Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          EtrsMgvl4ee8OsAZORk8efUXlrtmDDufq/BkKmuRwog=
Subject key identifier:   8A:7E:D0:93:7C:DD:3E:E5:2C:2F:B1:E0:31:DC:F4:72:71:FA:D5:A4
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       01935877F0BE4F917A6210413F1E49ADE3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          0FE7
Signing time:             Sat 23 Nov 2024 10:01:15 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:15 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:15 +0000
Files and hashes:         1: W78yyw7g-0a1dB8hNuG6IVEWG7Q.roa (hash: avWRhmPBBHFFJFVTlQ6h0Ke4GQXUjYFDLgVzboTz1uo=)
                          2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: E3Dg8EgNmc9+V8ahia2fF4ZX2fnFxveu7sjS8lbnm7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:f0:be:4f:91:7a:62:10:41:3f:1e:49:ad:e3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Nov 23 10:01:15 2024 GMT
            Not After : Nov 24 10:01:15 2024 GMT
        Subject: CN=8a7ed0937cdd3ee52c2fb1e031dcf47271fad5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:bd:3e:16:18:94:a4:91:6c:1f:22:58:7b:
                    b7:ce:cb:02:9a:0c:f4:bf:ba:55:a1:a8:cb:8a:c8:
                    8f:d8:9d:34:cb:88:42:d6:7b:be:cf:f4:a6:9b:3a:
                    d7:07:bd:a4:26:b7:48:31:ad:68:49:87:44:11:7b:
                    eb:4b:9e:b5:fd:22:23:90:05:a9:3e:e9:93:7c:50:
                    cd:cc:ef:2a:f4:23:d2:a5:a1:ef:a6:92:bc:e5:a5:
                    f4:9f:bb:d7:a9:4d:fd:5a:2d:50:5c:be:21:df:e3:
                    b3:2e:d9:dd:25:3e:b4:ef:61:b3:16:0b:a7:65:e3:
                    d3:ce:4b:d3:16:3a:f5:de:90:6a:7b:6c:18:ff:f8:
                    95:bb:dc:c1:8b:a0:3e:38:8a:30:d8:84:01:1f:77:
                    54:2a:43:1b:44:56:b5:52:fe:7d:1a:16:aa:b9:3d:
                    bb:f2:35:5d:bb:9d:11:f7:e0:6c:8f:fc:38:8f:9c:
                    1b:40:60:cc:1e:7d:2f:b7:5b:5e:a9:46:4e:b3:78:
                    d7:f7:05:2d:76:ca:e0:14:92:bd:b3:50:28:58:fe:
                    be:52:c1:8d:59:a7:b0:05:1f:b3:11:45:d7:17:50:
                    00:a6:21:36:0e:15:9a:8e:d1:2b:7e:3d:d0:50:f4:
                    42:4b:91:d7:b9:a0:74:50:8f:58:a2:96:cc:57:e7:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7E:D0:93:7C:DD:3E:E5:2C:2F:B1:E0:31:DC:F4:72:71:FA:D5:A4
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:24:08:f3:a9:9c:df:d5:16:71:3f:15:0a:1a:de:85:76:77:
         e9:de:cb:50:75:d5:97:f0:ba:cc:3e:1d:13:1c:b2:b4:8c:93:
         fb:64:28:71:b9:19:a2:6a:08:fa:b1:48:1d:a2:3f:21:24:e6:
         7e:70:56:e9:ec:47:45:08:dc:b3:53:6e:5f:e4:14:5a:e8:7c:
         52:27:64:53:96:7c:53:ca:39:df:77:1c:21:14:be:ce:3c:72:
         d3:ca:dc:f9:0a:90:ba:0b:fc:ce:58:fe:2d:d7:4d:c8:8f:34:
         8a:cc:3b:16:85:3e:2b:71:03:9d:1c:c4:be:81:91:92:a7:0b:
         3d:91:24:e4:00:f2:4b:40:5d:aa:46:b8:53:c6:6d:ef:0e:4a:
         ea:99:e6:29:0c:b5:7b:b8:7f:cc:8a:f0:94:5d:71:9c:03:b8:
         c2:b4:de:53:09:88:de:6a:95:45:4f:a2:0e:c9:9d:a4:6a:38:
         13:7b:ba:38:a4:59:73:84:f5:f9:a7:3c:e6:50:a7:ba:b2:12:
         3f:2c:fa:ca:9f:43:e7:64:92:af:03:99:c9:e1:f8:a0:4e:bb:
         68:f2:55:5b:63:0a:3f:d4:01:a5:08:d1:27:45:8e:63:85:31:
         45:f2:5b:00:cc:f3:6f:4b:56:a9:ea:9e:e2:a5:04:d9:c4:fe:
         8f:e3:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:34 2024 by rpki-client on console-fra.rpki-client.org