Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File:                     v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier:          afIpBzWDchRHsAGqQdga9g+6WuqWkDjzYri2nAru3Rg=
Subject key identifier:   9E:98:A0:8F:E1:1F:59:69:36:31:F9:0E:9A:95:9F:46:98:74:70:0D
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       0193549AAB0849A29A49A87D2501D7F2D4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number:          1300
Signing time:             Fri 22 Nov 2024 16:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:42 +0000
Files and hashes:         1: 4ddBs-ioXceBPZ9DZ7y1dY3rgDQ.roa (hash: QCc5beSCihUA4q+cO0TCoKm9oAsaGKAWcAx0iWmwDnY=)
                          2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: tffL/y3zfqfgIGPb/TvwceqeRuxmJDhmNCeQE12YAsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:ab:08:49:a2:9a:49:a8:7d:25:01:d7:f2:d4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: Nov 22 16:00:42 2024 GMT
            Not After : Nov 23 16:00:42 2024 GMT
        Subject: CN=9e98a08fe11f59693631f90e9a959f469874700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:66:38:0d:88:e4:5c:72:64:3c:7b:fd:5e:
                    41:08:7b:50:76:2f:5a:d1:a9:6c:7f:a9:1a:6d:68:
                    6c:09:7c:bb:07:b3:dd:e7:df:17:6f:25:ce:78:52:
                    4b:1c:5c:f8:0e:7a:d6:72:0f:68:46:63:be:20:d7:
                    84:9f:d5:9e:75:cb:b4:2e:0a:66:db:8a:c9:f6:4e:
                    57:25:c1:aa:24:2b:26:b8:8e:2c:b9:13:51:52:e8:
                    96:5e:b3:d5:f0:b5:87:8d:a7:1b:91:68:ef:5a:43:
                    0f:bb:10:34:25:7e:36:f7:6c:7b:35:98:cc:b7:f1:
                    fc:09:59:7e:e5:b0:b7:d9:ad:67:85:2e:1b:8e:53:
                    0d:92:4e:5c:01:bc:d6:89:b5:3b:46:e8:90:dd:1a:
                    96:37:40:e8:97:05:ff:5a:f5:8d:0a:e8:34:24:28:
                    ee:ad:d9:dd:d9:d2:66:9d:e2:56:c2:78:05:74:53:
                    80:dc:db:47:de:3b:84:0d:c2:39:37:60:a4:bf:2e:
                    ff:98:56:65:16:4e:4e:5a:ff:46:07:00:bc:cd:e8:
                    94:c2:30:ad:ef:d3:76:01:4e:bf:2f:7a:26:96:91:
                    dc:ed:e2:25:77:44:6a:05:e4:5d:ec:2c:11:da:71:
                    d3:2b:13:52:6d:be:f7:87:40:ff:d9:e7:b3:b8:9b:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:A0:8F:E1:1F:59:69:36:31:F9:0E:9A:95:9F:46:98:74:70:0D
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:06:83:e7:82:1d:d9:28:89:ae:32:5e:aa:2d:ab:3f:6b:
         73:50:43:11:1f:83:7f:10:1b:dd:7a:df:71:d5:06:92:db:b0:
         94:a9:0c:bb:eb:38:cb:91:3f:c2:5f:c5:b2:05:66:10:a8:b8:
         92:9e:55:2c:fb:c2:75:76:64:b1:13:4a:20:ab:d1:7a:2b:d7:
         e8:cf:4e:b2:3e:17:ad:a1:f4:4c:7b:72:f5:23:71:01:a1:82:
         c7:5e:e9:ac:4c:7b:ae:9c:9f:38:83:95:c5:a1:45:88:c2:bd:
         cf:99:da:99:3c:1c:e0:48:de:75:d2:f8:fa:23:49:f0:b3:88:
         20:c4:57:88:30:ff:03:ce:c3:01:15:cb:d0:5e:71:b2:03:89:
         79:9b:d2:a2:40:b9:a2:ee:a6:bb:b5:ba:12:af:66:24:27:35:
         34:98:49:cb:2f:6a:b6:a6:a0:d5:5b:fb:f9:7f:6b:c3:62:fd:
         dc:cf:b3:f5:99:45:50:c1:e6:ee:d4:b7:9f:59:d3:f1:b2:86:
         c7:52:bb:e6:d7:cc:d8:7f:a7:27:53:54:33:cf:2f:52:9e:3f:
         c6:76:c3:7f:a6:ae:62:e5:48:2b:d3:c2:fd:f8:c0:a5:2c:52:
         8e:67:61:1a:27:88:3c:8e:33:8e:f8:b0:f3:61:7e:bc:59:59:
         ab:30:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:16 2024 by rpki-client on console-fra.rpki-client.org