Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File:                     LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier:          ETAjE+2ldAFoSJGoY9i1NyJqHmzq5AYWMTLVm5Tzu84=
Subject key identifier:   46:CF:6F:39:4F:36:E3:43:64:98:BA:E9:D1:6C:CD:30:B5:29:F8:DA
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer:       /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial:       01901E58D8CFC4B5EF2E66C9D6F21CC937F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number:          0E87
Signing time:             Sun 16 Jun 2024 00:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:57 +0000
Files and hashes:         1: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: ZiaA0azcZHx37zH6MufwwNihNILRZK9EQG7wtDwwV98=)
                          2: RQ0BfzpaGwsYVSdAoJZamaW3rPw.roa (hash: A3alCWCv6qpqzOxhvegt8WP2nyYh8DiV1AOFZiGsHFE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d8:cf:c4:b5:ef:2e:66:c9:d6:f2:1c:c9:37:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
        Validity
            Not Before: Jun 16 00:00:57 2024 GMT
            Not After : Jun 17 00:00:57 2024 GMT
        Subject: CN=46cf6f394f36e3436498bae9d16ccd30b529f8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:cf:71:cd:2f:ca:49:01:8b:6d:39:fb:ea:
                    6f:76:23:f1:b4:a6:4c:97:b8:93:ec:05:47:8c:ab:
                    49:36:b1:88:44:2e:8d:2b:be:70:50:64:71:81:a9:
                    ed:00:b6:dd:1f:e5:b2:22:c7:48:f9:d1:c4:02:96:
                    36:c1:76:4c:71:dd:f1:c0:e0:66:fc:0d:3a:41:90:
                    35:fe:0f:62:a4:26:ad:a7:3a:bd:cc:a1:4c:73:45:
                    f9:39:39:18:81:60:53:c1:78:5c:5e:f4:a9:58:5f:
                    f0:af:84:57:c1:6a:6c:21:11:f2:2e:01:73:54:a0:
                    de:3b:fc:68:a1:d0:82:3b:92:f2:f2:5e:16:38:91:
                    fb:5c:97:d6:e7:ea:79:c2:7b:eb:cb:cc:07:68:72:
                    bf:49:c7:3b:db:f5:79:6f:42:17:9e:f1:fd:67:82:
                    2c:b6:0c:d1:44:91:6d:e6:5a:85:cd:e2:a4:47:6f:
                    a3:08:88:d3:38:2f:b5:5c:69:82:63:8d:ee:3d:0f:
                    44:62:f4:7b:b4:68:bb:ce:89:d6:b9:52:5d:a0:b8:
                    4a:88:af:fb:df:00:28:9b:da:d2:54:e2:ec:23:d2:
                    9a:36:f3:9d:71:78:c9:4f:f6:01:39:82:03:c8:79:
                    e9:82:0b:21:8b:82:6c:52:72:c2:54:06:d6:21:da:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:6F:39:4F:36:E3:43:64:98:BA:E9:D1:6C:CD:30:B5:29:F8:DA
            X509v3 Authority Key Identifier:
                keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:16:d8:52:c7:42:97:e5:dd:0f:ed:db:e0:6b:91:7e:54:91:
         39:c3:94:2b:e6:5a:76:47:4e:56:7c:65:16:55:47:0f:b1:51:
         ff:15:9b:4a:d2:05:41:8c:e3:62:fb:dc:53:18:a6:d2:ae:56:
         42:f9:11:cf:22:00:3a:f9:ca:23:23:a5:64:26:35:6e:01:f7:
         6a:4a:56:18:f7:16:c4:73:81:af:34:2c:9e:2a:c8:c1:49:e9:
         c8:53:12:af:88:1b:1e:e3:e5:31:75:eb:9f:9f:56:e2:21:19:
         cf:a9:8e:1f:76:d7:38:e2:ad:3e:2e:af:1e:46:2d:da:e7:cd:
         6b:b5:eb:da:96:1d:77:7d:e1:04:18:c0:66:95:17:44:e7:2d:
         61:25:1a:77:bf:d2:c6:b1:45:90:12:be:a6:60:53:ad:fb:d4:
         51:f9:a1:62:95:47:d7:d4:cb:c6:53:0e:7a:6f:2b:e4:e8:45:
         de:df:78:a0:f9:a7:4a:d7:0b:a2:7e:f0:9f:5d:fa:e7:ce:89:
         65:12:bb:87:3a:c1:40:7c:58:25:98:6a:24:2d:4a:d1:3e:10:
         66:d7:aa:de:38:c6:48:1a:5d:52:2f:1f:8e:ed:08:ef:30:04:
         f3:94:28:8e:d9:9d:26:6d:45:8d:c3:ef:3b:4d:cd:94:81:10:
         2f:46:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:47 2024 by rpki-client on console-fra.rpki-client.org