Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File:                     L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier:          8L0enSyjRfPk9McRfdfy4OuvJjEmR6RPhGZlJhcZS7s=
Subject key identifier:   C6:8C:25:90:55:4C:73:C9:8E:B2:C2:5A:50:76:B6:A4:1D:AC:53:28
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer:       /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial:       01901F34C0F6192B0CE56AC626B8E51479EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 04:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:09 +0000
Files and hashes:         1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: DEZ+JcyHSu2CRUvX4vU+wlRwBiKSVORRr2EhW09L3SA=)
                          2: oM7NgPxB6Z4EU6UvUuGMqhpflQQ.roa (hash: 6EIrhUrFfG7syRzrvs52yDHcsB6kuoeby7Sl19+meZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:c0:f6:19:2b:0c:e5:6a:c6:26:b8:e5:14:79:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
        Validity
            Not Before: Jun 16 04:01:09 2024 GMT
            Not After : Jun 17 04:01:09 2024 GMT
        Subject: CN=c68c2590554c73c98eb2c25a5076b6a41dac5328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:9d:41:28:18:c7:a5:f4:dc:61:7a:7b:7b:
                    24:bd:fa:41:28:d8:19:51:62:fe:ac:b2:4e:9e:9c:
                    63:76:11:b7:de:31:f0:3d:95:b5:6b:69:02:94:70:
                    0f:d2:0f:da:b9:72:a3:b4:48:38:63:2e:cf:b8:9a:
                    06:bc:18:dc:a7:6e:2f:bd:a3:08:f9:ad:2e:8c:fe:
                    54:d8:ba:93:ee:fe:90:77:f6:a0:14:d7:29:4c:99:
                    e0:c1:4b:0b:b6:0d:bc:e3:c6:5f:e0:23:0c:06:29:
                    0c:26:9e:68:4f:f3:0f:76:ad:ec:55:b6:fb:b0:e3:
                    cc:5a:f7:40:e9:78:53:c5:94:02:e7:48:c3:c2:e7:
                    5e:ea:16:6e:9f:23:19:95:47:bf:39:51:2b:f2:04:
                    6a:63:9e:26:d8:3d:9e:39:0a:a8:6f:87:de:22:ae:
                    d6:35:6b:a0:91:e5:77:c3:6d:b2:58:0d:24:e6:27:
                    d1:dd:da:55:50:d8:9e:f3:5f:0b:18:38:a9:a8:eb:
                    30:42:ee:df:b3:5a:66:2a:fc:a5:fb:57:bd:b5:9e:
                    e3:e1:00:3e:9e:17:c0:45:55:17:c0:e5:77:11:9c:
                    85:fe:df:a3:a2:bc:f7:87:9d:ab:2f:86:03:7e:2b:
                    8d:16:84:7b:88:77:e0:3b:c2:1c:30:a1:4e:82:1f:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:25:90:55:4C:73:C9:8E:B2:C2:5A:50:76:B6:A4:1D:AC:53:28
            X509v3 Authority Key Identifier:
                keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:12:92:5c:d2:b0:95:d2:35:a8:51:32:b7:44:b8:f0:9a:
         d9:89:2c:f0:d8:f5:8a:f2:62:b4:ac:7f:a7:40:80:42:4a:4d:
         86:9a:a4:83:9f:ac:31:c2:33:81:95:33:16:2e:45:d3:60:bb:
         2a:ed:9b:55:5b:a0:ba:3e:5d:78:66:e2:88:39:d2:12:9d:21:
         ab:09:c6:6f:17:34:d1:95:38:ae:8b:5f:84:29:4e:f6:22:7d:
         f3:d8:1f:51:02:c2:d4:dd:5e:c7:b0:ec:8d:27:a6:ec:e8:9b:
         bb:bf:19:d2:cd:93:38:1b:db:19:f9:89:93:98:5d:51:7c:e7:
         cf:c4:b1:de:d3:49:e1:67:f3:5b:bb:95:7b:df:44:7b:ab:1f:
         24:45:9e:2f:02:99:cf:f4:54:80:06:0f:59:4e:af:bc:9b:75:
         f8:ba:0d:0c:30:a5:55:ec:f2:d1:cd:2a:a1:c1:d3:a4:8c:bf:
         0c:0e:c1:09:f9:5d:83:ec:fc:34:e5:53:bc:cd:f1:e5:d2:4a:
         ef:0d:c8:ba:55:2d:4d:0a:bb:90:4d:0a:da:4b:65:41:06:d0:
         f7:90:0c:32:07:f1:88:4f:ad:cd:bc:12:11:7f:0b:7e:72:5c:
         96:78:04:26:c1:5b:54:dc:92:c8:7a:b1:7d:d0:e7:2d:af:9b:
         c6:7f:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:24 2024 by rpki-client on console-fra.rpki-client.org