Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File:                     LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier:          YUUPNyhGH4wgBMdKXjM0EuNFgR3T9VbNMDEi9D2eXr8=
Subject key identifier:   23:8E:69:6D:15:A4:6C:29:36:2D:11:73:93:81:5C:8E:6F:4D:BE:B3
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer:       /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial:       01901BFCD66945FCB9AA4B9FF3D14134A858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number:          0948
Signing time:             Sat 15 Jun 2024 13:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:12 +0000
Files and hashes:         1: DPmYqcSHpRgdVDFLr4RyYj2VD_4.roa (hash: gk8cqEonekO2bPuq1tSUJT7G2lzgSlfCQX2AqLgNf8E=)
                          2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: tABiQbZzIBefjxA1vaRup7vFMMsYQPVrkTGaJtwVLUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d6:69:45:fc:b9:aa:4b:9f:f3:d1:41:34:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
        Validity
            Not Before: Jun 15 13:01:12 2024 GMT
            Not After : Jun 16 13:01:12 2024 GMT
        Subject: CN=238e696d15a46c29362d117393815c8e6f4dbeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:42:12:f4:b9:60:a9:ee:05:cf:52:72:95:
                    38:a8:8d:36:2d:0f:8c:68:58:f7:16:82:7b:bb:b4:
                    6a:cf:7e:07:05:64:dd:5d:17:44:e5:38:0b:40:07:
                    70:ab:2c:d1:72:42:5e:84:3c:ea:62:4a:56:8c:0b:
                    aa:d7:0f:d3:bb:8a:0a:65:b2:92:21:2a:4d:6c:3d:
                    94:40:df:7c:02:b0:91:f0:53:2b:bd:fb:8b:e0:45:
                    92:85:c1:4f:4d:91:11:58:fd:72:47:ea:10:9d:2b:
                    6a:a3:a1:50:3a:f5:4a:c1:7f:74:71:0c:51:45:97:
                    c0:72:82:89:a8:44:58:91:25:88:38:ee:33:bd:a2:
                    58:6a:3a:c3:5e:77:30:45:59:b1:4a:2d:d5:85:9f:
                    15:65:7d:83:83:f6:90:12:59:0d:6e:30:6a:af:11:
                    1a:67:1f:61:c5:e0:bc:e4:21:94:a4:84:79:4d:96:
                    f9:13:68:36:15:84:db:94:6a:43:b0:af:70:4d:8f:
                    a7:26:61:62:01:6e:a9:52:7b:46:06:03:1e:67:8c:
                    bf:13:29:51:e0:3d:87:4d:75:c6:83:83:13:c6:49:
                    9c:26:37:d6:55:04:dc:dd:2c:35:85:d6:50:10:59:
                    18:91:2b:c5:80:42:78:02:2a:f0:c7:b2:24:ca:56:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:69:6D:15:A4:6C:29:36:2D:11:73:93:81:5C:8E:6F:4D:BE:B3
            X509v3 Authority Key Identifier:
                keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bc:56:d6:15:27:73:c7:99:cb:3c:c9:96:06:0b:c4:68:4b:
         39:f5:fe:72:63:88:35:a9:6f:ca:de:3b:a3:a1:f0:8c:23:63:
         69:20:17:02:bd:8a:14:5d:7b:bb:05:fe:56:db:60:a6:70:af:
         de:a1:d8:03:82:02:f2:aa:4f:f1:71:b8:99:e2:ca:d3:e9:a1:
         09:2f:d0:9f:8b:45:65:29:54:8b:92:b5:47:44:ef:ad:59:ca:
         2e:be:76:f4:7a:9f:55:fd:1b:a9:72:20:1d:bb:60:93:59:9b:
         7e:89:74:40:8b:3f:28:d1:b9:5f:b9:49:c7:08:19:56:e1:d0:
         d9:fa:b9:ad:e1:d6:38:64:5f:89:89:92:8d:3c:85:55:6d:0a:
         66:10:0e:6f:56:37:fe:92:29:b7:14:24:28:72:a1:a5:57:25:
         ed:4e:3a:3c:6b:a8:c4:2f:94:31:31:6a:32:33:68:e4:dd:99:
         ae:85:46:27:8d:c9:15:19:1a:9b:c1:0a:a6:49:55:31:bf:1b:
         48:af:34:e5:c9:40:ea:91:1a:dc:32:97:79:14:04:a0:67:04:
         3e:9b:30:b6:b3:4b:4d:36:ac:40:87:14:96:fe:9d:fe:95:2a:
         ee:77:52:e0:63:5e:42:56:0f:c7:3e:aa:43:8a:ba:36:4b:c3:
         29:73:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:31 2024 by rpki-client on console-ams.rpki-client.org