Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File:                     lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier:          Ni7ul1u7eovnaUI74cs0MneYRAikU2Ks5xlynDev8kE=
Subject key identifier:   04:B4:88:4E:7F:B4:F5:B0:AB:86:B7:97:9F:DF:56:08:E6:37:80:2F
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer:       /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial:       01901E902B1E0EB4B36ED5068CDE4C5FF735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number:          0A48
Signing time:             Sun 16 Jun 2024 01:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:22 +0000
Files and hashes:         1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: nQptrN2/m4tCMBtUc0jTHT+HkUaKsC3DLtBSzp0Y05w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:2b:1e:0e:b4:b3:6e:d5:06:8c:de:4c:5f:f7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
        Validity
            Not Before: Jun 16 01:01:22 2024 GMT
            Not After : Jun 17 01:01:22 2024 GMT
        Subject: CN=04b4884e7fb4f5b0ab86b7979fdf5608e637802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:93:62:c9:6e:63:38:98:ea:41:80:85:49:
                    ee:9a:80:a8:1c:a5:3a:d0:8b:64:fc:57:f7:cf:c4:
                    c5:29:ca:4b:96:66:5e:91:98:e1:a0:32:53:e3:46:
                    2d:e2:7e:e4:34:4a:14:65:ed:5f:8e:c7:9b:5e:0e:
                    26:eb:31:2a:ac:dd:87:85:cf:5d:d8:ea:61:9b:dc:
                    9f:36:86:71:be:5a:8b:69:f8:3b:9e:c7:8f:6f:bd:
                    05:fb:40:b3:3a:18:02:b6:e5:1d:9d:39:71:15:b0:
                    39:92:47:5f:85:ec:f8:58:86:fc:2d:81:e3:3f:f3:
                    48:ee:e9:b6:af:36:dc:f4:f3:e5:96:a1:a5:62:ce:
                    88:53:ab:9a:be:49:2c:e8:98:64:dc:6d:e0:2f:64:
                    df:e8:de:27:93:91:cd:70:23:5b:25:ca:12:6c:11:
                    94:07:9c:93:41:97:4d:76:fe:02:44:05:fb:67:ab:
                    3c:3f:13:96:71:62:ec:21:c1:6f:f6:25:f4:0a:68:
                    31:c5:39:33:0f:53:ef:fd:1f:f2:60:cb:c1:d1:73:
                    78:1d:92:e6:35:15:00:5d:9f:d5:6f:69:dc:42:21:
                    77:41:3c:d1:fb:c1:61:bf:39:02:2f:60:f7:b0:03:
                    df:c7:9d:d1:51:c1:65:b2:c2:84:af:8f:0f:fb:fb:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:88:4E:7F:B4:F5:B0:AB:86:B7:97:9F:DF:56:08:E6:37:80:2F
            X509v3 Authority Key Identifier:
                keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bd:92:f8:ad:f7:f3:a6:f9:b5:9e:f9:a1:ea:f7:ab:7d:51:
         d3:42:9c:e4:b7:e9:5b:23:86:bd:bb:48:92:ad:23:6f:87:31:
         25:e2:45:96:03:c3:24:ac:7a:8d:9c:38:85:b4:1f:b8:50:29:
         4d:c6:63:29:97:21:e6:54:c8:22:3a:84:bd:2d:95:8e:6a:ce:
         d8:fe:83:0c:a2:aa:8b:67:1e:3c:d7:60:76:07:68:e3:8a:02:
         d5:de:ac:35:f1:83:18:fd:cb:f4:57:af:4b:a3:bb:d4:d2:91:
         c1:69:26:5a:6f:7e:fc:4c:b7:da:4e:1a:7b:1b:b1:20:f8:c4:
         e1:dd:0d:13:2d:d6:ba:82:70:f1:46:5b:50:2f:ed:11:ec:80:
         2d:0d:66:13:1f:27:db:dc:e0:2e:7e:bf:12:6d:d3:50:5e:e9:
         58:18:e7:47:4c:e9:02:db:93:6b:9e:82:be:be:83:a2:7e:55:
         f6:2c:8f:71:de:00:45:1d:90:23:c9:25:8a:8c:9e:85:56:1e:
         3b:4c:8a:56:42:cd:f6:e8:de:10:bd:7c:1b:92:5f:85:6b:42:
         71:95:15:96:2a:56:1d:6b:1c:fe:8c:30:93:97:18:97:ad:f2:
         61:3e:3d:04:16:6c:93:67:56:b5:36:f7:52:1d:c4:e5:35:f8:
         d3:9d:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:43 2024 by rpki-client on console-ams.rpki-client.org