Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File:                     lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier:          /1W05oRsKkC/1CdzJnZ+vEXSaFZMx2zbQJt0b2Y9qfk=
Subject key identifier:   50:AB:40:89:B1:1C:F9:28:0E:08:80:3D:32:F3:3F:7D:EB:0D:63:2B
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer:       /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial:       01903AABC1ECBBBED8CA3AA2252377238CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number:          0656
Signing time:             Fri 21 Jun 2024 12:00:53 +0000
Manifest this update:     Fri 21 Jun 2024 12:00:53 +0000
Manifest next update:     Sat 22 Jun 2024 12:00:53 +0000
Files and hashes:         1: IsXlJVr4hClOkJL-3vmF95s6rec.roa (hash: f7ariwQoc3hUPsiD3EeDf1kwHLpX2QdwswTREcD7/zA=)
                          2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: FSVkmrF/J/2kwVvLFEaSgQh2PYUQX7dZsk0HGitwN0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:ab:c1:ec:bb:be:d8:ca:3a:a2:25:23:77:23:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
        Validity
            Not Before: Jun 21 12:00:53 2024 GMT
            Not After : Jun 22 12:00:53 2024 GMT
        Subject: CN=50ab4089b11cf9280e08803d32f33f7deb0d632b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:e7:40:25:cd:8f:2d:85:25:0e:cc:87:b2:
                    fa:0b:90:cf:00:d9:37:ba:38:50:5e:84:74:83:af:
                    4c:31:f9:1d:6e:a3:4b:e7:2e:e8:9a:67:df:9a:bf:
                    17:fe:c7:31:30:32:b4:29:8f:f0:60:1c:c5:52:10:
                    7a:3a:cd:82:27:69:2e:55:41:61:aa:c8:5d:d0:42:
                    a2:5f:33:ec:31:9c:79:f3:1d:dc:2e:72:51:5a:6f:
                    a1:cf:45:d0:1a:11:a2:9f:c2:c0:ce:61:02:4b:8e:
                    73:48:7a:c6:d3:7a:d2:31:a8:1a:fa:b4:52:e1:bf:
                    c3:da:c8:b1:ea:5d:55:93:59:22:da:b4:0b:e5:13:
                    bb:1a:d5:3e:c2:93:4a:9c:49:8e:0b:4e:48:ce:98:
                    97:fb:48:8d:f9:95:e0:a8:47:11:b4:10:ca:72:33:
                    ac:fb:5d:45:e6:05:b4:20:18:58:80:3a:57:9a:07:
                    83:4a:34:99:d5:d0:f1:44:ad:b8:8e:f5:83:77:c3:
                    59:a9:d4:cc:b0:62:b1:b5:f5:67:70:b6:98:59:57:
                    ca:48:ad:2b:8d:3b:8f:cf:db:f7:53:db:c6:0b:56:
                    de:5f:44:12:d8:01:5a:32:ca:7a:86:b0:21:44:88:
                    b8:33:55:41:5a:a6:7f:b2:74:94:11:bf:75:21:ae:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:40:89:B1:1C:F9:28:0E:08:80:3D:32:F3:3F:7D:EB:0D:63:2B
            X509v3 Authority Key Identifier:
                keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:1d:48:1b:46:3e:07:72:1b:0c:b7:34:8e:59:df:22:36:
         d9:a1:00:aa:c9:93:ec:ef:0e:18:64:9a:13:f4:ae:13:d8:59:
         af:c8:50:72:33:85:32:87:ec:3b:bf:11:a2:a9:05:06:87:14:
         5e:58:06:9d:2e:7a:30:9d:2b:e6:56:7d:34:b9:5d:0d:61:6b:
         7c:5d:13:b8:6b:e2:e5:66:6d:0c:ee:06:61:4c:47:0a:0f:57:
         06:22:2f:69:b1:9b:1d:73:5c:c2:67:f5:19:8b:52:a2:72:7d:
         9d:4f:18:87:8c:09:62:10:dd:47:72:b9:90:0d:a0:51:b6:31:
         e0:cf:a8:b9:37:6e:4f:61:ac:25:78:69:6e:45:eb:77:90:b0:
         70:a4:8f:7c:e7:ff:c1:e1:05:ae:d0:df:52:52:5a:0a:06:e1:
         7a:91:21:3e:95:08:de:bb:77:c8:ae:70:01:19:b2:da:24:d4:
         51:95:54:ff:1e:1d:eb:ea:e3:a7:4e:d1:53:a7:68:59:5d:e8:
         b3:f7:67:07:19:9a:31:b1:07:a0:70:50:ee:9f:60:8d:c7:47:
         e6:7b:aa:08:67:aa:01:60:77:4b:1b:d2:ad:7a:b9:75:37:db:
         c7:3d:fb:6f:38:0d:da:bc:34:49:fb:8c:e1:bf:99:18:24:57:
         a4:ea:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:29:08 2024 by rpki-client on console-fra.rpki-client.org