Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          VIp95aEye2rLBdjqA0Be3zE2RLAP2NRiT4kwyws/aH0=
Subject key identifier:   55:06:F1:4A:25:2A:98:CD:40:47:46:06:DD:3A:BB:EE:8B:FB:9C:7F
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       01901EFD9520C3D82BBFD05E8F6D457CB4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          0D9D
Signing time:             Sun 16 Jun 2024 03:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:53 +0000
Files and hashes:         1: 2DGb-LfAQjW4zjMm0NoD_pIuYDw.roa (hash: arG1yuc5/yJbYZRGMgFBlOX6isHl0sWiM4CVLc7paqo=)
                          2: 4oOEQee0fkbDVSgoMXZytyZ9te4.roa (hash: SQgl4G/bnyq9yZRiAgz9GFLvXzeOwXG/jLiFaraXAsc=)
                          3: K9Zr7ohh_aSv3H63GF2WqIuEj_I.roa (hash: NDcB2Lj3lWEFFqr6Z5UtPwFp4vw9ju262VtOj5RDhV0=)
                          4: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: qRkmeJ+Fh26nBT4U5xvHWxq8/lK2H4XRfYJ/0egnpKA=)
                          5: P5b7WIOS_U23GVLxRawtEDBQuyM.roa (hash: cieE28Mq8K8v3rkk2S3thQDhtbCKezWlDR2LtQ0hgSI=)
                          6: VSbJiMeiiakcbDnL0StklOCMjoI.roa (hash: kooXlKOn2qNn4+OwqmeAG5fg9tWoJ1wR0FlDJDfFd+w=)
                          7: YESo74Sgw-DGkGd4HOe05SnE6Xw.roa (hash: NG8HzYChgxie2hkFXOAuQnkOksnpvfEsfPQCBU72mcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:95:20:c3:d8:2b:bf:d0:5e:8f:6d:45:7c:b4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: Jun 16 03:00:53 2024 GMT
            Not After : Jun 17 03:00:53 2024 GMT
        Subject: CN=5506f14a252a98cd40474606dd3abbee8bfb9c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:b5:61:41:8c:8f:cb:08:10:05:54:b6:53:
                    d1:1b:4e:ce:1a:7c:53:65:4c:8a:34:7f:0b:53:74:
                    7c:67:5a:de:cb:ce:75:2c:0b:41:e2:42:0c:52:2b:
                    8b:67:33:03:22:bd:71:98:4c:42:6f:8e:7d:8a:94:
                    6c:e5:d2:42:fa:65:dd:bf:55:f5:9a:d1:4d:ce:6c:
                    a1:29:9d:d2:61:f2:e9:18:de:1a:f1:ae:5d:98:97:
                    68:d6:1d:8e:fc:dc:ce:83:79:7a:90:be:32:c3:89:
                    19:cc:b2:e5:fe:ca:87:bf:fc:2d:d4:67:f0:9e:b3:
                    23:6d:7e:54:75:c6:61:ab:7d:4b:4d:37:52:08:7d:
                    e9:7f:87:3f:66:35:08:c5:65:0c:dc:cb:9c:c0:e3:
                    11:29:8b:89:ad:34:06:82:66:60:66:66:37:b4:94:
                    96:10:24:cd:49:6f:98:e1:f6:96:92:08:39:62:5c:
                    5e:41:7d:ff:fb:73:47:60:11:97:76:99:19:5d:aa:
                    9e:eb:31:95:c0:f8:3e:2d:43:70:d0:9a:3e:0e:2a:
                    e7:4d:f1:56:d7:03:39:d9:20:31:02:5b:90:97:68:
                    98:a8:45:69:3f:ba:6d:e1:54:42:e0:c8:ab:cf:e3:
                    a6:29:e7:9d:50:cd:73:74:f5:22:aa:59:ec:fe:c8:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:F1:4A:25:2A:98:CD:40:47:46:06:DD:3A:BB:EE:8B:FB:9C:7F
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:32:94:bc:f2:be:e2:9c:1f:35:69:10:4d:cc:bd:30:60:76:
         1c:8c:89:78:4c:12:a6:27:70:66:22:79:77:37:f1:92:3d:ca:
         37:98:84:07:5d:3b:7b:ef:62:a7:05:52:cf:09:24:1e:0f:f5:
         75:05:a6:94:aa:80:ce:5d:b9:da:33:2a:6a:ad:89:e8:55:90:
         5e:9f:34:4a:02:03:32:e3:6a:48:59:e6:87:af:56:ef:b0:6d:
         d7:fa:86:f1:92:80:79:a1:27:94:81:70:79:3b:ac:86:b3:bd:
         27:39:00:dd:14:44:b4:24:82:00:ee:bf:25:55:a2:5d:f6:fe:
         6e:ec:bc:45:85:95:82:38:a1:00:3e:e6:a1:83:3e:38:09:f3:
         b1:e7:80:17:77:9c:69:e4:61:55:72:0f:e9:59:87:62:33:53:
         7a:47:99:cf:a3:32:f1:40:9d:58:87:72:1a:05:18:25:fa:05:
         ae:b8:ff:bf:2c:ba:0e:89:49:86:6f:dd:28:2c:66:34:49:14:
         32:aa:cc:b9:5d:a0:86:03:3d:ad:9b:f4:60:ee:81:7b:97:fc:
         8c:52:e0:e6:18:2e:0d:68:7a:d6:47:a5:e7:81:ab:7d:04:ec:
         07:49:38:6d:cc:a0:94:2b:ba:a7:39:fb:cd:e9:7b:ed:e6:0e:
         5e:6a:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:35:44 2024 by rpki-client on console-ams.rpki-client.org