Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File:                     lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier:          2IeHLrWFM4CQ/3vHnHiQJeW+LqENNpN7lXuQXasjx0g=
Subject key identifier:   4B:47:1A:36:79:73:FD:98:B0:CE:A7:C0:6D:D6:8A:EC:5B:41:95:ED
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer:       /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial:       019369D90BD7905189DD7BE5EA533BC3B78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:52 +0000
Files and hashes:         1: i0F4KlbSSU6rw6vcDyMO1qm5wYo.roa (hash: 3OAvRLeHMrzZ2E6ssjVSxFSqHC9n8ch1SP2wQIMj8og=)
                          2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: 67iq6PkLDIcIkv82QZswp9Dafm2VQFYPavqHxwEkFAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:0b:d7:90:51:89:dd:7b:e5:ea:53:3b:c3:b7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
        Validity
            Not Before: Nov 26 19:00:52 2024 GMT
            Not After : Nov 27 19:00:52 2024 GMT
        Subject: CN=4b471a367973fd98b0cea7c06dd68aec5b4195ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:5c:cc:bc:d3:05:d6:eb:a2:9b:98:c9:40:
                    61:fe:97:7a:fb:79:d7:b1:cb:05:78:47:3d:a8:28:
                    25:67:f0:21:f5:e0:70:87:aa:82:64:aa:01:1b:40:
                    23:26:c5:d7:b4:aa:22:fa:75:03:95:e9:8a:9a:59:
                    44:f9:35:48:e4:ff:fd:85:b3:4c:15:15:c9:5f:03:
                    be:99:b9:2f:73:ab:fd:08:42:ef:6f:8e:71:83:34:
                    34:a7:1b:1e:09:58:08:04:c0:b8:c1:73:ea:e2:73:
                    b2:35:43:f7:7b:dd:bb:38:6b:0f:83:da:ed:d3:e5:
                    97:59:b6:d4:46:15:25:a0:dd:38:b9:0b:5a:33:17:
                    92:ab:ca:c7:c9:aa:fc:0a:da:95:5e:0c:58:4b:4a:
                    da:86:32:aa:1a:46:58:95:3c:1a:48:e6:bf:06:5f:
                    3f:40:67:94:db:60:aa:85:8d:e8:67:ae:3c:ac:39:
                    0c:0f:1e:f0:f4:7d:bc:4c:95:f3:59:bd:79:42:d6:
                    66:c6:79:55:7d:15:0a:01:02:5e:f7:5f:89:9e:54:
                    25:ad:d1:e4:c9:a1:1f:90:86:f9:88:a2:45:43:1c:
                    ce:38:f8:c6:1e:e1:d8:50:04:94:25:59:0b:c1:95:
                    f9:94:4e:f3:92:98:56:43:21:fc:17:80:39:06:6d:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:1A:36:79:73:FD:98:B0:CE:A7:C0:6D:D6:8A:EC:5B:41:95:ED
            X509v3 Authority Key Identifier:
                keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:56:07:4a:fc:40:e1:f0:b1:23:7d:55:ce:82:09:4b:55:
         47:e4:e1:0c:60:b4:22:9f:79:f6:aa:86:3d:15:55:ef:5c:e4:
         2a:02:cc:c2:de:0b:ff:e9:41:36:5e:f2:ef:5c:fd:46:8b:6d:
         c2:f6:2b:cb:12:d4:b4:b0:b0:0a:1e:2c:6a:0b:e3:75:9a:1d:
         32:a2:c7:61:53:d7:d0:71:55:9f:90:8c:09:68:54:b1:ea:93:
         46:07:d3:7f:cc:ca:4b:53:56:3b:5f:4b:ed:83:e1:81:bc:75:
         c1:34:b2:f8:c1:07:8b:89:a0:b7:51:27:c6:e3:a9:df:db:40:
         90:9b:33:7c:bb:38:c6:78:9d:23:aa:e2:9c:2f:52:21:73:f3:
         97:08:4f:24:db:69:a4:1e:bc:7f:0a:20:7f:bc:88:ee:ba:3a:
         c1:69:28:0e:de:63:43:3a:50:e7:25:e5:f4:41:74:9d:5d:19:
         be:5c:30:cb:a7:14:1a:6b:d1:89:4d:86:cf:6a:3a:ba:ae:7a:
         1d:58:2e:95:21:be:c4:d7:24:70:69:15:0a:2c:34:7c:37:00:
         c8:8f:93:35:39:4d:32:9b:79:b4:63:b8:54:81:3d:c6:65:f7:
         d3:e7:2b:67:59:6b:e9:1f:2a:14:e2:26:ac:38:08:f1:df:9b:
         28:85:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:20 2024 by rpki-client on console-ams.rpki-client.org