Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File:                     lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier:          yZSzXQoqcPEIjHqB8QuEnW8cK8Oa6fKZ34Gxh5lYIAg=
Subject key identifier:   CF:9B:10:F6:1D:2E:35:62:FD:6F:CE:13:E2:98:9A:3F:2D:46:D6:34
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer:       /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial:       01936B592562EAF15C74784D1815A4F96349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number:          01C6
Signing time:             Wed 27 Nov 2024 02:00:24 +0000
Manifest this update:     Wed 27 Nov 2024 02:00:24 +0000
Manifest next update:     Thu 28 Nov 2024 02:00:24 +0000
Files and hashes:         1: 1H9a_NsJYlDNpL-kDVigsOd3Kqk.roa (hash: Mqe8p0moQp03tsWwi0Vls56Jg6XlS9PrCWPPDIS3VvY=)
                          2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: eiqgR/G/PnUbuz+zNz6mBbxu40vWouWC+feO2NcLkxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:59:25:62:ea:f1:5c:74:78:4d:18:15:a4:f9:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
        Validity
            Not Before: Nov 27 02:00:24 2024 GMT
            Not After : Nov 28 02:00:24 2024 GMT
        Subject: CN=cf9b10f61d2e3562fd6fce13e2989a3f2d46d634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:89:25:02:00:73:fb:7d:52:6a:8b:fd:4f:
                    af:db:e5:f3:87:c6:e7:3c:62:31:ce:10:0b:6c:26:
                    a5:89:d4:34:d7:0a:d2:54:3e:29:81:ad:f3:9e:07:
                    db:43:dc:c3:8f:e2:0c:95:a7:97:73:12:5b:5a:b4:
                    b0:b0:10:db:a4:63:b9:e6:3c:d6:97:5c:ab:88:c8:
                    79:8b:92:0b:43:87:45:4a:8e:f1:d3:fa:71:74:e0:
                    9d:ae:d5:1d:58:48:21:da:14:3f:d2:f8:03:cd:86:
                    fa:0d:c1:9c:43:56:ed:39:74:54:bf:be:61:10:60:
                    61:9d:87:c6:22:1f:a4:f9:f6:84:96:85:c4:c9:9b:
                    b0:41:3d:9b:84:0e:82:44:ea:f4:5a:77:d6:71:1c:
                    96:00:aa:ef:b8:2a:56:79:29:1b:a0:4a:fa:30:30:
                    62:82:f2:40:4a:cd:9a:e9:90:aa:bd:72:e3:d8:66:
                    45:86:76:97:b2:be:df:1e:e2:52:de:77:48:a1:2e:
                    9e:c4:7d:de:14:2c:96:e3:5a:f5:c3:a7:2b:33:a2:
                    25:19:9f:01:57:82:27:62:7f:21:c8:a1:37:3a:86:
                    3e:af:da:4a:38:91:ea:36:4e:eb:73:cc:2b:fe:69:
                    ba:a7:83:38:85:fd:fb:33:d5:69:18:76:85:2c:6d:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:10:F6:1D:2E:35:62:FD:6F:CE:13:E2:98:9A:3F:2D:46:D6:34
            X509v3 Authority Key Identifier:
                keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:10:50:2a:ee:b1:4a:cc:32:ff:9d:95:de:62:70:25:3c:
         0f:dc:9b:99:6c:5a:f2:60:42:67:89:d5:bd:02:43:20:e0:5b:
         dd:b5:e7:57:41:65:f9:41:fd:a1:be:3c:3c:5a:64:39:dc:65:
         c6:f2:35:eb:81:3e:76:2c:14:18:b0:ef:6f:bf:8f:15:10:a2:
         73:19:9b:06:57:b3:e2:29:39:1b:49:69:1e:5e:17:90:27:60:
         67:a5:85:d4:30:ca:02:e0:78:0b:14:9d:b0:3f:c7:d9:ac:0e:
         53:92:42:e3:dd:b4:a7:4f:da:91:ae:27:62:ab:4e:d0:28:6e:
         43:a1:69:16:8c:79:4d:f6:5c:f3:d9:08:9f:25:bf:6a:bd:cb:
         0d:28:37:d3:ce:ec:46:92:a2:88:82:48:56:1a:45:aa:5f:47:
         9c:0d:5c:4d:a0:13:b1:b2:96:09:ae:87:e4:20:32:78:82:cc:
         f8:62:08:f3:7a:1d:d8:07:51:02:43:6c:84:88:21:86:e1:91:
         2c:0f:0f:09:38:bf:de:46:e5:47:69:13:51:9e:be:9c:48:8e:
         07:c5:76:eb:24:21:e2:76:c7:e9:79:67:29:ea:67:3b:72:bf:
         30:ab:77:11:7e:19:7d:7a:d8:ca:23:44:c3:2f:3e:9e:87:fd:
         12:17:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:51:47 2024 by rpki-client on console-ams.rpki-client.org