Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File:                     lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier:          Y0xi5LYQkDrFtDi3uub7pLWtNCtyRndARDYsTzVhwks=
Subject key identifier:   1A:74:27:62:71:D2:5C:D3:E3:BD:44:E5:E2:B7:F9:C6:5A:32:DE:D0
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer:       /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial:       01901DEBF05C119CBC3F1C99E2637D01720A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number:          0B8D
Signing time:             Sat 15 Jun 2024 22:01:59 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:59 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:59 +0000
Files and hashes:         1: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: vvglixml4uH3Xvl9iyZWpavEd8Tq1q8QZG9fffz5h4w=)
                          2: ugB_uFTGXBjwRsJzFReQ-CtcyJU.roa (hash: esV1Um+5bHkgXF4BAnY9u/OOj48iqIO/YxBKBSF2X8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f0:5c:11:9c:bc:3f:1c:99:e2:63:7d:01:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
        Validity
            Not Before: Jun 15 22:01:59 2024 GMT
            Not After : Jun 16 22:01:59 2024 GMT
        Subject: CN=1a74276271d25cd3e3bd44e5e2b7f9c65a32ded0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:c1:a3:cd:79:80:38:61:e5:34:48:2d:03:
                    f4:a5:a3:dc:6f:34:60:1f:68:a9:70:bb:03:ae:0b:
                    cf:7a:33:d2:85:c4:64:17:e7:25:19:3e:4d:e3:62:
                    ca:b6:d1:b0:de:15:df:fc:7f:7c:dd:cc:57:56:d8:
                    69:53:8f:55:21:8e:60:57:98:9a:e2:f6:93:41:ea:
                    ff:71:a5:f5:8d:07:d7:17:42:f9:ac:69:ec:69:bf:
                    bf:b2:24:c9:46:84:40:f9:74:ee:b8:ef:3d:fd:2c:
                    46:8d:05:a4:19:32:35:ec:ee:a1:f5:cc:46:a3:b2:
                    05:db:3a:0b:2d:09:44:b9:c4:04:fc:75:64:41:ab:
                    82:45:4c:50:fd:bf:2b:e7:73:ff:f9:2e:f2:49:87:
                    f5:8e:ac:20:0e:f1:a7:ca:0b:fe:53:de:85:f6:c6:
                    7d:d7:db:13:43:8a:95:0b:19:05:fe:cb:98:37:9d:
                    95:2d:a1:81:03:e8:5e:53:e2:06:b3:f6:94:7a:cc:
                    14:d2:f2:a9:73:0e:69:cb:8b:d0:1e:56:32:0c:3a:
                    2e:c6:95:59:4f:c8:62:05:8d:78:21:95:9c:5d:8b:
                    6e:d7:8a:6d:c0:8e:ff:d8:5e:b9:20:ac:17:c6:b9:
                    8e:ff:51:2f:79:f1:6c:62:06:65:8b:7f:5e:a6:46:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:27:62:71:D2:5C:D3:E3:BD:44:E5:E2:B7:F9:C6:5A:32:DE:D0
            X509v3 Authority Key Identifier:
                keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:55:81:fd:b0:38:58:5e:d7:e6:ed:c7:4a:0f:4d:8b:a6:
         53:85:2a:90:66:91:31:7f:29:a6:b7:6c:c5:71:ec:3f:ca:a5:
         49:ce:72:a1:f0:a7:fb:c2:9c:85:97:37:52:49:e0:86:3d:4c:
         96:90:6c:ae:d4:bc:9b:f5:22:d4:02:f1:32:71:13:ad:e9:0a:
         a8:af:0a:ed:ec:9b:5f:71:e8:a1:1c:ef:5c:42:0a:6d:64:26:
         15:be:26:9a:25:8b:8a:5a:a1:3b:5b:3d:ee:75:62:6a:9f:ca:
         46:79:0a:6a:81:30:76:f7:66:8e:7d:fe:e1:49:55:f2:54:f7:
         55:2c:fc:e3:44:c4:50:8b:28:1d:49:83:a3:c2:9f:57:d8:78:
         d0:aa:3d:bf:b1:a1:4b:a6:ce:60:02:89:7e:9a:f4:88:6d:5f:
         f7:0b:bc:ea:2d:81:ce:b6:03:b1:e9:0a:5f:2a:df:49:d3:25:
         53:24:79:6b:96:79:52:a8:17:f0:9d:c1:12:a2:74:62:6f:40:
         55:45:c9:9c:71:43:88:4b:28:54:99:f1:98:0d:03:5f:09:c1:
         9b:11:78:9e:01:92:9a:58:1f:9b:53:d7:b3:67:d8:ff:06:54:
         92:50:10:77:57:7c:ce:c7:4c:d8:48:aa:fa:15:24:3a:c9:7a:
         b2:41:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:48 2024 by rpki-client on console-ams.rpki-client.org