Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File:                     lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier:          /Q1CIGaecTAnc+7fYgfPcXLiKZPtvFO+Bp6J3MFmpaw=
Subject key identifier:   B2:67:9F:46:C1:C7:26:D2:81:39:29:FD:59:0E:D9:7D:E6:DC:E6:3E
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer:       /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial:       01901DEAF1986E943144AC29DF1846D1139D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number:          0273
Signing time:             Sat 15 Jun 2024 22:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:54 +0000
Files and hashes:         1: _O-3bS6qJHl2kjMnez2DL4sXyYI.roa (hash: R82tdN0zgsXYbh1tAsrm7fOBV6WsPCOsyV5JsKYEoFo=)
                          2: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: 67cWIiAQhMDy3pp70zbpbnDvNZ9qWIDcNdwUxTjSQRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f1:98:6e:94:31:44:ac:29:df:18:46:d1:13:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
        Validity
            Not Before: Jun 15 22:00:54 2024 GMT
            Not After : Jun 16 22:00:54 2024 GMT
        Subject: CN=b2679f46c1c726d2813929fd590ed97de6dce63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:65:8a:e6:3b:02:fe:b1:67:b8:09:70:2b:
                    46:26:d1:2e:5b:85:50:27:8a:e6:13:02:c1:4f:aa:
                    12:6e:bb:cf:8b:41:4c:3c:d3:36:72:12:07:2a:eb:
                    f4:90:55:0d:0a:4f:e7:a0:3e:a0:b8:61:d4:e0:70:
                    b5:31:77:3d:b9:5c:98:82:e7:f3:5e:3c:ec:7c:39:
                    fa:76:98:28:c0:ba:91:d3:b1:10:32:e3:1d:30:1d:
                    d6:04:27:1c:60:4b:6f:0c:fe:55:40:a3:1e:fb:69:
                    30:2f:91:3a:16:8c:1c:6e:53:dc:9b:ca:f3:8c:09:
                    26:94:34:fd:8f:c3:75:61:3b:42:4c:da:eb:4c:48:
                    c7:03:f5:fc:dc:92:4c:8b:4d:0a:62:d7:e0:06:38:
                    8e:f0:9e:4f:a0:ff:b2:bc:22:1b:03:a0:b5:3a:f0:
                    d8:5f:77:20:b5:b4:0a:5e:8c:53:2d:17:b8:31:17:
                    27:c9:15:71:a3:b0:8f:20:c0:9f:79:e7:de:0b:81:
                    1b:a4:c1:92:6c:06:89:58:eb:69:50:2a:f9:9e:6d:
                    7e:f5:8e:0c:0f:7f:54:6b:43:b3:ca:4e:bd:6e:ee:
                    bf:ad:bd:16:74:e1:43:1e:5f:71:ba:c4:01:6a:88:
                    8c:80:5b:91:d7:e8:0c:bd:fc:b4:2d:e0:f0:05:c7:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:67:9F:46:C1:C7:26:D2:81:39:29:FD:59:0E:D9:7D:E6:DC:E6:3E
            X509v3 Authority Key Identifier:
                keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:f0:49:67:f1:1e:ed:00:c1:f3:7e:d2:7f:d5:9e:06:ae:
         67:e5:f0:c4:6b:2f:c2:00:51:b2:a2:20:13:ef:52:9b:d8:fe:
         18:f7:2a:95:fe:34:e8:8b:26:8d:54:56:70:a8:ca:55:cc:20:
         9f:b3:e8:16:96:52:b8:2f:9a:28:49:94:89:46:51:8e:10:27:
         25:9d:45:2e:af:58:bd:93:31:bf:06:b0:59:51:89:16:f5:85:
         fc:9c:05:23:14:04:51:da:5b:30:1f:7b:a1:d3:d0:7c:26:f6:
         2e:31:bd:24:d2:df:7e:57:27:7a:c5:64:7a:d4:fa:a0:05:8d:
         f7:80:82:e5:18:b9:8d:01:7e:82:33:6c:21:ec:92:d8:47:37:
         94:51:d3:d7:86:10:2c:b0:65:38:28:03:0f:cb:2e:d5:8c:a7:
         23:c6:0e:9e:d9:67:73:dc:b0:f9:ae:8d:0e:2f:05:9e:51:4f:
         d7:c5:bb:eb:a8:38:f3:79:c4:03:91:dc:72:1f:48:0b:22:74:
         b7:3d:fd:d2:b1:2b:f8:a8:da:fa:40:20:41:29:32:da:39:c6:
         24:f2:68:88:92:92:56:69:2c:11:aa:c2:eb:b3:ee:b7:54:19:
         3d:72:f4:61:31:8d:30:8b:e6:5d:42:2b:71:5f:99:bb:a7:13:
         66:61:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:12:07 2024 by rpki-client on console-ams.rpki-client.org