Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File:                     lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier:          vhYBrkNgfdj9i93c8t3Zl2GU0ufghq7jeYuG0DEOcAU=
Subject key identifier:   94:7A:AB:44:62:FD:8B:E1:FB:53:C9:4A:84:8A:B1:7A:33:3C:63:29
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer:       /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial:       0193561ACA7EE40A3E77B5B31CD3B1A7C4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number:          89
Signing time:             Fri 22 Nov 2024 23:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:16 +0000
Files and hashes:         1: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: R728QzUH8FBEqMwQ2qTCLFbNMZbGviGnnT7NgpP37ts=)
                          2: s_9dd5AcvFjDwFxrIZ-DDwr8PXU.roa (hash: js91EKDhiu8FUYd+L0+EO6Hq40axF83RvL0xYCKrF7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:ca:7e:e4:0a:3e:77:b5:b3:1c:d3:b1:a7:c4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
        Validity
            Not Before: Nov 22 23:00:16 2024 GMT
            Not After : Nov 23 23:00:16 2024 GMT
        Subject: CN=947aab4462fd8be1fb53c94a848ab17a333c6329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:2b:25:96:ae:06:12:bd:26:5b:c2:18:f3:
                    46:c2:b2:94:c9:dc:5b:42:59:77:a8:ac:df:75:ac:
                    c5:2a:13:a7:c5:60:a6:a0:ac:7f:6e:a4:13:8a:8e:
                    c5:bd:c2:ee:08:66:a7:8f:08:6f:a2:87:85:9b:1f:
                    ff:1d:ec:8c:34:8d:83:67:f2:d1:af:15:12:96:7f:
                    07:b2:13:24:15:89:07:53:fa:7d:fd:97:2b:01:1f:
                    e4:30:57:55:60:99:47:7d:f5:e4:c8:0c:0b:62:b2:
                    66:00:90:ab:de:4c:0f:ee:b8:87:c3:ce:31:2a:87:
                    22:36:3f:06:6b:52:8c:ba:16:56:09:a2:77:5d:b3:
                    40:9c:d6:a6:e3:84:8f:2a:01:55:cc:e1:56:6a:3d:
                    c0:7c:62:cf:52:59:9f:15:be:c7:48:d1:c7:ac:24:
                    2b:27:24:de:ae:31:cc:2b:bb:9e:1d:78:06:64:5c:
                    1d:88:8f:85:da:5f:6d:c8:64:07:6a:66:01:b7:24:
                    77:a1:d6:a4:e4:81:2e:71:89:7c:f2:ca:86:fa:a6:
                    ba:af:97:50:90:52:f2:24:c3:ab:44:21:9e:5e:57:
                    60:83:3e:f1:53:f6:a9:12:4c:4d:ea:1f:64:7d:d1:
                    7b:b2:64:1a:36:88:c6:02:78:99:5e:fe:d5:7d:67:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7A:AB:44:62:FD:8B:E1:FB:53:C9:4A:84:8A:B1:7A:33:3C:63:29
            X509v3 Authority Key Identifier:
                keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:16:5e:3d:6c:0e:bd:cc:65:a2:9c:46:42:e0:b3:b6:71:
         f8:38:ed:9d:c1:99:e2:1a:50:45:7f:42:08:c2:2b:74:82:32:
         ef:11:cb:7e:5d:3a:d9:2c:5f:ea:4c:7e:0d:b4:3a:f5:da:dc:
         99:bd:75:1b:3d:38:ef:d6:9d:f6:d4:60:e1:24:ad:41:ed:dd:
         94:fb:cf:3f:b1:c8:04:e3:04:89:35:38:ab:46:28:a7:83:e8:
         c4:5b:9d:af:53:ba:7d:d9:12:76:f0:74:3a:37:69:af:c2:29:
         5e:71:73:68:60:bd:28:a4:f0:5a:c6:f4:f1:3a:97:3c:d8:f9:
         5d:5f:03:c1:4a:90:e8:eb:5b:2e:e4:59:89:59:cf:34:ef:60:
         92:aa:78:12:fc:a7:b0:68:0e:14:a1:c7:56:d1:fe:04:e9:ac:
         e2:88:8d:6e:87:b2:43:29:87:86:6c:7d:08:90:7d:b9:ca:4a:
         5b:2d:fd:1b:f6:a3:81:75:60:1e:80:27:66:02:1f:fd:95:b5:
         e4:09:cf:37:86:89:5a:72:1b:2c:c6:29:d2:e9:58:8f:63:e3:
         9d:b4:52:d0:2a:b4:78:aa:ca:c6:64:05:fc:25:8e:0d:99:d8:
         f8:66:cb:df:60:51:4c:2a:eb:44:b2:04:41:f4:40:e2:a2:ad:
         c5:08:c0:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGsp+5Ao+d7WzHNOxp8T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2
YzIwNDQwHhcNMjQxMTIyMjMwMDE2WhcNMjQxMTIzMjMwMDE2WjAzMTEwLwYDVQQD
Eyg5NDdhYWI0NDYyZmQ4YmUxZmI1M2M5NGE4NDhhYjE3YTMzM2M2MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcsrJZauBhK9JlvCGPNGwrKUydxb
Qll3qKzfdazFKhOnxWCmoKx/bqQTio7FvcLuCGanjwhvooeFmx//HeyMNI2DZ/LR
rxUSln8HshMkFYkHU/p9/ZcrAR/kMFdVYJlHffXkyAwLYrJmAJCr3kwP7riHw84x
KociNj8Ga1KMuhZWCaJ3XbNAnNam44SPKgFVzOFWaj3AfGLPUlmfFb7HSNHHrCQr
JyTerjHMK7ueHXgGZFwdiI+F2l9tyGQHamYBtyR3odak5IEucYl88sqG+qa6r5dQ
kFLyJMOrRCGeXldggz7xU/apEkxN6h9kfdF7smQaNojGAniZXv7VfWfpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR6q0Ri/Yvh+1PJSoSKsXozPGMpMB8GA1UdIwQY
MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt
MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh
LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw4WXj1s
Dr3MZaKcRkLgs7Zx+DjtncGZ4hpQRX9CCMIrdIIy7xHLfl062Sxf6kx+DbQ69drc
mb11Gz0479ad9tRg4SStQe3dlPvPP7HIBOMEiTU4q0Yop4PoxFudr1O6fdkSdvB0
Ojdpr8IpXnFzaGC9KKTwWsb08TqXPNj5XV8DwUqQ6OtbLuRZiVnPNO9gkqp4Evyn
sGgOFKHHVtH+BOms4oiNboeyQymHhmx9CJB9ucpKWy39G/ajgXVgHoAnZgIf/ZW1
5AnPN4aJWnIbLMYp0ulYj2PjnbRS0Cq0eKrKxmQF/CWODZnY+GbL32BRTCrrRLIE
QfRA4qKtxQjATA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:45 2024 by rpki-client on console-ams.rpki-client.org