Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          SNFQq+AIV+bwzPrYnSBrE+h/2L+ALTZF9nnAbF8xCEE=
Subject key identifier:   6E:4F:CC:5A:BC:D9:A8:53:E2:58:56:A7:BF:E1:87:1C:71:5B:F7:95
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       01903E1A723B4C55FE28958B82EEC9CA660A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 04:00:38 +0000
Manifest this update:     Sat 22 Jun 2024 04:00:38 +0000
Manifest next update:     Sun 23 Jun 2024 04:00:38 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: qK/dR7SruINQZF2p96PJDEW2DRShkvjLweqXekxfylg=)
                          2: WwIuYQGN3j19G5pTbJVWPoOoo0E.roa (hash: nArwTEZJO5EodGEbIh72Hgfogjw8EL2fqdNuun2pq4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:1a:72:3b:4c:55:fe:28:95:8b:82:ee:c9:ca:66:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Jun 22 04:00:38 2024 GMT
            Not After : Jun 23 04:00:38 2024 GMT
        Subject: CN=6e4fcc5abcd9a853e25856a7bfe1871c715bf795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:01:9e:09:a9:5a:aa:ab:97:70:c1:af:e0:
                    a4:f9:b6:c2:29:f5:31:c1:59:27:2d:ca:03:64:20:
                    5b:c2:dd:44:6a:17:90:e9:6e:b8:62:8e:2d:57:2b:
                    23:07:64:b5:49:33:19:34:cb:2c:6e:42:4b:c2:22:
                    41:e7:73:3f:52:ef:9f:29:48:13:65:b5:b9:2a:3e:
                    f5:55:d4:e5:ad:79:cb:21:42:28:00:84:ab:41:87:
                    ca:65:54:76:4c:58:63:b5:bf:e6:58:eb:1f:78:b1:
                    15:a7:56:42:65:1a:6b:78:c2:06:d2:64:37:2b:ed:
                    7c:0c:4a:6c:99:57:51:78:3f:58:4d:53:8d:39:02:
                    2a:83:d5:07:ec:51:05:b6:41:e3:e6:60:93:08:89:
                    02:d9:ff:e9:73:ba:c6:5a:99:62:a4:15:41:9d:4f:
                    ba:7f:9c:54:d6:ec:1a:49:df:d2:e3:b4:e5:ad:40:
                    9e:65:d8:a0:db:95:85:f4:f5:e8:71:d4:c0:63:b1:
                    5c:36:98:0e:0a:d0:32:ac:1c:88:c6:cd:2b:de:82:
                    e1:47:99:34:7c:f8:ff:94:75:f3:ca:5d:4a:8c:d7:
                    8f:f1:bf:0f:f4:6e:21:43:8f:2f:20:ce:c6:d2:a8:
                    a7:0e:c6:bb:57:c0:38:fc:2d:ff:b7:d7:43:d9:36:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:CC:5A:BC:D9:A8:53:E2:58:56:A7:BF:E1:87:1C:71:5B:F7:95
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:9c:9f:9d:db:c5:73:3d:73:82:c4:c8:dd:06:98:d7:ff:
         1d:32:a7:e3:b9:95:ab:dd:5e:3e:01:38:32:df:a9:c2:31:8e:
         44:1b:de:c2:4d:57:14:aa:92:bb:1f:c3:0c:9f:fb:17:db:49:
         82:38:dc:15:2c:20:37:48:f7:bf:9b:d3:1f:e6:d5:84:98:46:
         2d:7d:3c:67:7b:28:4b:c4:fe:c1:94:6c:08:e7:9e:47:e3:80:
         1e:25:fc:7f:45:90:29:32:24:8c:cd:f7:7a:12:a9:e2:60:2b:
         2a:04:7a:41:eb:16:21:cc:15:52:24:77:54:85:37:84:ef:92:
         38:be:c2:b6:c6:c7:71:fc:ee:db:63:75:a1:21:f8:a5:b1:99:
         6f:ee:c6:63:3a:df:e9:1c:93:2d:a8:62:f5:36:5f:88:a2:04:
         2d:e5:29:c3:42:72:91:ef:6f:2f:5e:d7:00:b6:36:bf:4e:1d:
         a1:45:3a:83:d9:66:6a:fe:5f:3f:9e:b9:c5:94:69:2b:64:ab:
         16:a6:41:15:40:6f:d1:af:ae:27:9e:8f:73:d4:80:4f:6a:d4:
         ac:52:ba:01:a8:b4:43:ce:d3:04:82:eb:48:12:87:0b:09:9d:
         03:8f:5c:40:01:1f:a1:4d:ed:d5:dd:fa:4d:c8:fd:7a:12:f9:
         80:4a:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:26:13 2024 by rpki-client on console-ams.rpki-client.org