Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          Du+VZ7KniQ0KuXg2aVBNMnc3NeSmC92mQgfSXLWAgu0=
Subject key identifier:   09:6B:93:0F:A9:67:21:72:B3:85:AC:74:F7:A7:C6:5D:4E:C5:96:8C
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       019044F862685A93B0DFBA8AB2499B9D186C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 12:00:47 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:47 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:47 +0000
Files and hashes:         1: 1_WrkjzON8sJnRIXyrgg0Ed23lE.roa (hash: lksEtWAkBRRjAuMJ/mSrhb/aUNjT3Zd72D7CSu1d+L8=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: DrK/Sv+GKjTa+7y9CKZL+jZfsV1jUIjl+WHrFe3jdEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:62:68:5a:93:b0:df:ba:8a:b2:49:9b:9d:18:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Jun 23 12:00:47 2024 GMT
            Not After : Jun 24 12:00:47 2024 GMT
        Subject: CN=096b930fa9672172b385ac74f7a7c65d4ec5968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:8e:85:04:39:c1:1c:3a:f9:20:ce:0e:ac:
                    5d:77:17:c7:63:e2:15:67:db:af:be:85:79:f2:5f:
                    4d:df:69:d2:e2:06:69:bd:e1:b0:3f:3c:57:f1:6b:
                    57:60:9c:55:a1:fd:81:95:9a:22:82:b6:8d:aa:c2:
                    5f:bb:4a:b8:31:f5:64:56:e8:57:10:40:c9:4e:7d:
                    de:06:dd:4c:1c:f7:50:db:84:47:73:7f:bc:98:40:
                    4c:ac:e5:a1:e1:f4:a3:ab:9e:d1:3f:f6:9a:fd:44:
                    57:97:46:9e:f5:2f:5a:7a:47:12:f3:8f:b4:b6:19:
                    7f:f8:3d:3f:ac:6f:46:a9:30:be:cd:d2:d9:a6:fc:
                    59:4b:42:05:01:1c:c3:54:40:6d:4e:06:f7:25:64:
                    e2:43:6e:bb:13:86:47:9e:62:5a:a9:63:fc:97:ad:
                    42:01:39:00:7d:f1:69:91:0b:d7:55:08:c7:43:d8:
                    96:d7:3d:5f:1b:3e:d3:02:db:67:75:a4:2c:71:60:
                    e8:88:49:ee:54:99:25:1d:cf:91:ce:1f:07:88:5a:
                    fa:99:ab:d2:f4:bb:df:e5:ee:63:18:29:83:51:03:
                    78:bd:94:b7:a6:6e:c8:a2:f5:48:b9:71:24:4f:12:
                    e7:7a:1d:93:c4:36:b4:0f:9e:5b:3e:a2:ef:3c:ad:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:93:0F:A9:67:21:72:B3:85:AC:74:F7:A7:C6:5D:4E:C5:96:8C
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:c9:da:ea:fd:05:fd:4c:85:09:96:d3:b8:22:bd:8f:db:
         33:ff:8f:98:56:80:69:64:40:94:ab:7a:97:a6:ba:8f:da:7a:
         b5:16:55:89:13:54:96:39:4d:01:50:d1:4f:78:2d:2c:03:c3:
         da:40:5f:d1:14:34:cf:1c:69:91:6e:1f:b8:2e:0c:ba:cb:1e:
         02:6b:d9:76:f9:1b:98:2f:a4:2f:27:db:7e:96:84:27:dc:59:
         7d:4f:38:b2:f6:c8:ca:bc:1c:f3:dd:5a:73:21:74:6e:d6:67:
         0d:2a:c0:14:05:61:22:e0:3e:b2:58:e5:c7:04:f8:f9:59:d5:
         74:40:c2:8c:09:d9:e3:f0:d2:0a:08:bd:d4:92:42:2b:aa:c5:
         9b:89:8e:c7:08:b9:8b:d2:fb:4f:fe:58:6e:6d:3c:99:28:0e:
         4d:a3:bc:fc:22:26:2d:3e:04:29:0f:a7:fa:21:d1:8d:9a:5e:
         9d:bf:84:55:bc:16:6a:53:68:0b:70:f3:77:77:51:61:bb:d6:
         6b:9c:bf:4d:7a:bb:68:c4:3e:cf:90:da:a3:c9:2e:3c:ab:38:
         de:d6:97:46:c4:bc:b7:ec:d5:2c:d5:fa:56:b9:87:8b:c8:9d:
         c5:49:12:4f:b5:99:80:c3:99:da:9d:8b:5c:70:3e:25:0a:72:
         8d:73:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:37 2024 by rpki-client on console-fra.rpki-client.org