Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier:          0Zq3ieLcxQiJq9pA/wsC59SxbXTqO30spTsYN/wUfF0=
Subject key identifier:   16:C5:43:67:16:B2:47:01:F9:A9:AC:D7:CD:55:D6:BC:F5:BA:90:82
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer:       /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial:       01901B57871A37EA0C62948CC2A1FA99A3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 10:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:39 +0000
Files and hashes:         1: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: lSt3BtXDZwEAXC4Jj+WQcDiftq10Y7rRxLEDcRL3VI8=)
                          2: ns31VvLXnGbSMzj8cwb1ltS_7WY.roa (hash: 8NB1vqZtOS6Ku54elhZhqoA2qzkjev6hsTxdfx263rg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:87:1a:37:ea:0c:62:94:8c:c2:a1:fa:99:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Validity
            Not Before: Jun 15 10:00:39 2024 GMT
            Not After : Jun 16 10:00:39 2024 GMT
        Subject: CN=16c5436716b24701f9a9acd7cd55d6bcf5ba9082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:2c:ca:3c:73:03:07:7e:dd:5e:e4:e1:cb:
                    e5:c8:cd:db:dc:cc:09:a2:a8:ac:44:9c:4b:02:ab:
                    21:ca:ae:dd:4f:58:7b:60:ae:fe:31:24:02:52:29:
                    b5:91:6f:08:e5:45:fd:9a:47:35:74:19:82:7c:ca:
                    3a:24:d5:52:12:1c:85:0c:a5:90:ca:d2:d3:9c:22:
                    28:f3:5e:b1:06:b2:28:a6:d0:73:3c:d5:b0:d5:2f:
                    2e:4c:ed:2c:2e:67:c0:98:11:c9:f0:07:39:95:42:
                    2b:73:c8:7e:aa:07:98:f7:b1:bf:38:db:d3:e5:21:
                    6e:2f:3e:0e:2e:74:7f:33:52:86:58:a8:80:82:4d:
                    b7:dc:e8:4f:1b:6f:4e:eb:44:ea:8f:6c:7a:57:3a:
                    1b:41:57:dc:00:ee:e3:5f:d7:07:fb:4c:10:83:56:
                    35:e0:4f:9e:d8:47:23:7f:cb:bb:49:f6:03:03:72:
                    cd:40:3f:12:77:f9:a5:a1:fc:55:fb:4b:77:ae:00:
                    37:69:87:1a:bc:8c:9d:ff:17:09:25:35:c0:e8:91:
                    9d:1e:5e:bf:ef:b7:f3:26:b5:d3:40:34:a0:e6:50:
                    16:19:5a:39:1c:dd:ce:1c:37:1d:e8:8e:79:1b:d1:
                    c8:9b:77:91:b6:a1:cb:b6:99:62:0e:58:51:c2:82:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:43:67:16:B2:47:01:F9:A9:AC:D7:CD:55:D6:BC:F5:BA:90:82
            X509v3 Authority Key Identifier:
                keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:db:3a:c7:4d:21:f8:44:e6:4e:b1:98:84:b3:80:4a:50:
         15:ae:8d:3f:20:cc:b0:2c:c8:22:0e:bf:f6:5c:87:c5:df:86:
         39:e9:0c:44:12:8d:f2:e9:16:b2:7e:1c:b3:a1:de:4c:fd:ab:
         50:26:4f:24:2e:eb:09:51:8b:23:07:bd:11:4d:74:10:85:6a:
         fe:13:04:f5:cd:ee:26:f4:8e:48:50:f3:60:7d:68:ab:ab:91:
         1b:d4:5e:4d:25:41:19:1c:cb:2b:76:44:a6:c0:78:c3:32:61:
         0d:f0:07:03:be:32:28:7c:68:25:c2:13:62:76:09:28:ea:b5:
         6a:02:2c:c4:09:73:f6:df:dc:97:28:c6:69:15:55:40:85:65:
         47:5d:cf:21:61:ad:ad:0f:2d:e6:7d:9d:2a:58:20:d5:bd:22:
         85:7e:ba:d1:f1:53:bf:fe:f2:c6:42:b0:d4:64:1a:d2:09:aa:
         a2:e7:98:f1:dd:42:89:38:9b:f8:ae:e5:8a:60:f8:0c:ca:06:
         ae:69:3f:ae:a4:f9:8b:18:cb:87:3e:0a:0a:c7:d2:27:8d:84:
         eb:1f:dc:7c:2f:e5:45:87:40:93:2b:48:71:cd:61:20:e8:a5:
         de:de:23:55:61:05:40:47:b0:fd:74:cc:01:4c:cc:7b:34:f7:
         68:14:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:04:36 2024 by rpki-client on console-ams.rpki-client.org