Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          x0nMl6xINphVbLS5hkMUmcNnYoG1B8jvdwC2FSGp9HI=
Subject key identifier:   DF:FF:84:7E:33:1F:F5:FC:1C:C9:20:16:8D:F2:57:77:DE:68:47:73
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019355E46E3F03E80606744D959F8D40565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          0852
Signing time:             Fri 22 Nov 2024 22:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:54 +0000
Files and hashes:         1: 17cVOKFfmwAIro_FC1Npp4dy3qE.roa (hash: r6P4GFMI7PqvEeSmFeQz/rQk0NsSHmm92e2FFsdFzHs=)
                          2: 8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa (hash: yGBp/f3DHOkOHYSYWiWUzrerW2qguA7fijUUFh4h9Pw=)
                          3: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: kieR+F4a9VHeTnPF4yMUUMh2IYjc384k8riu2EsONbs=)
                          4: p2cmi4-szwuBRjunNqjqqW6Qbyw.roa (hash: b1A0/L2pixE5GgQ6nN5uzQLS9wTBw/uhAXwmlC42Gzs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:6e:3f:03:e8:06:06:74:4d:95:9f:8d:40:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Nov 22 22:00:54 2024 GMT
            Not After : Nov 23 22:00:54 2024 GMT
        Subject: CN=dfff847e331ff5fc1cc920168df25777de684773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:78:f4:7e:2a:d7:39:0c:a1:3e:15:62:a9:
                    8f:30:a8:db:58:13:2e:2b:ca:cf:d5:f7:76:74:fc:
                    9d:2f:ad:94:62:76:37:90:5b:9a:84:0d:0f:f8:85:
                    09:98:00:00:13:0d:bf:68:81:ea:18:08:18:bb:42:
                    9d:35:36:2e:ff:db:fe:f7:1b:41:36:3e:66:04:02:
                    6f:ea:9f:93:d6:b0:33:da:65:d7:ed:01:78:c8:2c:
                    84:f1:26:f0:16:89:cf:43:44:34:93:13:27:f8:d8:
                    bf:dd:23:91:69:32:42:78:95:a8:ff:96:48:c6:74:
                    a2:83:d0:3e:f0:03:5f:8b:25:7d:93:c5:91:a3:1b:
                    78:b3:33:3c:c9:b6:ef:ac:97:e7:44:19:0a:d4:b1:
                    c4:1b:f4:d7:29:6b:72:a9:c0:a3:67:98:73:c2:a9:
                    cd:c7:28:97:14:8a:c9:db:8f:77:b5:c5:1f:f9:e7:
                    96:32:5e:22:14:d4:cc:16:67:8d:91:4b:27:43:7f:
                    5b:3a:29:65:e8:e2:24:61:1f:fd:5c:c6:81:1d:8b:
                    6b:a5:05:7e:7d:42:59:00:25:e4:36:60:91:49:77:
                    a5:14:c3:4f:3b:9e:26:b6:b0:aa:af:94:b6:2b:3d:
                    c1:a5:e9:a0:ff:97:83:a4:24:00:eb:62:f3:40:b3:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:84:7E:33:1F:F5:FC:1C:C9:20:16:8D:F2:57:77:DE:68:47:73
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:e1:f3:f1:a7:d0:0c:35:40:d2:b6:bf:c0:86:3c:ff:a0:
         c3:fe:1a:2b:58:f6:2e:44:9d:18:dd:77:42:d8:ca:07:f2:f9:
         b0:b7:12:db:12:3b:df:16:13:4d:64:e3:e9:72:cb:0a:85:f5:
         6e:9d:d4:aa:d9:52:64:52:34:d2:ca:20:0e:6c:ae:1b:e7:d8:
         4d:22:60:72:b3:f8:64:1a:e6:60:72:da:ac:63:7b:a0:87:50:
         70:ef:63:23:0e:a6:f3:51:1a:d2:c4:54:72:06:cb:e8:ea:e0:
         47:2e:1d:b9:07:75:27:26:8c:fc:5b:27:cc:de:09:bd:d3:aa:
         78:71:b8:c1:e1:5e:f5:80:4c:24:50:d9:f8:cc:83:94:b7:59:
         b5:d4:a0:43:99:5d:be:80:b3:c4:b1:ab:cf:02:b9:a0:db:89:
         65:c8:8d:d7:30:b0:fd:26:a0:85:e6:cf:14:ee:04:3d:9d:08:
         d7:c7:b4:5b:b1:14:6d:9f:af:99:6e:e6:8c:57:84:eb:ea:0e:
         44:79:fb:fd:22:0a:5f:5c:d5:63:36:40:0a:bc:76:98:34:ae:
         cd:7c:a1:a2:f6:d1:8d:66:5e:0b:34:79:98:72:77:a6:e3:a6:
         0c:2f:a2:8a:83:7e:76:5a:52:79:e3:cc:33:f9:2b:c5:98:81:
         e9:5b:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:31 2024 by rpki-client on console-fra.rpki-client.org