Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File:                     L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier:          Ljrx3D0shCQOGKWFEjrdVTl4Rz+4XQFbjhYCva7Hf/0=
Subject key identifier:   3D:21:39:E3:BF:BE:CA:47:3B:5B:29:84:59:70:EE:60:61:59:1B:6C
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer:       /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial:       01935351110ECCC514F1E00B75A4788CE4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number:          016F
Signing time:             Fri 22 Nov 2024 10:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:41 +0000
Files and hashes:         1: 5pbhDWvXzmdxNrgkmY2rRlxxsHM.roa (hash: VT3QDkPFuDPAA7R9+pQL1f8dc/R9NHmOcpAp6TGcyeE=)
                          2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: dVGpIj14CDRdLiAg1a2AZBkl5f3orGY7ksZULxgFo4U=)
                          3: vMHATnzwQjutwctwwQWsq4wvPSw.roa (hash: E4ItVq6aAXrKYlmiZz2lvg0tkEDxuKzvGvuPach/Uq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:11:0e:cc:c5:14:f1:e0:0b:75:a4:78:8c:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
        Validity
            Not Before: Nov 22 10:00:41 2024 GMT
            Not After : Nov 23 10:00:41 2024 GMT
        Subject: CN=3d2139e3bfbeca473b5b29845970ee6061591b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:29:b8:4d:7a:2e:09:b6:e0:61:07:89:90:
                    ad:df:d2:53:b2:40:14:f7:2e:f3:d2:f8:59:32:76:
                    6e:dd:7f:89:4c:dc:3e:17:cd:2e:b9:86:9b:a7:4f:
                    ac:cb:e4:2f:1c:de:a2:b9:1b:cc:ee:bb:50:2b:07:
                    34:b7:d7:45:58:da:eb:15:09:09:4a:1d:10:c4:d9:
                    a3:80:be:86:c3:5f:8b:a9:1f:88:49:f8:59:e7:e3:
                    76:33:de:bc:77:6f:c9:3b:5e:3a:2f:b2:37:1f:c2:
                    42:5c:8e:4d:44:09:0d:d2:00:bc:d6:92:c6:3d:ce:
                    a7:67:42:76:57:c9:16:43:8a:9e:d4:f6:15:60:33:
                    ef:b5:b2:0f:c5:28:1f:82:d1:6b:da:d7:a7:c1:04:
                    ba:eb:ad:26:3e:ba:ca:f5:9d:b8:40:6b:28:c2:ae:
                    8f:bd:d8:3f:c1:5e:5a:98:83:7d:47:1e:b1:50:55:
                    3b:1e:11:3f:19:f3:97:18:59:5d:6d:32:c5:95:85:
                    87:a0:5a:c2:76:e7:f5:ff:44:fc:9a:4a:e6:83:d9:
                    c5:cb:5b:51:84:68:b5:62:c7:8f:46:45:e3:73:59:
                    ce:c9:36:f1:61:a1:d3:4c:a4:1c:92:4e:bf:8d:c3:
                    b1:fa:ad:f7:bd:55:c9:a4:0d:60:f7:69:db:c4:f2:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:39:E3:BF:BE:CA:47:3B:5B:29:84:59:70:EE:60:61:59:1B:6C
            X509v3 Authority Key Identifier:
                keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:9c:26:42:e5:c4:ff:97:8a:54:b7:07:4f:18:39:c7:8f:
         98:a6:21:50:5f:86:75:a1:8b:4a:0d:4c:5c:f6:39:0d:87:40:
         77:31:39:bc:b3:9c:ca:c5:7e:93:08:dc:3f:00:46:84:17:13:
         0e:27:41:2d:7d:4a:dc:0c:ed:9d:b4:bf:07:45:70:d7:89:38:
         69:48:0a:44:5c:26:fe:4f:49:17:6a:35:0f:e3:39:74:4e:44:
         76:25:67:c3:d8:b2:08:a1:5c:61:f8:5b:4b:d9:36:9d:5f:fc:
         19:d1:64:c5:1f:a4:37:3a:34:00:c1:21:45:c5:a8:68:ec:d5:
         e3:4e:8c:e2:e9:2b:3a:6f:e0:8c:d2:21:45:44:df:be:45:38:
         3e:a5:41:09:d5:76:3b:4f:3a:79:a9:d4:a6:38:ac:5d:f3:dd:
         f6:0f:9b:b7:b0:2d:54:24:3f:0b:9d:35:5b:3a:87:71:13:04:
         0a:aa:2d:b4:6e:28:8e:97:24:0d:38:e7:e7:b5:65:80:3f:95:
         c7:94:65:17:74:cc:09:3c:da:8a:43:27:56:e0:a1:d7:03:91:
         2a:70:84:a9:e4:8c:53:11:b6:0b:45:11:10:87:b6:e9:32:00:
         ba:3e:a3:f5:a0:c5:55:2f:27:e1:a6:4a:c0:9d:75:71:38:8f:
         ab:fa:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:50 2024 by rpki-client on console-ams.rpki-client.org