Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File:                     lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier:          OAPKrpSwa4B4bfXLc+UMD4T7u2QtuoAFR8md9sQTkgw=
Subject key identifier:   52:38:B5:D2:34:69:D9:D6:51:EC:25:16:A8:F2:09:71:EB:BD:AC:56
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer:       /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial:       019044F89BCC8849D63303DB2EF6F777BD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 12:01:01 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:01 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:01 +0000
Files and hashes:         1: V1ItKE1glt5tcMViL9359ujGnQY.roa (hash: rrHzpsCAzsUeNIwz19x4BUeYERHIp7ER0GcavbEaAas=)
                          2: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: K+2NDg9ZIBUEcHcuwBcwpu+DX5o83H1cDImcQ2Oq4so=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:9b:cc:88:49:d6:33:03:db:2e:f6:f7:77:bd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
        Validity
            Not Before: Jun 23 12:01:01 2024 GMT
            Not After : Jun 24 12:01:01 2024 GMT
        Subject: CN=5238b5d23469d9d651ec2516a8f20971ebbdac56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:96:58:60:cc:42:5d:8a:78:de:67:01:6d:
                    0e:90:57:5b:54:4a:98:a7:98:bc:2e:31:4b:ea:2a:
                    67:d7:15:66:e1:a7:69:21:6a:e4:e3:60:f1:3a:07:
                    79:c6:f8:f7:d4:cd:a2:46:f2:92:fe:d1:e1:87:13:
                    9f:2c:08:b2:93:ab:9c:d7:35:cd:33:68:2d:2f:70:
                    d0:0d:46:7c:6b:69:08:3e:3b:bd:1a:e6:79:e3:a2:
                    8c:e5:ae:76:ff:ed:27:4a:8c:71:70:e4:03:65:f6:
                    92:12:63:12:80:3d:da:69:f8:42:4e:cd:09:83:1d:
                    27:de:8b:46:b1:6e:25:3d:e2:b4:d9:c2:e6:2a:85:
                    49:b0:cb:1a:6d:2b:3f:0c:2c:18:3f:13:9f:2e:bc:
                    03:c1:6d:55:0e:ab:06:2a:b5:9f:5a:a9:fc:ac:a6:
                    d0:9c:a6:a6:47:5b:7f:d1:e8:96:bf:15:44:fa:14:
                    c0:27:63:52:f9:b2:d6:9d:fa:34:eb:fa:03:9f:fa:
                    77:6a:5c:3c:ac:b2:0e:29:95:b6:07:df:fb:36:4f:
                    65:80:5a:e6:9f:8a:4e:92:b6:a9:15:d9:34:59:3d:
                    89:c1:5b:a1:38:89:9d:25:22:4f:0c:1c:e0:7e:d1:
                    de:29:4d:2a:aa:91:90:e9:1b:1f:64:ea:54:f7:09:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:B5:D2:34:69:D9:D6:51:EC:25:16:A8:F2:09:71:EB:BD:AC:56
            X509v3 Authority Key Identifier:
                keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:be:4e:33:12:1e:44:80:8c:4b:f9:71:f5:31:ee:61:b8:
         95:18:e9:30:5a:72:cc:59:5c:e0:36:ef:6c:8a:b9:0c:dd:1f:
         ff:1e:d2:79:e9:c5:3d:c0:cb:b6:3d:a9:9d:f0:f0:dd:89:b0:
         fd:64:5d:5d:11:a7:7c:9c:99:71:92:7c:45:a3:11:e9:ff:a3:
         16:d3:e8:74:6b:12:6e:a9:46:5d:00:50:06:4a:08:ad:bb:68:
         cd:38:46:ec:3b:0e:b2:52:31:81:4a:5b:a7:59:35:d0:ae:73:
         86:68:91:91:34:e6:6f:d4:39:24:9b:61:4a:eb:0f:f0:ee:67:
         57:9f:5b:a7:a6:31:c4:08:3d:35:ab:3e:3d:2d:8b:a4:3b:b4:
         92:72:5c:c8:84:66:2b:f9:b3:0d:50:5c:46:50:a1:1b:db:49:
         33:5c:c3:c5:64:24:b6:66:1d:28:5f:15:4a:00:52:5c:4f:25:
         d3:1c:da:db:79:78:63:3f:21:3e:61:66:b9:25:a3:03:93:a9:
         87:12:3c:27:dd:40:2f:90:40:79:f8:f2:67:10:a0:58:d9:df:
         6a:77:57:23:39:b1:89:af:38:41:3a:2c:93:9f:ea:c8:0e:82:
         bf:79:db:80:64:22:df:f9:1e:96:9c:8a:02:a0:9b:5e:77:46:
         40:61:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:26 2024 by rpki-client on console-fra.rpki-client.org