Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File:                     L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier:          tTrHexw8PDk2hvQMY9EPq4VV6TF2e7kIaq0nqkiNG0M=
Subject key identifier:   21:F1:2A:1C:AC:4C:EF:7F:B1:EF:1C:40:B2:12:D4:F3:18:57:DF:B7
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer:       /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial:       01901E8F9C75BCCDDF8B6BF0A05ED69842B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number:          07B3
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: 1-7v_CO99LlsGkRLKstc3AURDWiA.roa (hash: Skdl82qmh+SruBFLM4rMyGXAWRhVQMxkSNyLbiQln+E=)
                          2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: MxT5Akw2ER762u22bnOqc6q+01HAV5Sjb+HDfCDj7Uk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9c:75:bc:cd:df:8b:6b:f0:a0:5e:d6:98:42:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=21f12a1cac4cef7fb1ef1c40b212d4f31857dfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:2f:1f:9c:24:f6:a5:e9:aa:c7:86:60:58:
                    1f:80:ab:ed:ae:73:2a:82:3e:75:b3:1a:6f:0a:9e:
                    94:9b:c9:84:15:98:62:fb:bb:39:97:69:f0:3b:48:
                    d7:8a:b5:c9:45:4f:dc:02:c6:c5:fe:fb:b3:a2:f9:
                    1c:b6:18:1e:86:5d:4b:18:e3:8f:6b:f2:2b:2f:20:
                    2f:28:28:be:f2:93:20:e3:87:ac:3e:58:e2:21:9a:
                    bc:eb:07:b2:bf:6b:a4:55:11:a0:86:cb:cb:ce:12:
                    cf:af:fd:aa:67:7e:3e:5f:70:96:9a:02:9e:1e:e7:
                    57:33:04:a8:61:ed:b2:90:e0:63:32:f6:38:0d:01:
                    f8:ea:10:cd:99:e7:e9:d1:ee:9d:1a:8a:57:1c:39:
                    3a:a4:5d:df:81:07:21:34:7a:ca:94:6a:ba:3b:08:
                    ff:be:7f:32:7a:8d:f9:f4:69:49:e5:77:fa:33:10:
                    0b:7c:24:cb:65:10:ac:48:0c:9e:39:16:7a:4b:ab:
                    bd:1d:ae:fe:15:1e:df:bf:3e:57:5a:2c:44:4b:d8:
                    f9:3e:26:cc:d0:92:f9:57:f5:81:f8:88:04:39:9f:
                    c2:41:da:1e:ab:9b:75:23:f7:08:2d:e8:4b:93:f5:
                    53:da:35:85:30:27:20:65:15:ff:55:dd:19:a5:88:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F1:2A:1C:AC:4C:EF:7F:B1:EF:1C:40:B2:12:D4:F3:18:57:DF:B7
            X509v3 Authority Key Identifier:
                keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:6a:f2:e6:1f:9b:ae:45:80:f9:12:16:68:3f:7b:f5:dc:
         7a:24:f5:f5:58:e1:56:5b:10:b5:95:33:4d:34:ce:67:81:84:
         e5:ff:73:31:9d:e3:eb:07:ca:5e:60:05:4b:49:ee:8f:40:23:
         b0:4c:fe:16:f0:21:2e:b2:26:4e:95:57:a0:2a:b5:79:6c:1a:
         64:d6:18:f7:6a:90:60:17:5b:08:1b:e9:30:24:38:37:27:1c:
         03:ed:a5:ee:5e:52:c9:e5:42:ca:5f:1d:ab:e7:74:94:d7:26:
         97:a2:d6:f7:ca:d9:65:68:54:b6:70:5e:21:0a:ba:ee:50:b2:
         fb:56:a5:69:2e:6c:30:78:e0:f8:c6:73:c7:b9:1f:f3:27:78:
         2d:c4:29:27:91:85:b6:bf:2b:b0:f6:ed:32:5d:d9:39:8e:d1:
         5c:45:eb:c9:a0:5a:19:a4:1c:22:4e:e5:dc:da:2f:78:a5:68:
         5d:7f:02:29:f9:3e:14:b7:26:e8:6d:87:07:13:8f:64:17:4a:
         b2:d1:c9:84:41:86:08:9a:9a:9a:6b:31:43:78:f8:65:3d:02:
         4f:4f:1d:90:2e:38:e6:4b:59:35:15:bc:09:28:0d:21:51:a6:
         72:60:a4:6a:2d:f8:93:c1:53:64:6c:02:e2:32:78:16:6d:7c:
         68:e2:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:16 2024 by rpki-client on console-fra.rpki-client.org