Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
File:                     lJQumzXZGQbREkXXO9WM3Y7KSdE.mft (raw, json)
Hash identifier:          TyFi/1a4mejn8Khs5OnM+zXxLjFTz4RmAifKuDQsotE=
Subject key identifier:   00:C7:A1:FC:E1:C7:47:62:2A:10:0C:F4:63:D6:45:56:2F:6B:C8:04
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Certificate issuer:       /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial:       019369DAFD7D9BDF012E36957E7F4576740B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
Manifest number:          12D1
Signing time:             Tue 26 Nov 2024 19:02:59 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:59 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:59 +0000
Files and hashes:         1: hoCikfzuk1ntuS4UhCVVwxbqnC4.roa (hash: sVaJQbL0MiOFbQmZRyNFlGBazs3dvBegUrTD77GhNDQ=)
                          2: lJQumzXZGQbREkXXO9WM3Y7KSdE.crl (hash: GmifVlzIT9OMVVstwZrwpsuX+e89fxbUnXJKSIqpOzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:fd:7d:9b:df:01:2e:36:95:7e:7f:45:76:74:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
        Validity
            Not Before: Nov 26 19:02:59 2024 GMT
            Not After : Nov 27 19:02:59 2024 GMT
        Subject: CN=00c7a1fce1c747622a100cf463d645562f6bc804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:b9:56:bf:c6:98:d3:f9:5b:1b:13:c2:02:
                    49:68:03:87:2f:19:15:21:ad:00:ca:2c:7b:6a:62:
                    ff:47:b6:b3:95:7b:82:3d:b8:98:38:66:5d:2b:88:
                    84:1e:49:c7:53:f4:77:5c:8b:f7:2c:7e:6d:26:02:
                    1c:d1:16:41:ce:9c:b0:03:a4:57:58:6a:e2:1b:e2:
                    1a:9e:3c:9f:a5:de:cd:56:39:ad:90:bf:04:23:6d:
                    13:86:13:b8:bb:90:73:19:4a:8f:98:88:96:07:92:
                    72:0d:9b:a3:01:b1:a6:56:bd:e4:82:b3:7e:4f:4e:
                    39:b1:a1:fd:8f:5a:89:e3:69:cf:bc:18:e0:22:e2:
                    47:ff:c7:b6:96:ce:68:3a:33:ab:d0:5a:63:5f:30:
                    c7:b9:ee:52:fa:e4:d8:36:45:b5:61:ed:f2:ab:6f:
                    15:d2:eb:52:c1:c2:e6:bf:c7:93:b1:ae:38:54:88:
                    fe:cb:d0:63:7a:45:c7:f7:cb:1e:72:54:a6:59:ce:
                    b1:ff:96:a3:e2:65:66:10:5a:2c:a3:50:31:c9:29:
                    fc:b0:ff:06:8e:ac:42:3c:4a:0e:71:31:1c:18:3a:
                    2c:d7:f4:ae:5a:20:0b:dd:a1:47:e8:55:4d:db:07:
                    1c:2b:f6:a0:f7:ff:a7:35:4a:77:5c:9f:6d:d2:96:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:A1:FC:E1:C7:47:62:2A:10:0C:F4:63:D6:45:56:2F:6B:C8:04
            X509v3 Authority Key Identifier:
                keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:e2:11:4d:3c:95:e4:d0:31:71:2e:3a:0f:2c:1c:c8:05:
         85:5d:d4:d9:a6:94:e4:57:64:50:f2:c2:1a:47:0d:b3:16:ae:
         97:c9:8d:1d:8b:90:ed:b3:ed:94:7c:42:c2:52:bd:72:53:56:
         e6:bc:89:dd:db:74:ab:ef:8d:b5:9a:01:c6:17:22:8a:59:78:
         9b:9a:57:bd:df:0c:1c:f3:dd:a2:1d:90:57:89:55:55:b0:82:
         99:7e:e3:99:a6:12:70:0a:60:cc:60:7e:60:6e:8c:ac:81:a6:
         c8:68:20:cd:6c:22:3f:b1:8d:f4:56:e2:95:ef:14:14:aa:2b:
         78:ba:bf:5e:90:7e:c4:2c:cc:78:89:45:b9:33:61:b1:4f:da:
         a4:2b:0a:93:ce:e6:66:c4:d1:d6:87:f0:c2:be:58:46:a4:88:
         76:f5:09:f1:cd:ae:61:51:17:1a:00:6d:d8:22:2f:05:b7:cf:
         ed:5c:24:e8:7a:4a:08:40:3e:3f:22:4f:99:c7:bb:0a:29:1e:
         d9:84:e1:6b:3d:fb:63:70:59:64:ec:ca:6f:a6:8c:09:7e:94:
         55:4b:1f:a4:78:1d:49:b9:1e:ce:89:3e:4b:fe:68:7c:9f:fb:
         ac:b3:6a:64:77:9c:4b:42:8b:6e:b2:a5:5d:c5:c7:b0:3e:38:
         00:e3:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:06 2024 by rpki-client on console-fra.rpki-client.org