Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File:                     l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier:          dVD2bLR8bRyaA0v7yg0ZMh+0RjAm3VtkhNmuX27o9YM=
Subject key identifier:   EB:97:31:85:EA:BB:4C:FC:22:C2:EB:62:F3:26:ED:5B:94:10:CB:9E
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer:       /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial:       0190452FE0699C16387725AD79E1DFF4D59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number:          0FEA
Signing time:             Sun 23 Jun 2024 13:01:23 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:23 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:23 +0000
Files and hashes:         1: LWdhLEQwVNZXo7prefR4ljzbiyg.roa (hash: Qvhb/axMKjsUqF5JmI3xVARtGwY/2dtkkMf115x9CP8=)
                          2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: C2mP6bB3YmT5BF7cO9/8cXs5ostwfEpZElprYplfe2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:e0:69:9c:16:38:77:25:ad:79:e1:df:f4:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
        Validity
            Not Before: Jun 23 13:01:23 2024 GMT
            Not After : Jun 24 13:01:23 2024 GMT
        Subject: CN=eb973185eabb4cfc22c2eb62f326ed5b9410cb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:0c:e5:bf:cc:21:00:db:4b:75:78:1a:a2:
                    c7:ff:5b:b3:26:95:9b:3d:8c:d6:33:13:3a:f3:3d:
                    d8:0a:ad:78:d5:e8:f8:b8:98:e3:03:8e:c3:fc:c5:
                    3f:1b:6d:4e:e6:22:7e:5a:81:36:d3:48:95:4d:b7:
                    48:c6:3b:5f:aa:f4:11:a9:d1:03:a2:0c:38:4c:d5:
                    46:3e:57:3a:ed:a1:16:19:ad:ee:12:36:a0:96:28:
                    62:b5:51:fc:dd:ff:ff:b5:3a:0f:c8:93:a4:1a:4c:
                    a2:42:d6:33:29:f2:66:81:48:f1:b9:28:84:cf:ae:
                    81:31:9d:81:41:5e:e1:77:03:65:5f:61:ec:6c:8d:
                    9b:49:d9:65:f1:46:4b:00:8c:39:54:88:c2:6d:44:
                    d5:7f:0a:98:a7:21:1c:f7:2c:56:1b:0c:c7:16:11:
                    4d:3e:5d:44:e9:95:50:8e:2d:81:f6:48:42:22:f5:
                    84:46:fa:c7:35:84:33:69:42:01:a6:e7:79:e7:2b:
                    99:1e:0f:ad:b0:19:69:20:7d:cd:57:bb:7a:da:7b:
                    fa:76:d2:a3:e5:7b:40:34:c8:d8:30:b3:68:cd:94:
                    47:e9:02:d9:93:4c:ab:5b:b5:f8:f3:22:1f:13:b4:
                    16:70:4d:bf:14:8a:a5:28:d8:5f:09:46:cc:63:ff:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:31:85:EA:BB:4C:FC:22:C2:EB:62:F3:26:ED:5B:94:10:CB:9E
            X509v3 Authority Key Identifier:
                keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:97:50:01:f4:c4:a0:50:d3:30:fe:9e:b4:ab:4d:51:a0:
         ff:0a:ee:48:b9:19:6a:7c:73:76:ee:4f:b8:a0:e7:51:66:d3:
         88:9a:68:db:6c:1c:cb:4b:60:7b:5e:4c:0a:0e:08:2b:cc:19:
         ae:29:d3:f8:e6:b0:32:52:74:20:45:08:73:a4:c4:3c:c2:0d:
         a2:4c:88:bd:13:17:de:3c:f7:25:51:f9:03:8d:e2:34:33:58:
         e6:57:ca:ee:da:7f:b6:21:cb:d8:4e:eb:7e:d2:59:2e:13:5f:
         94:95:3f:68:d1:c0:37:a9:c8:4f:c0:04:ed:18:2c:7e:74:fd:
         a9:d3:b5:12:3a:34:4c:6f:9a:34:91:a4:23:73:05:48:50:3d:
         bc:7d:15:44:2e:15:db:b0:e3:b9:26:6e:dd:a0:63:57:a6:84:
         44:2e:9e:e1:01:03:91:55:bb:82:f3:6c:5f:f5:87:c4:f1:85:
         ef:76:ff:d4:ca:24:f1:29:04:1a:25:74:65:a4:dc:67:58:01:
         c8:1f:f1:d0:d5:60:d0:64:03:ee:f6:60:b1:46:34:18:89:74:
         03:53:94:31:47:0a:a9:26:ec:b9:d5:42:b3:9a:cc:dd:0a:b9:
         9a:64:ca:98:1f:a5:21:ad:b9:f0:95:e5:c5:d5:70:bb:74:89:
         70:9a:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:16:52 2024 by rpki-client on console-fra.rpki-client.org