Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          Cfu8hUwrxI8WpHMA4dELii+mJ/BwXD1kS0Nzu7419QE=
Subject key identifier:   15:DB:C6:8C:F5:8E:AB:94:F7:7E:89:5E:B1:CA:9C:93:C8:62:FD:7B
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       01901EFDA60CEFFE104B2155998B0A235220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0A9E
Signing time:             Sun 16 Jun 2024 03:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:57 +0000
Files and hashes:         1: 6X-OxNlXuo3jcHegobZ1Q3lfe-s.roa (hash: RAwlQ5FqxhMqiKiLr11juRycFwcaVPyqB79O2YEw+aU=)
                          2: M-cEnsq_dPOVTyKO2rjSLLnUrAM.roa (hash: O0PwP+h76q9SqvyEgamcKzVaLDoL4fH1sx2IeF7CyIc=)
                          3: RoQN95RG5fj13aXQGiHNHfQpwHk.roa (hash: AD+Lz26XL/WcbC9G/pIGd5u8k9wuwWeodMj5htn4P3s=)
                          4: XeI4dOT2KokvM2zjr88UtJL0p1Y.roa (hash: VcYz6idShelVnOpgtHQzVXoldv6sw8B8dJ3zQOWUPyM=)
                          5: gvqxPPwx4AOOnIDp-PMQMS3YxWE.roa (hash: B83XaZDlCehGsOqdmZqhTRFrWW+db/nAFhgCwjuaWa8=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: wSKu7lPhMeSxMeh9Bwui1JC/dUAmUTpqiMiEnqqt4yI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:a6:0c:ef:fe:10:4b:21:55:99:8b:0a:23:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jun 16 03:00:57 2024 GMT
            Not After : Jun 17 03:00:57 2024 GMT
        Subject: CN=15dbc68cf58eab94f77e895eb1ca9c93c862fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:d2:06:be:ec:87:02:9d:1d:c7:1a:c1:3b:
                    14:21:09:0e:e5:aa:98:77:a9:a2:e5:88:8a:73:85:
                    fd:a3:ff:97:54:5f:16:10:3d:01:6a:64:1f:7f:ac:
                    e7:d9:fa:4a:44:21:15:6d:da:0c:69:9a:32:51:ef:
                    a2:a7:12:66:69:60:16:f0:81:07:de:24:a0:32:4a:
                    97:93:3e:cd:4f:0c:c5:ba:12:fb:ce:15:dc:0a:ac:
                    6b:68:50:7a:ff:45:2e:7a:0f:e2:e4:83:57:6c:c2:
                    fb:77:3a:79:7c:53:48:5a:5c:4e:7e:2a:40:e9:df:
                    36:cd:95:44:f6:48:2b:44:5e:18:77:91:3c:90:4b:
                    2a:d3:6c:90:8b:e8:8c:81:19:10:8c:65:52:21:d7:
                    27:b9:6a:c1:7b:5a:06:18:f2:ca:cd:b7:e5:bb:be:
                    ec:8a:a9:fd:4b:0a:04:ec:67:f5:2a:6e:ca:de:b2:
                    78:bd:19:a3:02:2c:4f:fd:29:26:4a:24:cf:7f:43:
                    5b:51:9b:12:2b:03:26:f5:80:33:d7:96:99:fc:82:
                    22:c9:ac:cd:f9:b5:e5:c9:32:46:b6:83:01:cd:a4:
                    d0:4d:b0:da:91:63:a9:4f:25:79:e9:4f:bc:9b:65:
                    29:2c:83:6b:b8:02:c3:23:1f:17:7e:25:45:6e:3a:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:C6:8C:F5:8E:AB:94:F7:7E:89:5E:B1:CA:9C:93:C8:62:FD:7B
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:0d:ab:4e:93:d5:ce:9f:45:a7:ca:03:92:e6:bf:08:3d:
         ec:72:6b:01:fd:23:a6:fe:19:77:e3:e6:b3:5d:d0:f8:33:b2:
         81:92:f8:96:d6:b5:8e:87:29:eb:14:41:d3:1b:4f:51:3e:e6:
         0a:53:45:bc:dd:13:26:a3:ff:41:42:24:0b:68:f3:8c:56:83:
         6b:12:26:2d:2f:58:f4:45:82:30:ec:c1:ad:e2:13:cc:a1:1c:
         e5:47:14:af:2d:b2:e1:81:ac:98:04:4c:d2:cf:7f:7e:d2:83:
         f4:3d:c7:dd:ad:50:f3:26:be:3f:35:4e:96:c8:c4:38:ca:50:
         91:d8:05:ae:0e:11:04:ab:98:55:74:48:ac:bc:65:b4:94:33:
         e6:ee:47:11:b6:1b:67:a4:37:aa:cc:7d:41:af:49:49:52:d3:
         16:05:76:55:8b:9a:49:f5:e7:8a:d7:d9:96:69:93:13:9c:a9:
         87:6c:15:35:1c:d9:7f:f7:bf:5c:f7:e1:09:7e:de:9b:6f:c6:
         da:4f:31:28:d8:a8:24:b8:5f:e3:4e:9b:5e:43:01:38:56:07:
         59:7f:08:be:8b:8a:ab:39:a6:02:10:b5:14:f0:36:6d:e3:db:
         6b:e4:1d:fa:80:47:90:ad:fe:59:dc:7f:28:71:4a:ce:c2:e3:
         9a:3a:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:34:57 2024 by rpki-client on console-ams.rpki-client.org