Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File:                     lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier:          sySlvgQ5pjz3ecl6Ohzs0tltWJ2XFVWAYB0atbLA3iA=
Subject key identifier:   15:B8:0A:C5:4C:D6:6C:18:4C:65:1C:EC:FB:C8:61:5F:C2:22:A4:8C
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer:       /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial:       01901BFD43798F1BA0D3F31CED2086D069EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number:          0A69
Signing time:             Sat 15 Jun 2024 13:01:40 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:40 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:40 +0000
Files and hashes:         1: bCJffUiyVy7nw_kx6uiG7B8Kxck.roa (hash: 97X0P62yB3qNuVwqkJjzGe39aKJEAmqhvmlrGTq0qzA=)
                          2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: ie+Gi+5J4AW4yApWmWIUP0lbaA0+rNmG7Ip7eTR3FWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:43:79:8f:1b:a0:d3:f3:1c:ed:20:86:d0:69:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
        Validity
            Not Before: Jun 15 13:01:40 2024 GMT
            Not After : Jun 16 13:01:40 2024 GMT
        Subject: CN=15b80ac54cd66c184c651cecfbc8615fc222a48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:8f:7c:63:4d:f9:f7:ef:c5:72:8a:fd:24:
                    94:23:38:45:24:18:be:0f:11:95:37:c2:a3:b6:4b:
                    39:21:53:11:de:be:50:a6:2f:d7:50:7d:2a:64:ec:
                    c1:d0:24:73:3a:fd:27:2c:73:1e:43:69:b3:8c:f5:
                    27:41:a2:c9:d7:47:b9:ea:5e:65:0b:26:af:e6:01:
                    f6:f4:71:84:f7:80:d5:91:d4:e8:97:f4:79:bb:07:
                    9d:b1:7f:68:12:cb:ff:c5:75:d7:50:10:da:f7:72:
                    a2:76:c5:2b:ca:fb:f6:ab:9d:35:71:90:4f:d3:62:
                    16:b6:d6:a3:5e:59:c0:c1:5d:35:81:35:d8:00:c2:
                    b0:92:18:b4:ae:9d:1a:a0:ca:39:56:64:17:e0:13:
                    65:04:d3:75:67:56:8d:64:50:da:62:de:61:9e:ec:
                    ad:68:ef:c4:b1:55:af:b7:94:23:62:b0:79:d9:c5:
                    54:09:4c:1e:4d:b4:1d:fa:7c:dd:0b:0c:18:0a:14:
                    78:54:f0:49:c5:2a:04:72:a4:5d:cc:a4:b0:5b:90:
                    6f:00:ee:ef:4e:90:aa:3e:f3:c7:38:68:a4:0f:f4:
                    64:73:c1:63:b6:16:65:5a:4b:a7:24:fe:4f:1b:1a:
                    aa:5a:3c:71:3c:5c:cb:1a:c7:6f:bd:7f:15:05:2a:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:0A:C5:4C:D6:6C:18:4C:65:1C:EC:FB:C8:61:5F:C2:22:A4:8C
            X509v3 Authority Key Identifier:
                keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:6b:9c:4f:3e:c9:fd:50:c8:6e:9f:9f:f0:11:3a:54:f0:
         95:7c:e0:c4:b2:26:b8:0e:70:f5:6d:9b:f9:dd:41:23:e2:9c:
         8b:e2:2a:31:c7:29:df:8e:66:eb:cd:a4:6f:5d:49:8f:0d:39:
         24:2f:bf:eb:c3:04:96:ae:07:59:0d:04:ba:1a:c0:ef:fe:ea:
         8f:ff:26:a0:f4:2c:02:4c:59:52:d4:d8:d4:fa:78:a5:ed:1e:
         5b:bf:a5:e1:f0:b2:b4:5f:0a:84:83:4b:c1:a4:14:8f:a9:48:
         88:a5:39:95:e0:67:c4:d7:23:53:5d:04:bc:0a:0c:1b:03:cc:
         94:23:67:b7:77:5a:54:a8:9e:7f:3a:4c:1e:c1:0e:d5:1f:a2:
         41:00:36:4d:4c:7c:35:ce:28:fb:15:26:cb:de:a3:0c:e4:c8:
         38:81:33:0a:df:af:90:eb:94:2f:83:61:cf:b7:f5:c0:8c:cc:
         ae:70:6a:f8:3d:39:cf:fc:6d:e9:67:5a:c1:fa:8e:80:42:f2:
         04:58:37:48:78:72:f1:f7:9a:cf:12:c0:31:f6:2a:e7:57:55:
         3c:29:21:8f:78:fd:1b:f0:ff:fc:a7:aa:fc:bb:d2:4c:7a:62:
         2e:4d:ad:23:b4:29:45:1a:27:25:32:90:01:41:c1:af:93:8b:
         d1:27:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:01:23 2024 by rpki-client on console-fra.rpki-client.org