Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File:                     LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier:          L047xhDKBq4Oj7M/UZ3tn6j/ZrNBQS0IXB39ipC2jWU=
Subject key identifier:   A8:88:08:35:03:DD:F0:72:35:FF:54:B3:FD:78:34:51:04:33:66:F7
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer:       /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial:       01901DEC3C92D4D67740439370C51A82672B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number:          1094
Signing time:             Sat 15 Jun 2024 22:02:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:19 +0000
Files and hashes:         1: 6w9lU3aJa1ckQuutgHF9TWJTmDg.roa (hash: JuAwwU9CzpMK56mGnGFCpzhq8BB0uVWikvXGZ101fGc=)
                          2: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: TjSXOmSmii5oW3sYSTtK/T6u5VYkwJc3G78xefolyDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:3c:92:d4:d6:77:40:43:93:70:c5:1a:82:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
        Validity
            Not Before: Jun 15 22:02:19 2024 GMT
            Not After : Jun 16 22:02:19 2024 GMT
        Subject: CN=a888083503ddf07235ff54b3fd783451043366f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:15:0f:c6:ba:71:01:61:9d:44:72:e2:43:
                    db:1d:b4:0d:d0:24:96:a9:81:4a:ba:a3:1c:50:4a:
                    20:6c:a3:fc:b4:f9:d8:d7:57:d1:ed:68:aa:f6:67:
                    b0:6e:35:8a:89:4c:bb:42:53:02:7e:be:41:1d:42:
                    42:ce:65:7d:d9:d0:2e:b4:cf:be:dd:5f:16:ba:73:
                    70:e0:bf:bd:1d:33:52:45:93:45:ce:6c:42:52:b4:
                    26:8d:3f:30:8d:b7:b0:67:41:a2:5d:41:3d:8c:28:
                    63:aa:d2:00:81:c0:3e:e4:b9:c1:4e:f0:66:cb:b6:
                    19:cc:7f:74:ab:dd:dc:17:fb:d6:2f:09:49:8e:0a:
                    3c:25:22:90:78:c7:57:a7:f0:6c:ad:cc:cf:70:ea:
                    76:0c:83:98:b1:1c:c7:96:28:22:b0:94:2f:9b:a0:
                    53:01:5e:49:a1:f8:cf:c6:a0:f4:df:3b:be:8d:e3:
                    81:46:ef:7e:86:e2:2a:a7:e0:89:d5:8b:b1:16:99:
                    e7:ce:0f:8a:5d:5e:81:23:16:c0:f7:53:29:6f:af:
                    b1:e3:d9:20:e7:50:0d:94:0d:74:c4:7f:28:1a:70:
                    a4:35:25:6d:52:a4:0c:5c:0b:ce:5e:6a:f2:f7:08:
                    93:1c:4d:6e:40:9e:24:c8:c4:5e:88:8a:a6:82:ac:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:08:35:03:DD:F0:72:35:FF:54:B3:FD:78:34:51:04:33:66:F7
            X509v3 Authority Key Identifier:
                keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:9b:01:36:bd:3a:63:a4:f2:91:ee:e2:10:b0:ca:fb:e1:
         b7:ad:ef:3b:fc:bb:05:43:dd:59:82:c4:1e:65:b3:04:9b:fc:
         f2:fc:ff:b3:2e:e4:87:70:52:ee:54:89:e1:01:42:80:65:6b:
         68:75:c9:e3:81:0f:52:21:27:11:9a:08:be:5d:c4:d5:07:3a:
         50:79:5f:8b:71:8f:18:e4:34:32:67:c7:1b:33:90:16:08:7c:
         74:3c:6a:1c:59:9b:9d:9c:da:39:f8:24:4d:87:e2:36:4a:4d:
         12:fc:dc:3c:3e:1e:85:b7:95:49:c1:e2:e7:2c:9e:a5:00:c5:
         29:9b:e2:04:53:fb:5e:d2:f3:93:d0:ee:fc:04:8f:5c:36:9b:
         65:88:58:c9:53:65:d7:e4:c5:76:61:7a:f7:f1:f5:53:c9:71:
         5b:7c:3c:b5:2b:79:a9:5c:a9:76:59:c9:bf:3d:ac:51:b8:3e:
         6a:4e:23:68:a8:4c:d4:e2:8a:df:46:d4:fe:80:e2:88:7e:89:
         0d:a5:31:e6:b6:d2:da:59:3b:07:37:5d:92:a5:f6:67:5d:28:
         a1:82:0b:25:cc:14:ee:94:52:b4:cd:9f:85:09:8c:79:35:44:
         aa:e4:a4:14:58:0f:e1:e5:86:34:39:06:08:3d:8b:84:53:a8:
         32:36:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:14 2024 by rpki-client on console-fra.rpki-client.org