Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File:                     5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier:          EgvuyFJ3F6uHGlwMy0ph2HYE9LncTrtpP6P6+/mhCec=
Subject key identifier:   DC:FA:4A:14:7C:31:2F:97:43:92:A9:FA:AD:CB:32:DF:D9:E9:8E:B8
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer:       /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial:       019038F506C3C3320F3AFB83B4C586B5BE41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number:          11D3
Signing time:             Fri 21 Jun 2024 04:01:40 +0000
Manifest this update:     Fri 21 Jun 2024 04:01:40 +0000
Manifest next update:     Sat 22 Jun 2024 04:01:40 +0000
Files and hashes:         1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: 93DaN3L/jilEnzReruuXeu24B+KZbDu1aAouQn+B1tg=)
                          2: _S9Na2K4sRMloa0r66BqZuvAiic.roa (hash: Fhl2nm0Goj2xhV3NO2ZXJVpHfxh3oKjVVIt3OrP/GL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f5:06:c3:c3:32:0f:3a:fb:83:b4:c5:86:b5:be:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
        Validity
            Not Before: Jun 21 04:01:40 2024 GMT
            Not After : Jun 22 04:01:40 2024 GMT
        Subject: CN=dcfa4a147c312f974392a9faadcb32dfd9e98eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:76:77:bf:98:40:7a:05:6d:d7:5f:68:27:
                    ba:04:fe:4d:e6:19:f3:64:d6:4b:e5:2d:8e:15:d2:
                    8a:7a:2c:b9:f5:61:20:1b:dd:af:a2:ba:b8:b4:fe:
                    03:5a:41:f4:df:94:49:30:42:f8:98:66:7d:84:b4:
                    60:29:26:32:e4:fb:eb:ac:94:6c:c7:52:ca:6e:96:
                    fd:35:40:91:44:ad:86:45:0f:01:a6:94:57:23:12:
                    8c:a5:ed:95:c0:bf:a1:b7:f9:9c:d3:4c:1d:96:27:
                    7b:bc:e5:c8:59:6f:b1:1c:1e:b7:e2:e4:da:9c:b4:
                    34:74:8d:cc:96:ca:19:3b:1b:cf:4f:01:c2:b9:cf:
                    b9:d2:e2:80:47:97:a9:fb:06:db:bc:ca:52:3d:fe:
                    95:d9:36:3d:19:67:45:c9:ad:43:ee:0a:c0:0d:ab:
                    ff:c5:af:4b:d1:a5:c4:ca:4f:25:bf:41:b0:61:7d:
                    cc:62:d7:ab:09:fe:5e:01:01:e9:d0:65:73:42:02:
                    b1:e7:c2:73:66:a8:6d:ca:2c:bf:1d:59:a4:b9:4e:
                    b3:6f:f9:ba:21:6c:8c:38:d6:e9:3d:d7:ed:b5:07:
                    56:5f:94:28:9f:d8:ee:a2:c7:f5:e2:81:73:1e:4d:
                    56:aa:ab:86:18:90:55:ea:b7:8d:04:02:03:c9:91:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FA:4A:14:7C:31:2F:97:43:92:A9:FA:AD:CB:32:DF:D9:E9:8E:B8
            X509v3 Authority Key Identifier:
                keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:93:6d:cf:18:43:19:01:72:c4:3d:61:34:36:24:db:33:53:
         43:23:ae:d1:43:cc:ae:a7:cd:e9:fb:14:27:9e:22:15:90:21:
         7b:42:5e:2c:9a:48:45:90:99:b9:2f:88:09:bd:8e:df:bf:6d:
         01:04:30:53:5a:7d:a5:76:8e:6b:7e:ae:34:16:88:4c:ca:12:
         12:66:c9:49:76:f9:35:1f:61:c3:25:4a:ab:d8:9f:5f:8c:34:
         0d:7a:91:f6:f9:0f:c6:f4:c1:7f:ed:25:7b:c6:a9:69:14:c5:
         84:52:12:af:55:b2:25:c9:4b:2b:e0:a3:55:12:f7:3b:9e:de:
         41:e4:fb:6a:34:a4:01:fd:27:c3:16:f6:b9:ea:5d:0c:78:26:
         ba:df:d0:7e:10:01:fe:6e:2b:4b:41:f3:9f:77:fe:9a:29:31:
         9e:c0:17:4a:b1:fc:75:97:3e:cf:0e:bd:1a:e9:63:95:e4:70:
         c3:59:f4:9e:f4:2b:79:05:62:f7:c6:dc:db:93:0f:7b:81:c4:
         1c:ec:94:b0:56:00:bc:68:c3:e8:0d:f0:f6:92:6d:d2:a4:67:
         2c:6f:63:30:5f:55:9c:34:c7:d5:d7:4a:b9:34:7f:de:2c:0e:
         48:60:c4:dc:8d:d6:ba:b9:4c:b6:5d:61:82:95:6c:38:3e:c3:
         3e:61:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:27:40 2024 by rpki-client on console-fra.rpki-client.org