Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File:                     L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier:          gFn0SPvDHq1o0/pReTEWYV1xYp+qg+Ukc9BpIM+gcLc=
Subject key identifier:   9A:27:53:A1:EC:42:2E:31:DA:93:F6:57:5C:14:C2:48:37:05:E0:B0
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer:       /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial:       01906373363A1022B5289F473679A2E02014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number:          30
Signing time:             Sat 29 Jun 2024 10:03:33 +0000
Manifest this update:     Sat 29 Jun 2024 10:03:33 +0000
Manifest next update:     Sun 30 Jun 2024 10:03:33 +0000
Files and hashes:         1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: frlOFDgHXhGHevxxA1KmHVHN9euOGkcUwxqRgzB5+rY=)
                          2: _BNdL1nkWsa1ge0tfXbjeDkuF-M.roa (hash: c7iF/alcqxsVdwXvuSk3TMqbNVEzBa06GjA45r5qL3g=)
                          3: rYcjTUP6rykQSUiUOvduk_DjAIo.roa (hash: ANV7q6qJKzFC/LymYoQWchNl/Tip0jQlaGt+8hbXUcA=)
                          4: wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa (hash: J+CNTv35bAtzQQX7fD7iTBUVuqCPtQKllVQ5fl4bDaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 10:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:73:36:3a:10:22:b5:28:9f:47:36:79:a2:e0:20:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
        Validity
            Not Before: Jun 29 10:03:33 2024 GMT
            Not After : Jun 30 10:03:33 2024 GMT
        Subject: CN=9a2753a1ec422e31da93f6575c14c2483705e0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:81:c0:ac:d5:93:8e:c7:1f:a6:ec:54:85:
                    a9:94:d5:93:50:dd:a5:8a:ae:88:5b:55:b8:95:a9:
                    cf:66:64:21:93:f1:46:8b:0a:ad:04:f5:4b:9d:b0:
                    84:c0:0a:fb:ef:66:e5:57:6c:03:63:72:7f:ef:ee:
                    b3:00:57:7f:2b:8c:c3:e9:a4:f6:3b:1b:7d:bf:86:
                    5b:50:3a:92:8f:9d:ed:25:18:73:dc:26:ac:eb:fe:
                    bc:20:3f:08:23:f2:c1:b7:56:56:46:f0:6a:d5:0d:
                    ce:d1:69:17:3d:e6:8c:46:0e:87:08:af:d1:66:a5:
                    a8:2e:c7:c8:ef:a1:ad:2a:de:04:c3:00:da:1c:e0:
                    96:63:a7:81:0c:d2:f2:1f:28:89:b7:87:67:9c:34:
                    ea:c3:dc:9f:93:bd:25:ae:19:dc:3e:eb:d2:bd:1b:
                    36:68:e5:ff:e2:8c:b0:d2:5a:1c:2e:e2:dd:fd:4d:
                    ce:d9:16:76:8c:f9:f0:29:0f:c2:7d:db:d6:99:38:
                    98:6c:54:9a:cc:63:46:13:e2:f1:6f:ac:e5:d4:32:
                    3b:36:fd:b4:64:4f:52:8a:77:d2:64:2c:7b:97:a4:
                    b3:cf:9e:9f:be:18:cc:3c:c0:01:1a:f9:7c:6e:eb:
                    67:0d:03:1b:95:12:2f:e8:19:be:a5:50:f5:32:9f:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:53:A1:EC:42:2E:31:DA:93:F6:57:5C:14:C2:48:37:05:E0:B0
            X509v3 Authority Key Identifier:
                keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:ee:b4:b5:f9:ed:84:7a:88:3e:78:39:08:f9:c1:c4:0a:
         67:fd:5f:bb:af:47:74:af:2a:12:9b:f6:03:24:09:c2:d4:44:
         96:2c:80:d3:bc:d6:d4:5c:d5:f2:13:21:3e:b4:21:e1:ad:7f:
         c1:6a:64:00:e0:cb:0e:3a:4c:11:fd:1e:e6:8f:71:93:a5:34:
         f9:66:95:66:c5:83:93:a5:f8:d9:85:46:4d:e0:35:03:b4:dc:
         4c:bd:23:a0:8d:0a:b7:ee:06:be:92:54:f0:4b:77:20:1a:ec:
         6f:9d:ec:13:09:1e:de:33:34:da:ea:85:e2:a5:30:24:4d:c0:
         21:96:6d:b2:e8:82:ab:ef:7f:bc:bd:1d:78:c8:cb:2f:bf:7b:
         21:aa:6a:2c:4c:ba:73:bc:42:bc:14:e3:65:1a:be:30:f2:cd:
         f3:d2:2c:57:b9:39:8e:b8:04:1b:42:4d:05:4a:52:f8:f7:4c:
         09:6c:ea:ba:f2:91:1c:1c:17:e0:6f:7c:90:a3:37:31:92:64:
         9f:97:fd:94:1c:01:83:c8:7d:6f:ac:ff:a9:36:dc:45:b5:29:
         3b:2e:b2:6b:46:07:be:3f:25:1f:b6:8b:0e:76:8b:46:f5:43:
         94:4a:f8:88:cd:56:2c:dd:da:33:5d:f3:e0:31:bb:62:0a:43:
         b1:b2:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:58:33 2024 by rpki-client on console-fra.rpki-client.org