Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File:                     LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier:          WgdJsM0SV1e5DtMc0QhSrMAe/DlmCZdjeYYp+yr5cYA=
Subject key identifier:   7F:58:95:6A:D0:FC:50:BF:D8:ED:D4:82:DF:3F:75:96:42:9F:11:3B
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer:       /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial:       0190490C666BD96FDACC9D11402D59B60D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number:          11DF
Signing time:             Mon 24 Jun 2024 07:01:07 +0000
Manifest this update:     Mon 24 Jun 2024 07:01:07 +0000
Manifest next update:     Tue 25 Jun 2024 07:01:07 +0000
Files and hashes:         1: Lf8B2Q_0n_9IpokutvRHKk1n3s4.roa (hash: sa9Y8yQENqrAxTPMxIr8uXmRO0j++CXNLNISviulsuk=)
                          2: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: C6XXTJGRYbZedzu6LzsZr99UYP0GgfCNq+n9ZE9N3hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:0c:66:6b:d9:6f:da:cc:9d:11:40:2d:59:b6:0d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
        Validity
            Not Before: Jun 24 07:01:07 2024 GMT
            Not After : Jun 25 07:01:07 2024 GMT
        Subject: CN=7f58956ad0fc50bfd8edd482df3f7596429f113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:68:9a:d1:c8:89:e5:66:cf:68:9d:4d:f7:
                    73:1b:8e:f9:a6:cb:4a:5a:64:9f:86:f5:ac:e1:4f:
                    92:08:bb:7a:c5:ed:c2:16:02:6e:48:c3:a8:09:22:
                    65:e2:72:af:e5:00:ae:4c:20:ef:62:45:5d:ad:05:
                    a3:c7:ab:ef:2e:a6:2d:35:5a:90:e4:da:c9:41:2b:
                    11:ed:cb:ae:c7:07:b5:af:57:0d:b3:8c:e9:f9:0e:
                    79:a3:96:52:c0:15:19:2f:c9:4b:a3:31:50:fe:c9:
                    f4:09:4d:fc:18:de:b8:8e:1a:71:9d:3e:e2:be:8c:
                    79:23:8f:75:8f:7c:d6:57:d1:e1:6b:fe:f6:59:2c:
                    92:d1:0d:c7:5e:fd:d5:75:44:26:72:cc:63:14:cb:
                    5f:57:c3:7d:0c:25:3b:b1:ff:f8:72:1a:98:af:ec:
                    ab:7d:1d:d6:59:97:fc:f3:25:c1:e0:0c:5f:45:8a:
                    ba:d5:e0:0f:9d:b9:dd:42:99:42:d6:87:82:e1:4f:
                    ce:4d:75:3a:fd:8f:b8:0f:65:4e:18:ec:b3:44:57:
                    e3:91:a4:3b:29:9a:f6:81:7c:f2:77:0c:24:83:9f:
                    c8:02:17:e4:3f:b1:cf:a4:8c:a0:91:e1:37:0a:8c:
                    40:95:ac:db:82:c0:b9:f8:43:78:c8:85:a6:48:b4:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:95:6A:D0:FC:50:BF:D8:ED:D4:82:DF:3F:75:96:42:9F:11:3B
            X509v3 Authority Key Identifier:
                keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:23:ce:04:4d:31:9a:54:ea:18:18:3e:4d:0d:b3:29:44:
         95:5e:19:ce:9a:4a:76:e6:d1:ac:89:93:7a:fc:d6:e1:6d:cc:
         00:46:28:8e:fa:c5:6c:46:76:ef:f3:a2:7c:10:39:cf:40:af:
         c4:06:81:61:6b:c5:1a:35:82:79:ec:9e:f1:09:ca:b8:5c:54:
         2a:95:18:ca:3a:7b:ee:ff:e3:f3:54:e3:70:38:19:4d:b0:da:
         32:2b:36:c3:e4:5d:87:0c:58:bb:ad:d5:05:e0:f6:f0:d2:22:
         e3:25:27:a1:70:5b:46:bc:b2:76:31:e2:a9:6b:a3:48:fd:c1:
         f2:ed:46:8a:3e:03:f6:28:e8:bb:6f:c1:02:15:b0:65:74:09:
         5f:58:73:c6:a3:28:f7:41:43:d0:4e:32:43:f6:7a:34:2d:0a:
         d8:57:27:ca:34:0e:5d:d5:0d:2c:01:dc:f4:2b:7b:4c:ce:be:
         2b:b9:d8:4c:97:37:9e:a6:90:09:b7:f9:18:76:04:9b:d9:48:
         9d:a3:05:c9:50:b3:0e:2e:8e:00:82:4d:92:df:93:b8:34:54:
         88:16:f9:02:e5:6c:00:f3:d6:8f:c6:16:5e:ff:c7:72:f8:78:
         10:65:29:ea:3f:22:0f:07:f7:81:81:f1:ab:2b:a1:01:2b:da:
         5e:50:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:18:58 2024 by rpki-client on console-ams.rpki-client.org