Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File:                     lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier:          vVImyZBaHIfbKGshHuFVszXq/RVf3KEk+MI1OQM1H2g=
Subject key identifier:   24:E9:B9:C7:4F:48:EB:58:B3:EE:B2:3E:EC:AF:23:BA:5A:FE:85:9A
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer:       /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial:       01935876F334869D899A93B629AF70C7EA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number:          07DE
Signing time:             Sat 23 Nov 2024 10:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:10 +0000
Files and hashes:         1: 8pO6zzRjN33BYTvkOrafzKUq8pY.roa (hash: 6NGQ4fCvzKUtXxskjfipbe5X2LquAe4vcq5nCcCj4dA=)
                          2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: p6q+4KTvK0mRI2t4BGdB3YjQka4p8xZRE+qbZA6l3jc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:76:f3:34:86:9d:89:9a:93:b6:29:af:70:c7:ea:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
        Validity
            Not Before: Nov 23 10:00:10 2024 GMT
            Not After : Nov 24 10:00:10 2024 GMT
        Subject: CN=24e9b9c74f48eb58b3eeb23eecaf23ba5afe859a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:92:05:c8:4e:70:b1:2e:fb:77:1e:04:53:
                    30:ee:c6:ea:05:72:0c:12:1c:7d:17:14:b6:90:d1:
                    19:64:f5:0d:7e:09:04:5c:35:d5:7f:6a:16:95:4f:
                    31:05:64:5b:59:11:f4:b3:bb:a3:cd:13:3e:c4:90:
                    b7:0c:b5:ab:d6:db:c2:0e:c7:fe:21:5a:23:b3:69:
                    a6:87:eb:d5:2e:88:c4:1e:c3:87:18:7e:f7:9e:7f:
                    27:d9:2e:e9:46:fe:b5:bc:a4:f2:b9:4d:ae:38:7b:
                    a0:f5:47:41:b0:69:57:4b:b9:7f:8a:04:9a:b0:18:
                    57:34:67:2d:6f:ba:f1:d7:25:b3:e2:da:4c:d5:96:
                    f8:26:42:48:8f:30:2d:ca:86:f9:8a:7e:a8:86:31:
                    a4:82:a7:f7:26:e9:4f:3f:fa:2e:b3:a9:48:d1:ca:
                    d6:ce:b6:8a:7e:a1:9b:c2:26:bd:bd:27:a0:aa:91:
                    55:d4:3c:94:e7:05:1c:20:73:19:e7:57:0c:59:93:
                    1d:7f:90:19:e8:13:af:9b:c8:78:83:e1:8d:2a:03:
                    c0:27:84:c5:ab:91:a2:f6:68:73:af:f7:e7:fa:8a:
                    07:dc:1a:ff:ca:4b:b9:37:45:03:5b:ac:71:7d:11:
                    dd:18:1b:47:77:b9:66:4a:29:c4:38:e7:20:0a:89:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:B9:C7:4F:48:EB:58:B3:EE:B2:3E:EC:AF:23:BA:5A:FE:85:9A
            X509v3 Authority Key Identifier:
                keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:71:56:1d:a1:c7:f2:20:25:d2:ae:b6:76:c8:d4:4b:9c:31:
         b7:36:79:35:be:b7:c1:49:74:04:86:07:81:1a:8e:7c:9b:f0:
         39:82:9e:02:08:0f:6a:1e:ae:43:bb:c9:cc:2a:36:f7:83:05:
         14:1b:e3:76:20:64:20:36:b7:be:ec:06:db:e4:83:e5:3e:1d:
         77:1e:8f:52:f0:11:45:63:3f:2a:85:b4:cc:da:7c:dd:53:11:
         34:6a:0f:6a:af:c8:69:fa:0c:cb:c3:f1:13:e0:41:63:bf:23:
         e5:a7:0b:2f:78:73:48:e7:9e:49:b3:56:87:d7:4c:30:5b:d3:
         c2:2f:4e:3d:74:8a:a4:02:46:d8:67:56:df:9f:33:d4:53:11:
         8d:d5:a5:6a:73:a8:58:fa:6a:a1:ba:19:35:50:9e:fe:40:63:
         e0:28:dd:92:92:64:d6:8b:c2:8f:1e:ed:e8:f6:9d:75:9e:20:
         95:b1:ba:b6:f2:5e:70:4d:ee:b3:3e:b4:95:62:1f:17:98:b3:
         7f:b5:7b:a9:aa:72:37:8a:92:30:99:98:e0:0e:d9:80:74:15:
         1e:77:83:ce:a6:8e:14:e7:3d:99:88:fc:73:25:db:07:55:97:
         23:89:95:d6:f8:c1:83:ce:19:ec:23:19:c2:d8:7d:12:ac:d7:
         c1:78:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:30 2024 by rpki-client on console-ams.rpki-client.org