Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          bJygQU4PkKnsUEonsz/dnoqYTal8P7aPXi4Py/NK+VA=
Subject key identifier:   95:91:43:6D:BF:0B:56:DC:18:1A:69:11:B5:19:F9:5F:F9:0D:93:05
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       01903AE27B8600F66552555EF7DF2475421B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          0EA2
Signing time:             Fri 21 Jun 2024 13:00:39 +0000
Manifest this update:     Fri 21 Jun 2024 13:00:39 +0000
Manifest next update:     Sat 22 Jun 2024 13:00:39 +0000
Files and hashes:         1: i2inhFcag4zVHlsRAd7LQhTMNEI.roa (hash: LFQccJg4kBn7GQvVUddbmEUFSLbgcXqlub/faw+Y9bg=)
                          2: i6AITnvrM12TYJ1kRcCI0T4uJYc.roa (hash: o3F7kAY4HXw6OdoLe76/pRtjDAsj2qzAFBw2POdV65w=)
                          3: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: 4L9y6NnMtsEqDu+d0+gLUb/FyrjZbDKqRzfwsjYdM4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:7b:86:00:f6:65:52:55:5e:f7:df:24:75:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Jun 21 13:00:39 2024 GMT
            Not After : Jun 22 13:00:39 2024 GMT
        Subject: CN=9591436dbf0b56dc181a6911b519f95ff90d9305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:f1:f4:d3:08:2b:2d:af:c1:ca:83:16:a3:
                    ec:7b:72:00:a5:ce:ce:2f:5a:2d:39:6c:a5:80:72:
                    96:8d:a1:66:2f:eb:b8:49:58:0d:7f:2b:af:ca:38:
                    f2:ce:6c:a7:54:6c:ca:81:2f:16:23:d6:1e:d8:d6:
                    64:b7:5a:34:3e:fa:0c:d8:37:ab:ba:4e:9b:25:65:
                    03:2a:30:86:a7:09:db:c4:2f:10:99:75:64:fa:e5:
                    5d:e9:ba:e1:95:a0:d1:5f:0e:b1:3c:cf:9d:36:e4:
                    2d:8a:d7:96:d0:f8:49:c4:e4:ba:d5:ed:cd:0c:5f:
                    93:7c:76:3a:5e:62:46:ad:21:4b:61:92:d3:d6:a9:
                    32:96:9f:29:4b:c8:5d:9f:bb:46:d9:e8:8d:0a:63:
                    b7:8e:f1:f0:87:2b:2f:90:57:38:2b:9a:29:db:e3:
                    ae:08:1c:82:6d:01:e8:98:ee:cc:ed:b1:d8:41:6b:
                    e3:1b:4a:02:49:05:82:cd:88:23:8d:af:05:ea:ed:
                    80:63:80:23:7f:cd:0b:17:91:22:cf:86:0a:e8:e5:
                    dc:82:19:6c:33:a0:9c:b3:61:07:cc:c5:52:0e:c8:
                    7b:9c:81:0d:94:4c:f4:19:e0:30:86:9d:00:57:e6:
                    59:46:1d:e7:87:53:43:b9:d2:cc:24:87:3f:c4:d3:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:43:6D:BF:0B:56:DC:18:1A:69:11:B5:19:F9:5F:F9:0D:93:05
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:d6:bb:f5:f4:6b:23:23:60:a8:55:b7:0e:9b:d5:f1:31:
         52:d3:9d:f5:f5:e6:61:2c:5c:8e:f0:e3:e1:35:ec:52:04:77:
         5f:f5:5d:11:f1:27:8d:da:ad:4a:ad:ad:d2:72:4d:b0:16:8a:
         e6:89:6a:29:97:c2:c3:c0:9d:24:41:3c:e0:14:c4:d2:77:71:
         b8:c0:fb:83:3c:6c:3f:05:81:50:41:79:c8:c3:c3:5e:23:0f:
         57:f7:0e:ce:2f:30:d8:07:b7:72:f7:9b:27:5c:cb:37:74:e4:
         ab:96:fb:8e:d4:e2:23:70:6f:ba:62:be:74:5d:b5:e6:d1:84:
         9a:03:a7:05:34:8b:03:c2:5f:24:04:5e:19:8e:ca:ea:b4:9d:
         29:b0:f0:d8:51:23:77:ab:e0:db:48:a4:3c:fd:8b:f1:ee:60:
         23:e2:48:71:b3:b9:83:a5:7a:4a:87:b1:0f:b0:c4:7b:b6:3c:
         e2:f0:11:dd:d9:06:a4:22:69:20:e5:c8:92:92:f9:ae:7c:38:
         a6:23:24:61:61:95:53:31:50:32:2b:45:87:13:d9:21:5a:5d:
         2f:f9:db:4b:82:6e:72:b6:e9:62:a3:e3:c7:fd:86:72:e7:5f:
         79:65:54:4d:e8:44:43:1b:c4:79:23:12:bc:23:ef:10:4b:0f:
         d5:e7:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:46:59 2024 by rpki-client on console-fra.rpki-client.org