Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File:                     0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier:          XvFgrLsT0i1GQGChZYP3NW/N5n5prNLm/y5LDk6DgIk=
Subject key identifier:   5A:97:68:D4:2F:0A:8A:BF:7D:D9:79:93:D1:39:35:80:BB:E1:F0:E1
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer:       /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial:       019048685FE70BCE23CCC88D702414089058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number:          11D8
Signing time:             Mon 24 Jun 2024 04:01:58 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:58 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:58 +0000
Files and hashes:         1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: nkNv4kNXYHTNGF3jEZ6ha3sHUUwg11Stjp1wzYhvqrA=)
                          2: myXe6rn3BMhUfGFYRMsdHcgSaZs.roa (hash: 1qfNuONcfI2+MIM8ksiAXedTo60VChNrjhVlOMUTnEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:5f:e7:0b:ce:23:cc:c8:8d:70:24:14:08:90:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
        Validity
            Not Before: Jun 24 04:01:58 2024 GMT
            Not After : Jun 25 04:01:58 2024 GMT
        Subject: CN=5a9768d42f0a8abf7dd97993d1393580bbe1f0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:cf:93:13:ef:32:fb:83:8f:de:d7:7a:52:
                    e2:aa:e2:51:dc:3a:4f:af:37:e5:74:86:33:2c:3d:
                    d3:ad:34:b7:4e:38:59:d6:ba:08:98:26:60:53:aa:
                    76:d6:33:a9:d0:b9:65:22:2f:ac:75:3f:36:b5:69:
                    59:4d:09:46:cf:6f:4c:8b:71:6b:ae:2c:e6:cf:7c:
                    84:3d:1b:d8:2e:cd:7a:ca:9e:e1:ca:95:e0:53:d2:
                    0b:30:31:7d:d4:8c:91:b1:ce:e2:8e:88:e8:3a:0a:
                    fb:78:32:8b:47:86:46:2c:f2:f9:46:89:b0:37:17:
                    2f:3c:5d:48:c5:6d:8e:76:f6:cb:82:ac:d9:7c:34:
                    df:d0:8f:87:60:40:ed:ab:52:f4:8a:79:83:b1:fb:
                    ab:ae:a4:4c:d6:f5:15:b7:bb:43:79:db:bd:95:1f:
                    ca:db:c0:83:7b:77:69:14:ff:49:e4:cd:ea:47:e5:
                    6c:af:9f:ae:24:88:00:a5:65:b0:21:a3:42:9f:cc:
                    1a:2d:18:f2:4f:d0:18:5a:08:e3:9d:20:28:ad:cb:
                    a4:50:ee:12:ee:bd:c7:4a:84:14:89:4d:55:c3:9e:
                    e5:de:48:a8:5d:16:91:90:af:69:ef:cb:89:67:9a:
                    f6:de:28:57:18:4d:e3:8b:85:ad:87:2f:56:71:88:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:68:D4:2F:0A:8A:BF:7D:D9:79:93:D1:39:35:80:BB:E1:F0:E1
            X509v3 Authority Key Identifier:
                keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:86:40:39:0b:94:d9:f3:95:da:8d:a8:40:44:f3:e9:24:62:
         ff:a0:2b:9b:6e:13:a3:72:5a:2f:2a:36:94:52:de:f2:29:07:
         e1:bb:78:bd:28:4b:b2:af:22:b0:9c:57:b5:4b:f7:62:3c:18:
         1f:83:de:80:3f:a9:f0:8c:59:c1:b9:4f:4b:78:52:d0:34:1f:
         56:75:a1:8b:aa:14:32:56:9c:84:93:2d:7f:dd:58:62:d3:2c:
         5b:c3:80:cd:b8:96:cc:52:c1:35:e6:02:af:77:33:c1:ff:69:
         63:0c:8d:57:06:a1:b6:25:e4:de:07:25:58:19:4a:df:cb:7f:
         14:b4:34:7d:15:22:12:51:0d:69:ac:d1:00:8b:75:13:8a:a9:
         62:64:6e:7b:9e:68:7d:70:2a:ab:a4:5a:db:a2:05:9b:ef:8d:
         62:2e:3e:21:ad:3e:51:2d:a1:b2:5b:e0:e6:4c:6e:82:bd:25:
         3c:5f:75:0d:59:da:cc:40:36:dd:64:5b:9f:f0:df:85:ac:c0:
         bf:9a:8c:34:ea:15:bd:f6:53:16:2f:95:b5:40:61:e4:ee:48:
         26:68:29:d9:1d:0c:31:45:39:d1:77:ef:8b:ac:81:35:c2:73:
         07:41:97:20:f6:5a:57:33:4b:31:1f:8a:74:d9:d4:da:56:d0:
         a7:69:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:53:24 2024 by rpki-client on console-fra.rpki-client.org