Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          d7X+2dYOFhvFIp5mFyw9itr6q+1QYGenEu1gbwc/yL8=
Subject key identifier:   D2:9A:72:F8:79:12:4E:5D:CC:12:F3:58:77:C6:26:26:2E:50:B3:A9
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       0193553F00A50C90C702F0B40E80DC2900D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 19:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:12 +0000
Files and hashes:         1: 1-xD0oxOlYwtfEwCcOWV5f83ysdQ.roa (hash: 3e/L9Y/1rkcsR0w34gTG0kaenzeXc28ONydimjzccTs=)
                          2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: SXBSqbPC9wabSdT2slYveQOdow9Mp03uu5cLImhqTdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:00:a5:0c:90:c7:02:f0:b4:0e:80:dc:29:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Nov 22 19:00:12 2024 GMT
            Not After : Nov 23 19:00:12 2024 GMT
        Subject: CN=d29a72f879124e5dcc12f35877c626262e50b3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:5e:e8:5a:73:5f:e4:60:50:a3:95:04:1e:
                    33:f1:03:22:23:ce:63:30:fe:97:a6:37:83:f0:09:
                    e9:6c:14:a5:e7:36:db:7a:e8:c1:b1:22:ec:f6:5d:
                    f2:3a:be:d2:4f:23:de:0d:e5:26:26:d0:94:ea:63:
                    11:3a:d7:d5:24:a9:6b:c1:7c:15:99:0c:fc:22:ce:
                    6e:3e:70:bb:35:12:87:4f:88:f3:e7:5c:a4:7d:22:
                    d7:dc:c0:7d:20:ac:14:57:b7:0a:78:0c:cc:fb:d1:
                    1b:e6:cd:ec:00:75:32:7f:0f:32:3d:a9:24:84:c7:
                    da:b0:cb:a8:fb:8b:00:9f:68:8e:71:1a:e5:32:6f:
                    72:4a:d4:ea:79:95:b9:f3:85:80:e8:e2:67:b3:79:
                    b5:fa:bd:ce:e4:6b:26:9d:a5:31:7d:db:a3:57:d6:
                    d4:0f:ab:15:59:bf:78:de:c8:26:71:c9:83:70:18:
                    8d:a8:76:d2:82:39:b0:f0:de:b9:35:7b:bc:dc:d2:
                    76:2b:5c:c4:9a:94:0a:ed:09:68:52:7a:a5:d7:af:
                    e2:b5:26:b2:63:f6:43:6f:2d:e9:98:2c:d3:27:88:
                    b8:16:4d:ca:db:e4:5d:e1:ee:04:0f:dd:c0:1a:cf:
                    5e:1a:6f:48:de:72:37:2d:64:23:7c:3d:5f:d7:18:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:72:F8:79:12:4E:5D:CC:12:F3:58:77:C6:26:26:2E:50:B3:A9
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:76:d7:f0:ad:65:27:03:8c:82:8d:9c:36:c2:b9:ff:0a:
         af:cc:55:e3:6b:bf:0f:ed:2e:54:1f:41:bf:67:3c:74:ce:a9:
         c9:a7:db:39:64:5e:23:0e:02:ba:c2:a7:54:ee:5f:95:7d:7c:
         7e:20:f8:29:39:0e:07:0d:98:c7:d6:91:1f:6a:2a:c3:2d:7b:
         4e:e7:8c:1c:4d:44:f8:ec:0a:e7:f4:a0:48:63:55:c9:ae:20:
         87:70:f4:44:33:79:01:b5:32:88:79:48:c0:f2:0b:c5:41:f2:
         0c:59:90:66:c6:07:e9:3d:01:86:2e:1b:48:d5:89:bf:4c:a6:
         0b:c3:fc:e6:c6:9e:eb:18:92:79:b3:59:64:aa:30:e0:7f:72:
         56:7a:0c:af:cd:9d:3f:aa:a8:88:7c:91:0e:7b:de:a6:80:20:
         cf:bf:86:72:10:68:cf:44:e5:8d:6a:e6:f5:13:8d:4b:df:9a:
         1a:3b:4f:80:ee:fb:1e:e4:c8:b8:1d:b9:19:e0:45:e6:62:8f:
         34:2f:f0:73:71:11:af:bf:58:ba:dd:5b:6c:c1:40:83:db:74:
         73:8b:20:0d:30:2e:b6:ce:f6:fc:9e:73:0d:9d:21:f3:95:17:
         1e:60:a4:c8:82:71:f4:c4:05:e4:fa:86:91:88:16:94:4a:f5:
         0a:4d:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:36 2024 by rpki-client on console-fra.rpki-client.org