Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File:                     LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier:          p5tJnou5yXMtTz8C66ibL5ZfwP7LqFXCq24mUn5m1wo=
Subject key identifier:   7A:84:DD:03:2C:D5:6E:49:E8:D5:41:D1:9E:B5:EB:CE:6D:AB:E8:5D
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer:       /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial:       0193587827CEF792734A4AC5B32A4305002B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:01:29 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:29 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:29 +0000
Files and hashes:         1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: TgYecAvq78QgXSYtVOb/xXU3aFskpAUcwFzMahzKPFw=)
                          2: gL-7rn1RO2uM9QJG1ZvBaCMY2zk.roa (hash: aNgD7MKsCj5iWLIrEIsIhfErWBK/bxjAXyJpfoptN8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:27:ce:f7:92:73:4a:4a:c5:b3:2a:43:05:00:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
        Validity
            Not Before: Nov 23 10:01:29 2024 GMT
            Not After : Nov 24 10:01:29 2024 GMT
        Subject: CN=7a84dd032cd56e49e8d541d19eb5ebce6dabe85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:1e:71:27:17:c6:be:83:6c:8f:57:ec:86:
                    c6:a0:76:a2:5a:3b:4d:3c:d6:e3:59:9e:89:72:2c:
                    7b:18:bc:99:7c:88:fe:42:b7:0b:d0:c4:4e:4c:c9:
                    a2:e0:16:75:d3:36:95:d6:28:73:ea:2a:05:d4:55:
                    1e:43:09:e9:a3:59:ec:7c:7a:38:20:a3:56:7c:d6:
                    d1:ad:c0:7e:00:a0:7e:bd:68:21:62:94:85:b8:a7:
                    8a:71:e8:02:0b:30:70:39:ac:61:1b:1f:cb:70:9a:
                    9a:6a:2a:d8:8e:0e:8b:76:d6:6f:99:7c:cd:69:ea:
                    6f:3b:62:6f:fd:ea:dd:06:60:1e:8c:cf:d8:95:b2:
                    b0:b4:4b:43:07:7a:11:9c:c9:52:b4:bb:60:b3:dd:
                    a1:1c:c1:2f:ab:00:2d:dc:25:46:58:03:52:62:2a:
                    19:62:37:2c:bd:fb:60:6c:0f:26:c9:b8:33:9d:b5:
                    62:5b:0a:e3:a9:e3:2a:9c:8e:4b:2c:e9:24:85:10:
                    49:ec:9c:ba:e7:f0:85:bd:86:b6:5a:3c:3d:50:80:
                    52:98:3a:ff:ad:32:fe:6e:51:38:d9:ee:e1:bc:47:
                    b9:25:c5:e4:6b:41:73:68:9b:fa:c2:e6:68:b6:5e:
                    64:2d:42:06:e1:8a:16:a9:de:92:0d:8b:d0:2a:32:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:DD:03:2C:D5:6E:49:E8:D5:41:D1:9E:B5:EB:CE:6D:AB:E8:5D
            X509v3 Authority Key Identifier:
                keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:9b:f7:bd:67:48:29:66:76:4a:e5:ac:0b:26:ea:0f:a4:
         9b:6e:a5:c2:84:6b:be:1f:96:75:3c:87:95:be:27:67:0a:e7:
         0d:86:1e:63:e1:3a:a7:c2:de:ec:4b:10:71:f6:60:e3:4d:2f:
         b7:1f:f7:66:ad:7f:7e:02:43:79:f7:13:ff:8e:cc:95:3d:5d:
         21:30:5c:79:e2:a2:45:5a:b9:ea:d2:92:4d:b4:5b:53:e2:a3:
         d9:d9:10:6b:b9:b6:8a:70:e1:ac:5e:44:eb:18:8e:cf:a9:2e:
         01:cc:6b:39:ac:82:a1:e5:f7:70:b1:c4:de:fb:49:d2:a2:09:
         f7:73:98:e9:ee:95:d0:19:a8:f1:94:0a:41:c9:93:8e:90:9b:
         77:59:b9:4b:af:b4:06:70:3e:1e:64:b8:2f:5f:12:d0:fd:cf:
         95:2a:a7:68:7c:aa:8a:63:7c:d6:62:f6:8c:ab:09:93:78:26:
         19:61:5f:fc:6e:b6:fb:ff:19:78:79:22:19:6b:fd:68:b9:68:
         8b:3a:30:98:f5:9a:52:78:6a:8e:19:e5:99:b5:ab:e3:98:5b:
         b9:67:4f:ad:76:59:ff:3a:39:d9:cb:f3:d2:a5:03:90:fd:98:
         0a:fb:31:33:63:18:52:74:00:ae:72:56:8c:41:5c:94:2f:b2:
         e7:58:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:52 2024 by rpki-client on console-fra.rpki-client.org