Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          TJvzBtNK2wQ6wKAUZfq8+9MLEuW1TpZnEDLzvyjLpVU=
Subject key identifier:   A7:96:C9:4E:FC:AC:B9:42:9B:1A:94:D8:A0:19:1D:01:58:57:62:60
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       01901EC6ACC23309BBB36C79410AD5635330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 02:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:55 +0000
Files and hashes:         1: ChORsy3QU_JsKVmoAfD_lSMbrOM.roa (hash: UT/Ni+i+MsE3JKXlPwY7j0pYRfh87tK2nqm9GX6dS4E=)
                          2: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: Kd6wsSBFLKaaG8rWzkTHMSNUhZi9XH7JTW5wsiexhhw=)
                          3: tg_L4lCNJ70dH65WdTdDLuQHGwo.roa (hash: gWppbhrUxYuIwVYcNpcTZI74HuBEAbjVhRJ4mV8ecfE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ac:c2:33:09:bb:b3:6c:79:41:0a:d5:63:53:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Jun 16 02:00:55 2024 GMT
            Not After : Jun 17 02:00:55 2024 GMT
        Subject: CN=a796c94efcacb9429b1a94d8a0191d0158576260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:79:01:05:b7:cf:ee:c1:46:ef:50:93:89:
                    51:e0:04:39:30:f9:b2:78:97:b9:af:05:fa:55:77:
                    52:98:ff:b1:e1:2d:25:ee:c0:62:e0:86:dc:77:fb:
                    f4:05:92:1b:64:f8:1a:3b:5d:75:21:01:e1:18:ba:
                    fc:d9:b3:51:da:8c:97:8b:ba:ad:49:8e:09:4b:90:
                    a9:3d:83:17:b1:78:2a:b3:8a:0e:a8:09:33:f6:28:
                    82:c0:10:5d:9f:dd:b5:88:4f:bc:87:8f:5a:ab:a3:
                    ac:d2:e1:b8:4e:40:78:20:bf:12:57:49:32:c6:40:
                    b9:c3:62:47:c8:ed:05:c9:a1:17:05:f3:79:63:72:
                    73:de:20:f8:e2:42:b8:ca:3d:01:6b:8a:c8:97:cf:
                    b6:32:c6:c1:ed:d4:1f:67:87:9a:ad:a8:c0:e9:0d:
                    fe:58:7d:58:96:59:0b:ec:0d:be:45:43:3d:f0:e7:
                    79:79:0b:15:09:2b:25:04:bd:a6:38:80:84:d8:d4:
                    2b:bc:81:c9:34:5f:f8:22:d1:26:49:e2:e7:6e:5e:
                    87:42:c4:07:0f:40:30:66:df:e5:dd:de:2d:a2:5a:
                    7a:41:58:ec:cf:77:b7:87:ed:8c:3a:11:18:09:fe:
                    2f:82:31:00:49:4b:c1:49:94:94:8d:0d:c3:87:4e:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:96:C9:4E:FC:AC:B9:42:9B:1A:94:D8:A0:19:1D:01:58:57:62:60
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:45:06:ca:96:82:47:20:b3:2f:d8:d7:5f:b1:10:ea:e9:4e:
         4c:aa:cf:9a:31:bf:3d:ed:51:31:80:1e:95:56:c3:7d:4b:28:
         93:ff:b7:6c:11:49:3c:10:00:56:87:f8:93:7a:c5:a9:54:31:
         d8:e7:c0:4c:3a:7a:27:6e:0c:b6:c7:91:40:4e:45:b0:05:1d:
         aa:0e:ea:65:72:d8:50:c9:a0:14:e7:58:6b:db:54:41:fa:2a:
         eb:ff:d9:64:98:fa:ad:47:cf:1a:c7:f2:c7:98:cf:bb:50:99:
         7b:8d:8c:16:b9:46:82:c8:c1:b2:c8:00:b7:f2:d5:aa:ff:e9:
         ef:c7:2a:2a:67:6d:3e:30:69:c0:8e:5e:38:e0:57:bb:a5:b2:
         10:22:cb:98:65:bd:c6:92:a1:d9:7c:8c:81:23:66:22:eb:50:
         8c:fd:34:9b:60:32:09:4b:a1:df:fc:ac:ed:b9:37:60:02:21:
         8d:60:38:5b:ce:b9:e4:07:c6:35:6e:8e:1e:ec:a1:f3:5d:43:
         da:1d:49:9d:0c:70:cb:d7:da:8b:67:20:a8:63:32:38:f2:ce:
         9b:4c:96:e6:3d:c4:1c:e9:59:b0:61:38:25:e0:cd:30:41:38:
         ec:27:a9:77:45:ac:2b:97:e1:11:69:8d:4c:d6:4a:b3:b2:7e:
         4a:e3:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:53:43 2024 by rpki-client on console-fra.rpki-client.org