Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          8HgObQ0koJmhxGshbqkzSY+VMYbKtDMO9gF8DEgt84s=
Subject key identifier:   A3:C5:31:E6:22:4C:47:92:DE:7A:F0:E1:68:D6:6C:4A:03:CC:63:C1
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       01901BC569403815988620F396FDD00059E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          043A
Signing time:             Sat 15 Jun 2024 12:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 12:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 12:00:40 +0000
Files and hashes:         1: JshunVg1rqFV0If_3b0Q_aVYAog.roa (hash: ib8jJ4yI2KBFuRnPQ064XelUDtCrBhSXQ9jAziIITH0=)
                          2: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: dU79/Vy1awHNc4QnYScJ3abLDNrovxmnLP9YcGFUiiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:c5:69:40:38:15:98:86:20:f3:96:fd:d0:00:59:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Jun 15 12:00:40 2024 GMT
            Not After : Jun 16 12:00:40 2024 GMT
        Subject: CN=a3c531e6224c4792de7af0e168d66c4a03cc63c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:c0:b9:2e:dc:b6:bd:b9:fb:46:48:44:1d:
                    24:7f:40:c1:9e:36:73:99:8f:6e:f7:59:09:36:0b:
                    ae:22:75:d4:20:ab:99:69:5e:81:46:fa:7b:75:57:
                    29:17:a8:d9:c3:56:35:95:55:c2:82:81:eb:ee:b8:
                    d9:b0:a1:52:55:e6:34:e1:79:76:11:74:02:c6:14:
                    3a:00:2e:11:6b:75:be:d9:7e:a8:c2:51:9f:92:81:
                    28:56:25:cc:0d:c5:df:e4:d5:07:86:27:07:09:83:
                    6a:89:f5:71:39:5b:e2:38:a6:08:89:f4:8c:6b:1a:
                    62:6b:b9:d1:1b:5b:e1:74:6b:f1:fe:a0:3f:cb:3d:
                    a2:d0:50:d3:0e:e6:6f:05:ee:45:b1:15:a9:96:a6:
                    07:07:96:79:89:0b:a0:33:10:b1:13:9d:e6:82:69:
                    4d:56:7f:56:b0:93:ec:5d:82:f8:5e:35:d5:b6:54:
                    bd:16:45:30:f4:d7:99:82:92:5a:50:2e:20:ec:8b:
                    f3:91:2f:f9:19:aa:58:fe:85:40:a5:01:3c:14:9b:
                    d6:9d:f1:f7:64:c3:7f:c1:51:d3:2c:f6:72:45:f0:
                    03:8a:38:9d:e5:34:c9:94:95:d7:e9:fa:17:e3:7e:
                    c5:cf:00:7f:bb:d5:a4:4c:a6:31:a0:66:13:71:bc:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:31:E6:22:4C:47:92:DE:7A:F0:E1:68:D6:6C:4A:03:CC:63:C1
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fc:68:42:f8:59:10:ac:dc:e4:8e:81:f0:93:5d:7e:75:cd:
         fa:8e:7e:9e:00:66:fb:5d:f0:06:5f:89:3a:cf:e7:a0:71:06:
         f2:70:1c:d0:59:e6:cf:32:75:e4:44:f8:ba:b5:e9:62:16:f1:
         2d:d8:fd:d9:18:b3:05:d7:c2:34:3d:c5:2e:aa:9d:a2:9c:b4:
         bc:8c:fc:98:61:a0:4c:81:05:50:2b:1c:b5:a5:0e:bd:6f:03:
         8d:ac:5f:9c:0e:47:d9:26:3e:5d:cf:3e:07:71:90:12:86:3f:
         87:09:7b:ab:42:d9:12:06:36:54:8e:b2:fb:4a:e9:61:7e:dd:
         b6:6f:54:82:80:45:9f:3d:03:d6:2f:76:ca:5e:e3:e4:28:85:
         bc:94:dc:bd:f2:0f:c5:67:b9:ff:ec:07:61:ea:f8:3f:fe:0b:
         7b:5f:b1:d2:d7:05:7e:03:16:06:99:1e:85:8b:7f:e5:ef:08:
         ef:61:fc:13:df:a8:0b:56:9d:89:36:63:3b:8a:89:d4:98:60:
         60:18:cc:d2:73:7e:ab:bc:12:2b:ef:b0:94:fd:71:aa:a7:22:
         9d:aa:1a:17:8b:11:ca:9a:b7:c6:d2:b2:3a:61:80:8b:c9:dd:
         ef:34:fd:b5:60:61:af:ed:48:b0:30:f4:05:0c:7b:ce:22:ce:
         42:00:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:57:24 2024 by rpki-client on console-fra.rpki-client.org