Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File:                     lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier:          Urrgxyi3ZzcAzHg+0eMrKDHjoqIvQTX5+B0LkopiBlw=
Subject key identifier:   37:C5:5A:8D:E8:22:B9:5D:D8:A3:94:F2:CE:B1:39:37:76:6F:A9:16
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer:       /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial:       0193557669B7A8AA05D54DC90FD122650FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number:          137D
Signing time:             Fri 22 Nov 2024 20:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:43 +0000
Files and hashes:         1: 1-8r0Snwsfvao5A0oz_oJCcOPIgc.roa (hash: hawxFVDKJdbQL1r4WBg9v13skX4gkNJM/TcjmA9VAIY=)
                          2: R_xoVkKstrxm7a5MrA05LJrLvKU.roa (hash: OcAWDrFsHDbr/iw3JojGUbO2jTx8QJMqs361ZQSRTAw=)
                          3: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: hWCSN9w/W7lRKymP92ta/v8C13eC445v5gMJXyWdUtM=)
                          4: pjo_cDOOq6Z0EodmsdfcPdffXPI.roa (hash: 0PYwlcJAr20IVZA7CTNFirAsFoOtksCPJDlJ+zwar1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:69:b7:a8:aa:05:d5:4d:c9:0f:d1:22:65:0f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
        Validity
            Not Before: Nov 22 20:00:43 2024 GMT
            Not After : Nov 23 20:00:43 2024 GMT
        Subject: CN=37c55a8de822b95dd8a394f2ceb13937766fa916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:98:80:48:f3:be:3e:d1:56:38:93:a3:5a:
                    d1:df:c7:5e:bf:ad:41:2c:3d:ee:b3:db:30:29:c9:
                    b3:de:e1:d9:38:96:e4:2d:5a:cf:cb:47:10:e5:a3:
                    92:84:16:27:42:f4:a1:bb:f4:90:f0:53:d7:8b:70:
                    2d:25:5a:ee:f7:68:ca:21:a3:f9:d5:8f:02:92:fc:
                    30:1a:89:39:3b:f5:64:b7:3f:af:e9:c8:87:1e:ba:
                    ff:b2:1f:2a:55:5a:ce:98:55:ea:46:e4:f7:01:74:
                    fa:3d:ac:78:ec:89:e1:b7:4a:1f:ff:73:5d:dc:3c:
                    ee:1c:f4:72:60:e9:ba:f2:93:a4:ab:41:14:50:00:
                    c4:1e:d4:44:1e:48:ed:ea:24:d5:8f:2d:59:99:98:
                    83:9d:2b:b5:ef:e1:30:eb:0c:26:66:3d:f4:e0:36:
                    50:07:05:d2:77:92:81:be:6d:37:5c:58:84:39:70:
                    bc:2d:58:49:97:73:8c:85:e7:02:79:e4:b3:4d:d4:
                    9e:a5:ac:a6:ff:52:a7:9c:d3:e7:73:0a:e7:3d:52:
                    c8:1a:b7:92:25:4c:31:22:07:d4:12:40:e3:b2:cc:
                    e6:36:49:75:a3:c9:8b:00:3b:06:5e:9f:32:d1:45:
                    10:e8:82:99:75:4d:e5:63:30:94:da:a6:e8:a1:cf:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C5:5A:8D:E8:22:B9:5D:D8:A3:94:F2:CE:B1:39:37:76:6F:A9:16
            X509v3 Authority Key Identifier:
                keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:eb:c2:80:7e:39:3e:da:a2:6f:6c:54:39:33:8f:cc:a8:
         d5:62:8e:17:8d:23:6e:8c:08:23:9c:bf:72:5c:86:c1:09:83:
         1f:a9:d5:f7:a5:33:ab:e1:42:89:9e:78:7b:af:b0:5c:63:ea:
         d9:3e:29:5d:2d:46:1c:7d:95:6c:91:de:18:e4:65:a8:72:3e:
         d3:20:5d:94:ae:56:f3:ab:3a:21:5b:f0:4c:0e:79:dc:2d:af:
         2c:bf:a7:c4:0f:1e:85:4c:23:9c:99:a5:2e:cf:42:b1:f6:f1:
         68:51:5e:d0:d0:6f:f1:34:b8:63:76:e5:88:21:67:0e:c9:98:
         df:47:79:ab:bc:d9:35:e7:c9:2e:f0:7a:8e:77:86:ba:7f:73:
         6a:7d:ed:b1:1e:30:a1:a9:0a:47:95:df:d2:9d:27:a6:7b:19:
         47:fb:21:15:e0:c4:2b:81:97:47:c4:6c:b4:ed:cc:72:f4:ee:
         e2:ae:85:83:cf:f5:0f:bc:b1:38:4e:62:27:1c:42:ec:6d:2f:
         0e:5d:e2:6a:63:d1:6e:c6:b7:7e:5f:88:5d:a0:da:87:0f:70:
         d6:d3:75:11:9e:c8:31:91:7b:fc:d8:dd:3f:ae:bc:a2:1c:bb:
         7f:43:2e:68:d0:21:ad:df:91:e5:ba:43:43:0f:89:65:a4:29:
         82:d8:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:52 2024 by rpki-client on console-fra.rpki-client.org