Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File:                     L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier:          KN8NKoi0kCFOK+EFCGTz+IJ/uKs2EJgpBkNGB7XyWn4=
Subject key identifier:   4A:CD:2D:5D:A1:B8:D1:30:3E:16:20:B1:61:32:44:A9:4F:34:26:DD
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer:       /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial:       019037E20E1F2306FAA784BE3F422DF86898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number:          0F15
Signing time:             Thu 20 Jun 2024 23:01:19 +0000
Manifest this update:     Thu 20 Jun 2024 23:01:19 +0000
Manifest next update:     Fri 21 Jun 2024 23:01:19 +0000
Files and hashes:         1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: hLTe2BrZBW742Qv1feAAl1hD82MDqpcne3dfskNlEDA=)
                          2: jFvlHdKnpnK2uescs6JtLnDOayc.roa (hash: solmtqrhpOf4+LJvhLRS7NGKvrIkhW0yzs+JQzu9otU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e2:0e:1f:23:06:fa:a7:84:be:3f:42:2d:f8:68:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
        Validity
            Not Before: Jun 20 23:01:19 2024 GMT
            Not After : Jun 21 23:01:19 2024 GMT
        Subject: CN=4acd2d5da1b8d1303e1620b1613244a94f3426dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:15:25:dd:31:79:fa:44:19:83:e5:8e:e9:
                    7f:41:d3:2f:8c:13:f2:f2:e7:0c:ad:6d:e8:e9:ac:
                    eb:ee:87:d8:4c:5e:4e:46:38:f1:53:01:ee:f0:5c:
                    ff:03:13:47:29:88:99:63:7c:0f:eb:1f:85:bd:1b:
                    ac:15:3d:87:2f:e8:91:56:97:69:15:a1:88:35:ef:
                    88:04:72:9e:1d:90:87:48:c1:34:98:04:69:ff:6b:
                    5f:69:35:85:8d:90:e7:87:d2:b8:28:02:70:e6:3b:
                    a9:15:d6:da:e8:7a:08:56:2f:9a:ac:25:b2:11:17:
                    fc:a5:74:5e:b5:89:29:43:2b:16:61:d3:9b:76:25:
                    c3:b3:f6:e2:2d:bb:5a:19:9a:00:5d:de:f1:dd:a0:
                    5e:36:2d:cd:78:8d:50:89:b7:18:c1:33:06:95:b5:
                    14:96:7a:f9:bd:b6:c7:59:92:f8:87:6e:11:e0:bb:
                    dd:72:f2:e8:ef:df:d4:9d:33:36:90:10:60:57:53:
                    80:68:30:be:70:38:ea:06:8c:8b:ac:42:9d:08:c3:
                    37:64:c7:c1:47:b1:85:89:5f:9b:28:97:4b:65:5a:
                    45:e8:04:a5:62:b2:50:f9:0e:97:53:a5:5d:b6:e1:
                    ab:03:33:6e:90:a1:ec:40:05:d7:41:a9:30:d9:ed:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:2D:5D:A1:B8:D1:30:3E:16:20:B1:61:32:44:A9:4F:34:26:DD
            X509v3 Authority Key Identifier:
                keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:03:ae:af:f8:af:e0:a7:cc:1c:c4:fc:cf:d5:71:8b:8c:fe:
         73:0a:02:c7:75:ed:1e:63:f4:a4:04:78:25:02:82:19:be:ef:
         53:61:cb:19:18:26:15:1a:db:38:4f:17:5d:2e:da:a7:98:43:
         bc:65:ff:a0:9c:34:cb:75:14:de:33:23:24:4e:11:29:57:26:
         94:16:28:7c:dc:4c:87:4e:84:4b:a6:dc:19:d1:55:3a:c1:02:
         04:52:84:38:a1:40:81:35:00:86:fb:47:d5:bd:f2:c5:00:22:
         4b:f7:f8:d5:e8:94:33:84:af:d1:f1:4d:4f:0f:77:71:8b:0d:
         a7:83:78:11:29:28:f8:fc:b6:5d:f5:7f:e5:eb:e7:4b:c6:c3:
         7d:2d:de:3d:c0:43:29:2b:62:80:80:3c:3e:7b:e2:9b:b2:9c:
         ea:6e:58:c5:5e:e4:bc:e9:f9:f1:a5:0f:a0:b6:4f:72:fb:81:
         f5:37:2e:2a:db:a4:e8:f9:b4:e6:68:19:b3:a7:85:a8:16:56:
         b2:25:b4:7c:98:bc:f0:e2:33:0b:b2:66:a7:51:ce:a2:24:86:
         c2:0c:b6:af:2a:0e:9d:29:16:12:88:37:b0:34:0b:11:3f:af:
         12:9f:d8:12:73:97:a4:e7:a8:4a:21:0e:b8:87:09:bf:50:38:
         dd:0d:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:17:54 2024 by rpki-client on console-ams.rpki-client.org