Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File:                     LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier:          fpk9Uycfnw15eN84aWmZTgeqKKZO6L1iOWzRnD3IgxA=
Subject key identifier:   2B:31:7A:57:F5:21:BA:AA:D2:C1:E9:2E:76:10:1C:CE:77:1B:86:B0
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer:       /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial:       01901DEAA25FC5A8E3036445888E8036AEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:34 +0000
Files and hashes:         1: ChC595SFRthJDeaQj53vKQ2wXFg.roa (hash: PdP5rkPENoILROd8RILmlWlsFahtNPshBSyMIMU+o+8=)
                          2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: 9uDWvZ08VfbJMhnI2j0hRfD9I9KcX/gbYT4s2ec0bTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:a2:5f:c5:a8:e3:03:64:45:88:8e:80:36:ae:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
        Validity
            Not Before: Jun 15 22:00:34 2024 GMT
            Not After : Jun 16 22:00:34 2024 GMT
        Subject: CN=2b317a57f521baaad2c1e92e76101cce771b86b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:85:ed:86:2e:a7:45:c1:58:4c:69:d9:77:
                    db:93:aa:e2:2e:79:9f:4a:2d:f2:dd:ad:6d:58:ec:
                    12:5f:d8:f3:4a:fa:46:d3:08:45:05:26:e3:b0:8c:
                    39:1a:92:5c:22:1a:a9:bb:d8:6e:08:4f:ec:fe:b4:
                    77:9a:79:9c:07:5f:15:b2:42:2c:6a:b0:41:27:f2:
                    63:ec:56:c4:ff:16:e3:f1:95:5d:82:ab:39:b9:40:
                    56:1e:25:43:e2:f0:d1:bd:a0:96:e0:25:24:38:0a:
                    e6:9b:9b:e7:61:3b:4e:fe:f6:99:3a:7f:ef:72:89:
                    b1:f0:1a:02:46:14:00:9e:f6:b4:47:58:70:36:a3:
                    05:1c:95:5f:b7:42:f8:35:bb:01:95:cf:7f:5b:42:
                    53:d7:51:eb:cd:5b:37:44:01:77:5a:a6:4b:ba:d3:
                    10:ca:1c:69:8c:b6:34:c5:ef:a0:2e:85:69:e7:be:
                    fc:64:1a:4e:ae:c6:ac:97:8f:e6:f9:3c:4a:85:1b:
                    15:89:3f:ac:78:d8:00:a7:8a:b1:91:69:8a:e0:e6:
                    26:77:ab:5c:03:ee:69:95:56:ba:ff:a5:da:76:93:
                    1e:9f:0a:1e:e0:fd:d6:f5:05:2f:2c:27:80:d0:e6:
                    68:8a:6b:16:63:3e:fa:98:7a:4e:1f:c7:d1:50:5a:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:31:7A:57:F5:21:BA:AA:D2:C1:E9:2E:76:10:1C:CE:77:1B:86:B0
            X509v3 Authority Key Identifier:
                keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:82:a8:39:6c:1f:3d:26:dc:1c:99:0c:e3:85:b4:c8:d7:
         cd:59:90:d0:03:7f:9d:3e:ed:02:93:65:d7:42:94:81:4c:b6:
         9f:c0:d3:97:21:88:75:c8:99:40:fd:47:40:c2:c0:8e:3e:2c:
         85:0b:c5:05:5e:d1:8e:66:27:fd:58:36:8f:c7:d3:a2:31:b0:
         bf:6f:f1:fe:88:15:a3:28:bb:56:f9:e3:2f:ce:7a:50:99:54:
         f5:11:d6:27:68:68:d4:1a:08:4b:be:92:54:da:22:81:69:ed:
         3a:3c:9b:6e:49:10:bf:1f:d0:dc:78:e5:ad:85:c8:9f:87:11:
         ba:a2:ca:a6:5a:bf:cf:64:89:1b:cd:cf:03:a4:66:4a:d8:89:
         d1:9e:b8:fd:ec:3e:00:35:4f:d6:49:2d:e9:48:60:97:e6:31:
         1b:ed:0b:36:10:ce:64:c7:58:28:45:34:41:62:4c:66:b1:f1:
         35:7e:05:72:bb:73:18:6e:20:4a:25:15:70:be:c7:19:94:c2:
         4e:35:b2:4b:2d:3d:f6:af:26:a8:72:59:9b:06:6c:39:c9:15:
         21:a1:31:00:31:54:e5:ae:4b:40:bc:b6:ca:10:06:ce:23:1e:
         ee:fd:f1:7f:a9:9e:64:d2:ce:c0:4e:93:c3:99:9b:0f:10:2f:
         97:9b:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:44 2024 by rpki-client on console-ams.rpki-client.org