Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File:                     lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier:          fkwYAPl8ZUCo7Hs/82K6h395w5H9bOvA/5JlsthFdik=
Subject key identifier:   BF:75:D7:9D:D5:C8:05:90:42:9F:0C:14:35:45:83:DE:8D:66:80:13
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer:       /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial:       01901E59277ECDA2514B4FD11785FBC38268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:17 +0000
Files and hashes:         1: V1ItKE1glt5tcMViL9359ujGnQY.roa (hash: rrHzpsCAzsUeNIwz19x4BUeYERHIp7ER0GcavbEaAas=)
                          2: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: r39rP8HnUJ76PUR4x4tO3w4f9dV/JJr4zEUkSNOPXIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:27:7e:cd:a2:51:4b:4f:d1:17:85:fb:c3:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
        Validity
            Not Before: Jun 16 00:01:17 2024 GMT
            Not After : Jun 17 00:01:17 2024 GMT
        Subject: CN=bf75d79dd5c80590429f0c14354583de8d668013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:14:d5:2f:7b:a0:cd:56:b9:cc:86:60:9a:
                    94:8b:3e:74:ee:c6:a7:3d:85:0e:39:ab:33:d2:ed:
                    56:78:35:6a:ac:e7:ca:38:b8:71:bc:f8:6e:1e:51:
                    2c:b4:1c:d3:b8:6e:09:3e:d2:3c:ea:4e:0f:5c:f8:
                    b6:c3:cb:4e:57:2c:ae:e7:4c:16:b1:5b:29:79:62:
                    23:5b:8f:ff:68:3b:11:a5:20:af:b8:55:87:ce:60:
                    7b:17:96:5e:49:15:5b:58:ad:9a:98:5a:a6:42:1c:
                    30:f5:1d:c8:54:53:eb:1d:cb:42:7f:6e:b7:db:e4:
                    33:2e:c8:b9:f1:ba:ba:f4:8d:1b:20:f8:f8:86:b5:
                    34:5f:a0:a3:fd:aa:b9:86:ba:68:83:b9:1e:45:a3:
                    a0:9b:fb:80:6a:7c:7c:ee:67:55:e9:1a:9b:ad:69:
                    07:43:ca:9b:b8:27:09:61:97:a4:dc:16:44:64:9a:
                    5d:c5:28:5c:96:fb:ea:74:9c:cb:0f:8e:8b:1f:14:
                    03:25:f5:a9:ef:be:47:3b:03:2f:ac:b6:fd:9f:f9:
                    ec:6d:a1:94:7d:c8:e1:14:ba:04:dd:e9:a3:67:fd:
                    ae:1d:26:a5:4f:ec:c5:5d:b9:af:72:03:a8:4b:cb:
                    0b:9d:c8:df:c8:f7:d3:5e:4f:97:a5:3d:c1:a2:0a:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:D7:9D:D5:C8:05:90:42:9F:0C:14:35:45:83:DE:8D:66:80:13
            X509v3 Authority Key Identifier:
                keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:ae:ab:eb:c8:78:f4:d4:41:8e:ed:53:a4:c7:6f:b7:f0:
         ee:1d:fe:ff:1d:8c:5d:c1:c8:16:92:99:5b:11:8f:1e:8a:4c:
         28:d4:67:d6:7c:e4:7d:80:b6:ca:2f:01:f5:5f:40:04:d9:fe:
         e4:df:d7:60:f2:ad:e2:f4:ec:2b:b5:06:4f:bb:b1:c8:c1:73:
         4e:5a:1a:88:a1:a4:a0:9b:37:d0:16:35:d3:b9:52:32:79:6b:
         6b:f0:92:ec:2b:59:a5:3d:6a:51:ad:2b:bd:56:4b:ce:70:71:
         8e:9f:3d:56:04:9d:3f:aa:11:06:9d:ce:28:cc:24:37:49:53:
         27:66:9c:0e:60:17:c1:95:24:9c:8f:0d:3c:18:03:8c:a0:47:
         a7:31:3b:c5:93:5b:6b:bf:ec:32:04:f3:b9:4f:9c:6a:c6:65:
         af:c4:0d:2e:22:60:c0:bb:d4:b2:d3:4f:d5:d6:ed:b2:1e:82:
         29:9b:0f:a7:6b:09:13:d3:a0:be:fc:62:ea:d2:8d:47:dc:89:
         7d:11:ef:dc:7d:bd:4e:9c:cb:0b:cd:6f:05:7b:14:2d:a9:37:
         7a:8b:3c:92:c5:44:dd:9e:de:e2:99:e5:db:c4:df:f6:ab:2c:
         7d:84:02:34:8a:f6:da:fc:b6:77:4f:11:04:85:cc:ed:ac:bb:
         97:71:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:24 2024 by rpki-client on console-fra.rpki-client.org