f:cf:03:85:7c:a4:78:ab:c3:f6:f2:4b:95:a4:93:f2:6d:61:
         84:bb:57:0a:8b:52:71:55:cd:10:56:f9:df:51:55:10:39:3e:
         10:91:f9:85:ca:41:1c:12:df:96:33:84:d8:77:32:19:54:af:
         bf:23:36:9f:3b:c0:c4:b4:81:c1:65:22:d6:86:69:ab:2a:70:
         47:cf:d8:22:fd:c3:37:6b:96:f8:bb:4f:87:51:24:3c:cb:68:
         c2:a7:f4:0d:0f:86:27:60:0b:03:d1:4d:d7:86:6b:8d:a7:a9:
         07:9e:ba:24:be:09:dc:11:bd:1b:a5:58:dc:78:4f:85:1c:a8:
         18:a3:3a:d0:68:e5:b2:e6:fb:99:c6:9b:fd:e5:8b:93:20:0c:
         e0:29:f5:19:87:ff:4f:9d:8f:8a:d8:31:6f:a9:c9:40:fb:49:
         01:b3:77:98:29:9b:1e:b7:42:7b:39:80:9b:5f:ba:c2:02:31:
         3f:31:56:ca:fa:41:2f:44:10:a5:b4:75:c3:b8:3e:9a:e2:82:
         d9:2c:e0:1e:3f:53:81:8e:22:8a:e8:ee:d0:4c:2a:3e:4f:35:
         6b:4e:a4:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCEI8nKzToyhFEforsevPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjQxMTIyMTgwMDI0WhcNMjQxMTIzMTgwMDI0WjAzMTEwLwYDVQQD
EyhjZTg4NWM2ZWVjYzM1MDRhNjlkYTRiOTAxZjM4ZmQ2OTJiZDA0MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSSRQMik1i+1Qa9gTxyRmy05CdkS
28AXYdhOYOx5ePejKEiwjv99FXhqc/JvvXHMQxm4sqB2BpeJ46/xOM6ZRs8tXoUk
2OWRrUOJOQfpxBFHxh0JAXApPaZlN5CU4YP2B0dj323eKOhSg/BgMmMYZNz6/M8v
4o6ifvkp8IoW1y/twXU3mmbICOEnlm/FIqpu38BSzPQ/IXXZbcLvDhClJuTwUl39
ijNV69l6qz8vG3KO1IzRfY3+xIWrIKVm7NKybigjj7y9iawkvy6W770/eQ3pIl78
ICk/QhykZytuMO2kc0+6q0YO7fQ701aaGGr9W9TOrJq5avE64J3RCDO7pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6IXG7sw1BKadpLkB84/Wkr0EF/MB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPJLhBLf
Rx1X+fJexlJOhc0oULMc3V6Jo+dWWDjZlEkIKKUEn88DhXykeKvD9vJLlaST8m1h
hLtXCotScVXNEFb531FVEDk+EJH5hcpBHBLfljOE2HcyGVSvvyM2nzvAxLSBwWUi
1oZpqypwR8/YIv3DN2uW+LtPh1EkPMtowqf0DQ+GJ2ALA9FN14ZrjaepB566JL4J
3BG9G6VY3HhPhRyoGKM60Gjlsub7mcab/eWLkyAM4Cn1GYf/T52Pitgxb6nJQPtJ
AbN3mCmbHrdCezmAm1+6wgIxPzFWyvpBL0QQpbR1w7g+muKC2SzgHj9TgY4iiuju
0EwqPk81a06kPw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:28 2024 by rpki-client on console-ams.rpki-client.org