Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File:                     LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier:          URrl+BH9bdRRsUFjkcJB2DIDGuOC9lFIrO/jTlf3C3k=
Subject key identifier:   56:0D:92:00:01:B4:DE:75:FC:0C:7B:47:3D:3C:A2:02:6A:76:38:FF
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer:       /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial:       01901E219F1C4907172843791CB43396EAB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number:          0CB4
Signing time:             Sat 15 Jun 2024 23:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:38 +0000
Files and hashes:         1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: MiKmBpkzMsg+C8sluEAOS1SzzBIXjDLiK3iXuwPjXPA=)
                          2: _1iaPHL2L4hSeUJOhGJjalrN844.roa (hash: vUYs+AIPDHpt8BD0lLUEk/FI6mBVYJaQCYzd6O7kD6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:9f:1c:49:07:17:28:43:79:1c:b4:33:96:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
        Validity
            Not Before: Jun 15 23:00:38 2024 GMT
            Not After : Jun 16 23:00:38 2024 GMT
        Subject: CN=560d920001b4de75fc0c7b473d3ca2026a7638ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:bb:3a:be:8d:a6:3d:e0:b7:8a:7c:00:42:
                    74:5e:16:03:b3:8c:a8:10:6f:59:15:1d:3a:73:1e:
                    dc:61:86:1c:7a:5b:5c:35:fc:49:8b:19:f3:f1:35:
                    69:04:3c:ea:c6:09:9a:be:2b:0a:65:9b:f1:3e:bc:
                    bf:93:66:c9:f9:12:5c:7b:b2:e8:2d:bf:9c:c8:31:
                    71:d3:0d:0a:5c:53:5b:39:3e:cc:a1:e3:77:23:8e:
                    c4:4e:6a:70:2c:bf:43:8e:65:91:c6:71:e5:35:4a:
                    dd:80:23:52:ec:6e:3a:8c:b4:56:e3:ef:ad:2a:d6:
                    68:af:b4:ce:cf:71:28:14:d8:6f:aa:75:48:5a:08:
                    85:c3:5a:ae:64:cf:5c:fd:fd:b0:42:08:82:1a:5c:
                    40:68:fe:c6:0d:71:f0:d2:7b:ee:10:cd:a0:61:fa:
                    ad:b3:78:ab:af:86:be:f0:a9:15:69:bf:24:d0:3e:
                    b1:4a:8f:ca:20:0f:c1:f4:70:50:06:df:24:40:96:
                    3e:f1:d1:75:3c:90:1b:13:2d:ad:ec:af:07:82:af:
                    93:28:9d:eb:55:93:1f:5f:59:d9:3c:60:74:e1:1b:
                    18:31:99:39:b6:54:8a:35:22:f8:c7:04:c7:7a:32:
                    17:34:f3:25:8d:97:6c:6d:31:29:12:e6:b2:25:95:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:92:00:01:B4:DE:75:FC:0C:7B:47:3D:3C:A2:02:6A:76:38:FF
            X509v3 Authority Key Identifier:
                keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:bd:fc:3c:80:2d:d0:0d:53:f2:21:3d:f2:e7:26:cd:91:
         ae:d1:0a:34:3c:04:b9:5d:46:59:e1:a1:a0:42:14:de:27:93:
         2d:e1:d5:d2:4e:7b:ba:08:e3:e4:a0:e9:f0:9e:7b:6c:8b:f3:
         5e:5a:94:55:8c:b6:a5:d7:49:6c:a3:85:c5:b1:95:86:60:c5:
         74:38:a7:13:e7:48:36:4c:b3:47:8e:2d:a2:29:bf:3b:e2:e1:
         4e:bc:2a:0d:8d:7f:17:1a:ee:62:bf:5f:e5:93:14:0e:94:36:
         8c:3c:35:26:ac:a4:0b:0e:a7:c1:40:4f:d1:8a:ef:a6:d9:69:
         d0:1a:cf:d2:0a:c7:52:8f:0f:1b:1f:54:9f:da:18:da:34:46:
         c7:f3:c8:d1:fe:cd:24:1c:03:64:8f:c7:50:92:54:bd:88:2e:
         0a:02:f6:15:73:7d:c9:ec:e1:e7:4e:0a:b3:e4:6c:80:37:95:
         33:54:69:7d:9f:f4:36:6b:d9:84:ed:56:a7:81:78:cb:94:35:
         d7:f4:10:47:2b:cc:a7:82:6a:90:57:67:44:75:76:43:b7:4d:
         92:06:e8:5f:86:ae:f0:bc:af:50:8d:d3:b8:da:1a:26:f9:b0:
         a3:26:81:f1:dc:24:de:68:7d:f7:18:a7:00:b6:55:72:ab:06:
         75:f0:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:38 2024 by rpki-client on console-ams.rpki-client.org