Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          oq+/UZtT2II+9lJckB1TTpXBZiq9MWeJEECehfGvAmc=
Subject key identifier:   CB:99:52:D7:99:F7:7F:E7:86:2A:37:1B:90:97:AF:C6:01:48:68:BC
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019357D2A25D89B6DEB131EFF4D713CC2035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          0C8B
Signing time:             Sat 23 Nov 2024 07:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:42 +0000
Files and hashes:         1: LTfGB2oVia27haJCTBsPNBby1D4.roa (hash: rJV0KX1QkOOZ9tGuNc+wMczUJ6rQgnPcf1BYf+ZeRCM=)
                          2: RvRWJlb1vfz2aWKvNUO9WlD1_Oo.roa (hash: R6w/TluzVo4R60tBlAOUzH2yWQskJ2jaKfNj/YfXDLQ=)
                          3: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: GOawVoGCj0XFroQ9fC5ix7KWNe3bWIrOTTBUIcVvMAY=)
                          4: n-fBP_tQN3d5kTxVsVAbB-MstPg.roa (hash: ABjEgwjWORdgGkVb6w5+xAv5lz4lwRV1397tQZyRDSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a2:5d:89:b6:de:b1:31:ef:f4:d7:13:cc:20:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Nov 23 07:00:42 2024 GMT
            Not After : Nov 24 07:00:42 2024 GMT
        Subject: CN=cb9952d799f77fe7862a371b9097afc6014868bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:58:40:dd:6e:ac:22:b2:f1:3b:0c:a6:a7:
                    e2:4c:8f:c1:61:ee:3c:09:9a:4c:c9:0f:e0:3c:b2:
                    b8:74:15:ee:16:8f:44:c5:80:ad:eb:be:cb:56:ac:
                    d4:33:43:e5:22:24:7a:62:19:e5:04:7a:75:88:77:
                    50:c6:84:e3:30:17:83:38:98:c1:95:b7:dd:ef:3c:
                    f2:81:52:00:24:f0:5b:2c:5c:4c:c3:b7:5e:dd:3f:
                    6c:50:6d:37:b9:19:30:93:16:35:81:62:37:c5:85:
                    1d:6b:bc:62:69:21:a9:14:f7:c3:d4:26:e9:48:a8:
                    c6:0b:20:46:88:1d:4c:72:d7:9d:27:1e:b2:02:b9:
                    45:d8:b0:26:3f:e5:28:ec:97:35:3d:b9:66:dd:5c:
                    29:d9:18:16:36:ca:9f:56:17:91:fa:09:0a:8c:45:
                    bb:e1:95:fa:60:9f:a9:53:6c:bd:2a:81:fb:95:a8:
                    fa:77:ee:6b:eb:44:14:01:be:59:74:e4:47:c8:c8:
                    81:a0:d0:3b:59:e7:77:32:20:26:38:87:5b:ea:5a:
                    c5:20:fa:00:ff:ff:89:e4:21:cb:38:87:47:e0:25:
                    fb:4b:18:4f:f6:7e:95:db:24:3b:00:27:30:1f:d4:
                    72:3e:f9:85:e7:4b:2d:83:79:01:59:35:48:09:67:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:52:D7:99:F7:7F:E7:86:2A:37:1B:90:97:AF:C6:01:48:68:BC
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:d3:3b:d7:e8:5d:cc:e6:8f:4f:0f:f3:e2:5c:e8:76:4e:
         50:71:5c:07:3e:50:0c:ef:48:77:ce:ec:f4:92:cb:f3:ec:a0:
         06:21:ed:a6:7c:bb:63:4b:f5:d3:f4:66:f1:36:99:92:33:b4:
         a2:25:e8:11:4a:04:54:df:c9:e9:74:b7:d2:27:71:8b:ac:e4:
         46:c9:d6:e5:19:6c:f8:d6:fc:91:4b:c1:8d:4f:66:cc:23:18:
         62:7f:18:ec:f1:2d:42:56:50:ac:11:b2:60:35:ed:09:8e:82:
         d2:58:0b:d6:1d:a3:81:d5:84:43:21:67:93:9c:0c:a0:69:4a:
         ab:bc:ca:05:29:1e:da:03:01:42:67:08:61:1a:3f:cc:41:c0:
         7e:3f:4e:be:60:1d:4f:e7:39:1c:07:65:2f:19:cb:5d:9c:ea:
         bf:b2:f1:eb:5e:fe:54:c6:92:69:61:dc:99:76:da:de:cb:ed:
         3b:ab:62:2d:7d:c1:86:be:fd:ec:7e:d2:a9:42:66:e0:7b:d6:
         f9:7f:b9:26:fb:3d:02:78:56:2c:0d:b8:13:b5:5a:89:b6:87:
         bf:99:76:3d:bf:ab:3b:d4:7a:9c:a9:ad:28:78:73:43:7b:78:
         f0:6f:47:46:31:6a:2a:08:4c:51:8d:3f:92:99:e0:88:9e:8f:
         9a:ff:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:46 2024 by rpki-client on console-ams.rpki-client.org