Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File:                     L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier:          YLwPD6q+PEd0u/RUgAbDUnrj6rdJx8+eh6f1efoRnUM=
Subject key identifier:   98:D8:31:2A:DF:37:DE:BB:E8:9B:DA:BE:BD:EC:BF:4E:DF:AC:50:9C
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer:       /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial:       01901D464AA74FE073352EE376A1B263404A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:04 +0000
Files and hashes:         1: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: ibURGIoU9UjYdGweMTu6Uirf3E8O3D6CHmikdAoIKUY=)
                          2: ns31VvLXnGbSMzj8cwb1ltS_7WY.roa (hash: 8NB1vqZtOS6Ku54elhZhqoA2qzkjev6hsTxdfx263rg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:4a:a7:4f:e0:73:35:2e:e3:76:a1:b2:63:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
        Validity
            Not Before: Jun 15 19:01:04 2024 GMT
            Not After : Jun 16 19:01:04 2024 GMT
        Subject: CN=98d8312adf37debbe89bdabebdecbf4edfac509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:45:40:c2:84:b6:96:56:f4:44:19:52:52:
                    e8:09:9e:83:58:ac:6f:7e:fb:9c:56:60:bf:ee:3b:
                    2b:05:00:f9:8a:b2:77:23:49:3c:d1:cd:d7:76:67:
                    7a:6b:b7:60:cd:e1:a8:24:90:74:9d:29:e7:60:d0:
                    bd:ed:0e:a7:7d:5a:aa:72:90:52:e1:26:3b:fa:2e:
                    be:45:52:e3:a1:fb:0b:16:40:61:89:86:f9:80:f9:
                    10:af:9c:32:5c:73:0d:a9:fe:3f:a1:d3:11:73:9c:
                    68:8f:33:dd:fc:21:1c:a6:12:78:7d:79:92:77:34:
                    07:ff:d6:91:99:24:f8:78:7f:f6:75:21:0c:46:f9:
                    b5:f5:a6:f2:7d:a9:07:9b:1c:72:7d:f1:cf:76:da:
                    11:3f:a1:25:4d:47:07:b7:cb:72:0b:a5:1c:1b:de:
                    3e:44:bf:c9:f4:08:32:9b:c3:ee:82:e9:06:c4:d2:
                    ec:8b:ee:84:79:2f:31:80:28:ae:de:c2:1a:d8:90:
                    4a:8d:e0:94:1b:7d:2b:3f:0a:f1:20:3c:97:92:6e:
                    70:2d:03:c7:87:17:0e:32:88:26:ed:00:20:9a:de:
                    85:26:1b:50:b4:fa:8f:37:7b:1f:d4:1f:5d:c9:97:
                    14:35:bd:a7:9c:f7:8f:6c:cd:80:e9:8b:2a:f8:8d:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D8:31:2A:DF:37:DE:BB:E8:9B:DA:BE:BD:EC:BF:4E:DF:AC:50:9C
            X509v3 Authority Key Identifier:
                keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6d:db:78:c9:07:14:d7:f6:bf:54:db:03:8a:5a:a0:dc:de:
         9e:73:b9:32:4c:38:b9:40:c0:7a:1b:dc:19:55:03:f0:03:bf:
         fd:3f:4b:9d:96:a3:ea:9d:da:5d:33:c4:3d:af:00:3c:be:06:
         96:2a:8c:d8:1e:28:58:49:01:74:0b:3c:1d:ef:68:f6:06:8b:
         37:ce:8d:36:ef:ae:11:d6:60:90:67:fa:2d:c9:05:ac:1e:ab:
         99:53:d8:a8:a8:18:d2:11:f8:9e:26:4e:60:a0:c2:e7:76:0c:
         95:b1:a8:f4:70:e4:5b:d3:d4:bc:80:18:07:49:d1:f0:bc:97:
         81:cf:ed:dd:ad:4d:39:72:ce:6d:93:1d:a2:5a:1f:b4:72:28:
         da:a7:bd:c6:0c:2f:cb:f2:c1:23:34:ea:61:bb:13:c6:e5:63:
         7f:37:b9:23:53:04:83:a1:2c:c3:a6:a7:ac:0b:70:12:7d:fc:
         bb:47:13:91:f0:6d:4d:16:9a:b3:e5:48:60:60:00:21:5b:19:
         7b:f6:11:b9:b4:db:77:5d:f1:ed:5b:59:f5:2a:ae:c1:38:c3:
         5a:aa:ad:52:56:56:23:f2:50:84:23:de:1e:0f:9e:6d:7e:db:
         33:df:0c:1a:41:58:29:35:f8:fe:32:bc:b0:c4:e4:18:71:fe:
         73:aa:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:04 2024 by rpki-client on console-ams.rpki-client.org