Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          JkvdD6rvw/xlcCFtXhq0pHr6+2i1yKU9fhQU9GZ0YiE=
Subject key identifier:   2A:85:A9:A9:58:BA:24:F5:23:D5:3A:CA:38:20:E6:1C:E8:F1:31:F6
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       01901E59033690C9F40181AAD91AFB58A6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 00:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:08 +0000
Files and hashes:         1: 1_WrkjzON8sJnRIXyrgg0Ed23lE.roa (hash: lksEtWAkBRRjAuMJ/mSrhb/aUNjT3Zd72D7CSu1d+L8=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: w8u/NusbIYiYuYanaLznTNdZ5AQ0Be+iRn25vOJ4bOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:03:36:90:c9:f4:01:81:aa:d9:1a:fb:58:a6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Jun 16 00:01:08 2024 GMT
            Not After : Jun 17 00:01:08 2024 GMT
        Subject: CN=2a85a9a958ba24f523d53aca3820e61ce8f131f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:4c:57:29:55:df:ba:92:d7:99:c4:3a:d0:
                    e9:8c:be:1b:c6:65:c2:ef:ff:4c:18:95:66:31:c4:
                    eb:54:84:59:df:10:dc:07:93:a4:7a:21:74:29:4e:
                    88:fa:ae:48:33:1f:63:22:e8:81:8c:5d:9b:87:06:
                    06:6f:14:f1:cb:7f:87:2f:1b:da:43:9c:eb:1a:e7:
                    55:b5:73:10:08:cf:af:ab:b8:86:1a:c1:3a:68:1d:
                    36:eb:ca:5a:25:b8:0d:41:0f:94:d1:7e:fa:50:03:
                    ec:91:f0:57:6b:22:81:6c:39:cc:0a:e4:2f:b2:9b:
                    a7:96:0a:23:8e:54:5e:72:4b:10:19:2a:69:bb:41:
                    e3:9f:bb:63:89:49:f3:aa:3e:7a:c3:8c:24:2e:e2:
                    71:13:02:68:27:8b:41:3a:59:a2:37:15:94:af:0d:
                    79:b8:76:77:6d:2e:f2:18:f1:ac:0e:ea:44:57:8a:
                    2e:dd:dd:f7:41:6c:17:48:57:b9:55:7b:86:19:54:
                    23:da:72:e4:a2:d3:e1:fa:13:a5:ca:9f:e3:f6:d0:
                    b7:82:87:24:85:82:36:f1:bc:83:b1:33:ec:d5:45:
                    60:b0:bc:89:4c:c3:26:8b:2f:bc:95:fd:c7:69:2c:
                    fa:5f:e2:ce:fc:6e:83:80:86:33:03:b5:09:e6:15:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:A9:A9:58:BA:24:F5:23:D5:3A:CA:38:20:E6:1C:E8:F1:31:F6
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:90:83:c0:09:21:d3:7e:2c:f7:c9:d1:85:7d:f7:45:e3:
         77:f4:b8:a8:af:a4:c4:9e:b3:21:c5:bc:69:f7:fb:55:ae:16:
         8e:2c:cc:22:ec:15:89:fa:ed:8b:8d:c2:32:8f:85:9e:ca:77:
         a9:48:06:a6:ad:1a:4e:6d:39:a4:6d:fa:23:a1:8d:d4:95:c6:
         66:ea:13:9c:08:e8:7e:40:01:53:c8:5d:1e:69:77:6d:b3:19:
         c7:14:84:16:bd:5e:93:a9:99:e1:ca:15:27:67:6a:66:71:3f:
         c0:4c:40:e1:c5:50:c9:67:7c:ee:10:29:31:4d:44:3f:6b:4d:
         9b:fe:a6:37:fb:fc:03:61:65:30:86:63:7f:26:9b:ad:25:f9:
         ca:9a:cf:65:ae:23:1f:74:3a:a2:2a:9b:01:69:ef:86:f1:9c:
         cb:b5:2d:4b:7f:ac:1b:74:86:a3:6c:c0:02:c3:b5:d8:3e:44:
         38:6b:d5:a4:1c:3f:4a:3e:da:4c:1e:da:35:73:5c:49:bc:ff:
         9a:ff:8a:d0:ee:df:a6:59:86:f8:91:76:d1:1c:0a:42:17:b5:
         a2:0e:52:e3:3a:70:a0:51:7e:ae:17:55:98:6a:f1:71:44:db:
         2c:a9:c4:53:fe:0c:a4:ae:d5:b4:2b:a6:06:c9:54:fe:75:7e:
         d8:bf:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:39 2024 by rpki-client on console-fra.rpki-client.org