Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File:                     L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier:          qPvWliVxbf+wMuQ02YzT4NV+NfKzcDlL9djoV1jeZJk=
Subject key identifier:   6E:30:83:36:E3:22:DE:70:12:4B:05:D1:F1:47:42:97:A8:29:91:74
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer:       /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial:       01901F34F8F92DF14DAFF5FF95C473A1C3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number:          0AE1
Signing time:             Sun 16 Jun 2024 04:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:23 +0000
Files and hashes:         1: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: ahyR2YWtzXCEdvq3CCX+BplqP+WEYAVhgd+lMfn3Qnw=)
                          2: uUHVVskcLeY2soAbJcfA0AmA0F0.roa (hash: a0B56jAqUd/Ed8TodNEAwqu++3ihRq3Oz4CufvZ15LU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f8:f9:2d:f1:4d:af:f5:ff:95:c4:73:a1:c3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
        Validity
            Not Before: Jun 16 04:01:23 2024 GMT
            Not After : Jun 17 04:01:23 2024 GMT
        Subject: CN=6e308336e322de70124b05d1f1474297a8299174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:02:60:d1:e4:97:ac:ae:b9:07:e9:6e:47:
                    82:91:28:aa:0a:c8:ae:da:d3:8e:d2:72:ae:45:83:
                    25:6e:71:24:cf:09:37:5b:f8:c4:10:1d:97:8a:8b:
                    a8:17:71:ad:9b:56:d2:d1:b5:17:30:43:d2:78:e3:
                    14:3f:76:b0:38:70:fb:af:49:e8:07:b2:04:bf:33:
                    29:33:43:a2:0f:30:46:7b:90:91:6a:9a:b0:2c:45:
                    87:a1:36:db:f0:ce:ed:f1:cd:60:cd:e1:38:dc:db:
                    38:01:a3:ff:80:14:1d:58:b2:42:2c:fb:5c:cb:d8:
                    12:17:7b:59:b5:14:a0:2b:88:05:91:5a:75:68:29:
                    54:0d:ab:6c:47:1e:65:a3:fc:59:12:7b:14:c8:1d:
                    bb:0f:1a:67:4c:0a:6c:20:23:04:c8:a6:fb:6f:26:
                    63:bf:61:c9:08:27:df:e9:1e:91:7d:0f:22:87:ae:
                    9c:c4:1b:ad:54:12:6b:1d:fe:33:eb:01:f2:6f:71:
                    3a:63:51:8b:86:9e:1a:9f:8d:f3:d2:84:d6:94:8b:
                    65:6f:66:10:0a:63:7d:40:32:6c:31:7c:04:6c:9e:
                    a4:9c:94:28:48:a9:7e:e5:cb:d4:89:85:94:6e:c2:
                    9e:a7:fc:40:98:df:99:e7:63:a7:ec:64:02:ae:c2:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:30:83:36:E3:22:DE:70:12:4B:05:D1:F1:47:42:97:A8:29:91:74
            X509v3 Authority Key Identifier:
                keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:c8:9c:0b:9e:32:76:37:c3:8c:6b:b1:74:1e:20:05:ec:
         3f:d5:21:30:27:19:63:e9:2d:20:8b:93:90:e1:70:65:e3:d9:
         e5:88:a7:b7:d4:9b:9d:3c:a3:17:9f:b1:f1:6a:6f:30:8d:b1:
         01:0a:65:c2:f5:0b:2d:85:98:f9:29:a5:75:b6:e6:89:7a:f3:
         ec:78:8b:da:e3:9b:84:42:09:ee:de:ac:31:ba:84:ca:db:c5:
         5b:3a:05:81:df:26:8d:d9:02:6f:b2:5f:10:86:95:72:b1:cb:
         a0:27:4b:2f:42:37:87:62:e3:46:36:55:16:8c:50:3f:12:ee:
         cd:18:92:ff:79:bc:00:ed:51:36:76:c7:58:28:b3:60:21:52:
         bb:a7:f2:c2:49:dd:b0:37:0f:7f:27:57:36:c8:28:c3:ef:28:
         7a:8b:97:a6:16:be:00:e3:1c:7f:e8:68:10:e7:34:c0:25:01:
         ed:05:dd:aa:d0:de:88:76:94:c8:fc:b3:c8:8f:81:51:0d:2f:
         8e:66:64:52:07:94:e9:93:df:45:32:4b:c3:d6:2c:dc:1d:17:
         68:d0:fa:7e:6d:4d:f8:ed:d8:bc:be:56:69:b4:81:a0:3b:92:
         43:78:07:2e:bc:c9:18:fd:c6:bc:27:a1:b3:67:45:f6:a9:b7:
         bb:b9:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:32 2024 by rpki-client on console-fra.rpki-client.org