Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File:                     l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier:          wRyd3mMukKY0ZZW6oKYE6jvB00Y07MZIt/csBegctN0=
Subject key identifier:   56:B2:DB:AA:E3:81:5E:B8:80:B3:03:7F:70:8F:52:32:D3:08:65:56
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer:       /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial:       019356F696FD722DBC0ED01B95E2F52D9A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:21 +0000
Files and hashes:         1: V-g3LbOj_UbC65nDbmxSTZRJmzE.roa (hash: 8ikq2bXxjqygwdJ7YlOhnqhZ9H7rVR904gHfg2C3B9M=)
                          2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: qIqVfr4S2/C6tCU8mWRPFLfKGocQ94ys1qlUNy1RD0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:96:fd:72:2d:bc:0e:d0:1b:95:e2:f5:2d:9a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
        Validity
            Not Before: Nov 23 03:00:21 2024 GMT
            Not After : Nov 24 03:00:21 2024 GMT
        Subject: CN=56b2dbaae3815eb880b3037f708f5232d3086556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:fc:88:f1:0d:93:c0:cf:4b:be:64:5e:45:
                    9a:8a:b3:6e:22:df:54:85:db:d8:08:9c:86:16:61:
                    25:71:27:e4:b4:57:24:3b:a8:ce:f8:dc:68:72:03:
                    aa:82:e4:af:ab:1d:ae:2c:33:c9:c4:a6:01:10:cd:
                    55:d3:46:00:94:21:37:59:48:0a:44:55:66:0b:22:
                    8f:58:f4:df:db:b2:ee:b2:c0:b5:92:49:67:b9:6c:
                    7a:ec:b6:82:ad:50:a6:e1:65:11:17:bb:98:c8:eb:
                    73:8f:63:a6:cc:87:a1:58:3b:a2:8e:16:3e:75:80:
                    bd:da:e7:95:c3:3b:0b:9d:9e:b1:01:73:4d:90:5c:
                    b3:1d:69:6b:c3:dc:fa:62:48:83:24:b0:22:91:17:
                    4b:78:c0:10:19:8d:f5:c6:bc:1f:16:53:fe:c6:14:
                    41:d2:4d:f2:0f:59:1a:f0:bd:c1:7c:3f:5c:52:33:
                    76:17:3a:7b:e7:a6:12:b2:81:2c:b0:a8:a1:f3:61:
                    ee:4a:2b:23:29:df:4c:32:33:59:8b:0d:eb:21:a5:
                    70:cb:c5:9c:05:50:0b:d3:52:7b:8f:40:ca:4f:54:
                    c8:ee:5f:91:8e:17:c6:76:74:f9:04:6e:3d:53:26:
                    73:34:57:a6:cf:a0:17:88:14:bf:54:01:da:75:63:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:DB:AA:E3:81:5E:B8:80:B3:03:7F:70:8F:52:32:D3:08:65:56
            X509v3 Authority Key Identifier:
                keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:5b:b5:13:e4:c8:cf:72:f0:40:5a:32:3e:63:88:dc:4a:
         9c:36:58:fc:a7:ec:c6:52:29:38:80:c7:f7:18:f2:a8:5d:64:
         ec:56:f3:b1:11:08:a5:25:7d:95:95:6a:c1:19:6c:5a:da:e6:
         88:16:ca:dd:70:1e:39:ff:42:c3:e0:75:68:e5:66:78:5b:d0:
         ce:dd:03:3e:69:bf:a1:1f:78:9e:2e:9c:1e:b1:d2:74:63:32:
         01:e6:f3:d1:37:c2:79:76:aa:21:81:ed:7f:d7:b4:8e:21:1a:
         4e:98:52:63:9f:bb:3d:d6:e9:1a:a2:e6:d6:47:5f:50:b3:6b:
         b1:b8:bf:4a:68:f5:b8:15:a7:5c:ae:77:c3:28:50:76:76:7d:
         38:23:62:a6:bd:be:f0:36:fd:1e:5d:2c:98:d8:88:ef:89:da:
         0b:9b:ff:dd:8d:73:2b:70:63:9a:8c:18:0a:4b:a4:0d:75:ff:
         09:96:17:59:03:6b:00:81:09:a1:81:b1:0b:28:88:2b:26:29:
         3e:7f:56:a5:60:b6:21:85:d1:2f:c1:5d:91:20:c9:0c:1d:a5:
         30:95:61:a3:06:e4:35:48:95:6b:c3:98:04:f0:ab:26:f7:36:
         ec:e4:bf:51:fe:2f:e6:5a:1c:32:66:6b:5d:f4:42:3d:6f:f2:
         07:9e:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:34 2024 by rpki-client on console-ams.rpki-client.org