Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File:                     LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier:          DXeIcLyvloBWwkR47bjH2J0phUsVCyRBIv+19Q6mLXo=
Subject key identifier:   14:70:37:C8:DF:AE:FD:AA:DE:52:64:9E:B0:BC:2F:3F:79:5A:89:3A
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer:       /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial:       01901BC56ACA6F96D0A22F34A032374AFF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number:          05EF
Signing time:             Sat 15 Jun 2024 12:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 12:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 12:00:40 +0000
Files and hashes:         1: EAG1Ead1kCgvnMsktALcwBSrh7w.roa (hash: PZwaCMGkqVb0vPiW3gSGMH9wEM+hfYpX6U3XcjqD6Ow=)
                          2: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: qwr08RbklBFrEefBd3god+zi5r29UqZmfdWjNe/vk1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:c5:6a:ca:6f:96:d0:a2:2f:34:a0:32:37:4a:ff:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
        Validity
            Not Before: Jun 15 12:00:40 2024 GMT
            Not After : Jun 16 12:00:40 2024 GMT
        Subject: CN=147037c8dfaefdaade52649eb0bc2f3f795a893a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:64:24:1a:dd:09:67:bd:5b:f9:cd:b6:27:
                    8a:0e:e4:0c:b4:db:5b:e6:a6:56:1d:76:97:93:12:
                    ce:6c:8a:34:b3:ba:56:fb:bb:13:b4:d4:0c:cd:ec:
                    76:da:b2:e5:b3:38:61:a9:8c:68:17:e1:6f:c9:c0:
                    ac:8a:c8:ec:fa:78:d5:df:63:b0:af:f4:95:ec:a0:
                    7c:0d:1e:ba:75:05:68:b4:ea:00:65:54:d3:68:53:
                    73:be:97:08:1a:21:6a:f9:a3:02:9d:b8:6a:d1:79:
                    ef:76:21:d9:80:e0:40:1a:31:04:de:37:3a:dd:52:
                    5a:15:b0:66:b5:5f:33:2d:c2:bf:77:7f:a8:1d:27:
                    6f:5d:f9:f7:ed:b0:89:65:02:ce:2e:c5:04:ee:59:
                    a9:77:70:bb:57:93:98:0e:43:4b:dd:44:5b:7e:b3:
                    04:d6:22:0e:8b:35:4d:58:2b:b3:16:3e:c9:17:97:
                    9b:d3:00:81:7f:08:51:6d:fc:ef:59:c0:a8:eb:49:
                    af:ad:21:e7:df:e2:b7:a6:0e:0b:87:db:4d:6a:7e:
                    45:48:94:50:81:23:e3:d5:53:4f:23:9e:8c:e2:4d:
                    19:80:40:52:90:dd:0f:16:5a:8d:7b:c2:d9:a4:38:
                    cb:05:af:5d:dd:d2:d6:db:f8:79:e8:1e:5a:a2:ac:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:37:C8:DF:AE:FD:AA:DE:52:64:9E:B0:BC:2F:3F:79:5A:89:3A
            X509v3 Authority Key Identifier:
                keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:4c:42:f0:42:9a:a6:e6:81:35:1f:ed:9c:fe:56:2e:24:
         29:52:69:ca:dc:42:5f:75:20:da:d5:2a:e2:e6:d1:8b:66:1e:
         ea:02:b9:b6:59:46:2f:0a:14:a2:77:b7:f8:67:d9:11:d2:2d:
         9a:09:69:43:d9:a9:38:96:a5:99:c8:0e:0c:03:d5:3c:e7:2c:
         09:50:11:b8:c7:34:38:ea:2c:58:08:b3:d5:58:86:07:b3:9c:
         36:c2:72:3a:34:c0:b5:36:c2:b5:42:d6:b2:d2:4f:ea:24:6b:
         60:b3:9a:0b:6d:2b:6f:2e:41:df:89:01:61:84:cb:a5:c9:d6:
         03:29:b3:ef:e1:4b:2b:5f:79:c2:fa:ea:15:fa:f2:72:fa:0d:
         ee:66:7c:e5:33:db:0b:1d:53:37:50:3a:db:a6:aa:e8:e1:99:
         c7:65:5e:ec:d8:ef:c6:68:4c:fd:83:fa:8e:15:be:8d:2e:4e:
         98:b8:b2:47:f6:8a:eb:f3:65:ff:2c:ca:1e:6b:da:9f:d8:67:
         65:3b:94:aa:68:ea:0f:d4:15:67:6d:45:e8:ca:a1:42:34:76:
         af:c2:cb:fa:dc:ea:b9:ce:a7:ce:37:6a:17:08:e8:7c:fb:e1:
         a0:82:20:bd:ff:62:7f:3a:52:e4:76:f7:02:ff:75:ba:93:57:
         84:2d:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:44:38 2024 by rpki-client on console-fra.rpki-client.org