Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File:                     LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier:          q/TVmKp0M1W0iWvSs3bDRK5xw+2N5MaVpaejSSjfXz0=
Subject key identifier:   4B:8E:B7:D3:66:BC:9A:89:60:83:B3:79:5A:F7:E5:ED:67:89:E1:A8
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer:       /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial:       019358795660AB75E8FE87179A7B41A949D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number:          0397
Signing time:             Sat 23 Nov 2024 10:02:47 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:47 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:47 +0000
Files and hashes:         1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: t4x9pxUdknrVWhYJGQTBgiobw6Wq4QjYmMl3Zi70Eeo=)
                          2: sA34ONw0A3RdOQPI1EDC3Nh91z8.roa (hash: 0vEOHECAyiIeKd+CP9TWS9/O4ANgCuQS5O9q4xKYNvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:56:60:ab:75:e8:fe:87:17:9a:7b:41:a9:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
        Validity
            Not Before: Nov 23 10:02:47 2024 GMT
            Not After : Nov 24 10:02:47 2024 GMT
        Subject: CN=4b8eb7d366bc9a896083b3795af7e5ed6789e1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:ce:9b:90:ee:4f:c8:c6:48:0e:52:0b:e2:
                    72:45:9e:d9:ef:c6:73:33:6f:7a:61:32:94:79:b2:
                    27:b1:bb:20:58:1b:bc:d9:09:54:95:88:78:c5:7a:
                    ef:73:80:1b:bb:94:03:e9:d6:14:96:cb:cf:cc:d9:
                    67:b1:6d:63:f7:82:e8:91:72:dc:b1:5e:9c:75:72:
                    b7:b0:74:de:f0:2a:db:43:3c:b2:6b:cc:c1:aa:db:
                    fc:9d:f8:bd:8f:9f:37:6a:38:9b:e6:5d:61:47:38:
                    16:48:79:5e:3f:91:c4:86:0f:90:a6:c0:39:83:7b:
                    87:af:e8:d8:fb:63:4b:f7:50:dd:c5:e0:42:a7:a4:
                    71:96:59:56:06:71:76:b4:3d:a8:77:f8:a4:12:b7:
                    9e:dc:19:77:d2:25:65:e8:35:86:c5:6e:dd:35:54:
                    0c:0c:19:ae:35:38:3a:eb:00:9f:ff:97:a2:dd:43:
                    ea:1c:29:7b:13:a1:92:c3:d8:67:c7:73:01:6b:a8:
                    c4:57:9b:75:5c:63:04:6c:8d:ac:67:ee:43:f4:60:
                    32:96:d7:10:00:5c:b8:4d:ec:46:4d:12:a8:6f:59:
                    90:c2:f1:d7:a1:1a:73:a5:97:ba:2e:ea:69:71:8a:
                    90:31:f6:8a:60:f5:0f:f4:51:19:41:ec:fb:51:22:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:B7:D3:66:BC:9A:89:60:83:B3:79:5A:F7:E5:ED:67:89:E1:A8
            X509v3 Authority Key Identifier:
                keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:6c:a7:7a:44:78:ce:c4:35:73:f0:c9:f1:89:00:6c:09:
         09:de:97:b2:e9:f1:dc:dd:1a:99:10:f2:63:17:ec:c6:ba:3f:
         a4:e8:d4:67:33:d4:32:56:85:73:12:ec:59:1e:12:6a:2d:cc:
         06:d5:39:d2:34:8b:f5:a6:b3:e2:77:99:0d:a6:50:2f:aa:05:
         8b:9e:21:50:2b:53:81:c4:02:ce:ea:40:9b:30:96:f7:a1:56:
         ce:e8:f3:35:5e:4c:04:51:b6:e0:71:b3:64:1d:c8:b3:77:b6:
         e5:12:24:59:f5:3a:30:d3:73:ce:d3:60:11:49:29:5c:69:ca:
         be:04:fc:cd:8a:77:b9:8c:9f:7e:3f:0f:54:83:50:f9:3e:ba:
         2b:29:a6:f8:d6:2d:ab:5c:68:3b:45:7f:6d:41:62:47:9f:57:
         9a:1b:c6:7d:21:c1:49:cc:76:5b:f7:19:b9:05:f3:50:a1:2c:
         78:1f:27:84:b1:74:59:67:cf:c4:86:d6:7b:dd:92:88:46:48:
         db:fd:2c:57:74:74:45:a9:9b:be:7d:82:30:4d:ae:ba:22:b5:
         ee:bb:1f:64:f3:c9:51:70:2b:7e:b4:b6:b8:05:1d:84:54:a8:
         2b:bd:3c:9f:9b:16:e3:f9:f4:3e:0d:a6:a4:a7:46:11:f8:8f:
         f1:f0:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:52 2024 by rpki-client on console-fra.rpki-client.org