Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File:                     L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier:          fYnrHkkBn495l+Fa57gH9ibAJd7PxlB9k41ISmE7Go0=
Subject key identifier:   BA:75:00:35:D9:F4:13:BC:43:19:B5:5C:CB:DE:74:06:14:E8:74:80
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer:       /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial:       01901EFD6D9595D46F7CF3004629794D785E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number:          05C8
Signing time:             Sun 16 Jun 2024 03:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:43 +0000
Files and hashes:         1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: 8q2MjkPkVTT+sq51Jkg71A8IDiTiRyTE/evH45E8Lvo=)
                          2: ZQ-gbvdXKyU25Jiod4zEpRpBNnk.roa (hash: rbDCoOvM3bx3WWQkmKpG939AG+ybXSm3Cp2+3DHIz/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:6d:95:95:d4:6f:7c:f3:00:46:29:79:4d:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
        Validity
            Not Before: Jun 16 03:00:43 2024 GMT
            Not After : Jun 17 03:00:43 2024 GMT
        Subject: CN=ba750035d9f413bc4319b55ccbde740614e87480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:73:26:ec:ad:29:d1:8e:59:eb:93:e6:a1:
                    1f:59:b8:bb:7c:df:4b:ff:70:cd:91:de:74:a0:9b:
                    a6:b7:88:73:46:d9:7b:aa:ac:ba:48:1f:49:2a:00:
                    fe:0b:b1:4b:2f:11:f8:1a:ee:e2:36:78:2e:e2:2e:
                    01:80:0d:4d:a7:ea:8a:5b:40:e7:f1:bd:f8:0d:e8:
                    ec:36:fd:c4:c8:00:0f:60:47:84:e5:87:06:22:5e:
                    6e:f5:7f:41:5a:23:b9:5e:3f:7e:fe:8a:f4:27:f2:
                    3f:cf:4d:c0:f6:9d:04:3b:d3:5b:22:83:2c:21:85:
                    d2:a4:54:e5:34:ed:de:4a:ee:04:a7:bc:69:14:de:
                    89:90:08:40:4f:b8:ce:a3:d8:03:83:db:41:b6:16:
                    6c:7a:1c:1b:cd:7a:a7:4a:1e:4b:1e:9a:e1:31:a7:
                    a1:f5:d4:16:ae:ed:35:46:1f:99:67:79:ce:8a:44:
                    40:d4:73:94:06:b2:2d:d1:d2:13:36:20:00:71:1f:
                    5b:49:3b:4d:ea:ad:d9:f2:43:75:59:49:1a:cd:6d:
                    82:1d:4b:e8:dc:13:d9:27:58:81:82:cf:06:dc:af:
                    eb:55:0a:35:48:2a:ac:69:1d:15:f5:6a:28:63:af:
                    8b:f2:9b:e6:16:9e:43:d2:c4:b6:47:47:04:f1:4f:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:00:35:D9:F4:13:BC:43:19:B5:5C:CB:DE:74:06:14:E8:74:80
            X509v3 Authority Key Identifier:
                keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:fd:cb:b0:6d:7d:e7:2b:36:d5:81:8a:57:6c:af:68:fb:
         9a:18:3e:56:b6:d7:5b:97:3d:96:5c:d8:e9:18:4f:d2:45:3b:
         de:aa:31:bb:ef:75:d9:12:f1:d1:9e:9c:0c:19:45:5a:3c:9b:
         fe:66:72:b1:2f:38:37:22:8e:df:93:d6:5b:9c:b3:2b:46:b5:
         93:c9:43:62:28:86:aa:5e:28:60:f7:e8:49:59:3d:fe:04:a5:
         b5:fd:94:87:2f:a0:98:79:ee:ff:aa:61:6b:7d:c2:9b:61:89:
         d0:b0:4f:d9:a3:fc:b0:10:fe:77:17:ea:fe:cf:e4:3e:36:d2:
         29:f0:2f:f5:37:4b:5b:a5:16:17:45:75:31:a5:26:15:bf:60:
         45:00:70:7a:12:57:e4:a2:ad:66:46:68:42:80:3f:23:70:8c:
         bc:75:33:88:54:26:0b:4c:80:b4:54:27:db:bc:f1:50:66:fb:
         a6:af:22:b3:10:41:66:b0:61:6a:24:c6:6e:e3:af:7c:ec:7b:
         58:a3:19:68:ff:a9:0d:f1:5e:19:16:ef:92:bb:9b:a5:17:4d:
         6b:a3:3b:83:1d:db:09:ef:b6:7f:f4:a9:8e:3f:c0:a0:b6:d6:
         6b:38:15:14:f7:fe:81:8a:2b:b8:41:cd:68:89:a7:63:f7:ba:
         91:a2:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:33:50 2024 by rpki-client on console-ams.rpki-client.org