Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File:                     Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier:          GuDK2GFj0AUL/7dXrixGGH52XlAEP6ZIrgJvHIt1Iy4=
Subject key identifier:   35:4B:09:D2:3D:E3:B0:93:7D:61:55:EE:E8:D2:FF:60:24:2F:62:EC
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer:       /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial:       01901E8FB63B6047E9E009FAE04398174435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number:          0411
Signing time:             Sun 16 Jun 2024 01:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:53 +0000
Files and hashes:         1: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: dKyBrUFZGG20BAMpLEm95io/1ajtAezFaNB9GkOMK0o=)
                          2: hCEv9ESqkbRhrgdVpgUe_lf-_Nc.roa (hash: mrw90M1o8JeNnKijzHuwau8lQ37cnE+8yKZqEJThYRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b6:3b:60:47:e9:e0:09:fa:e0:43:98:17:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
        Validity
            Not Before: Jun 16 01:00:53 2024 GMT
            Not After : Jun 17 01:00:53 2024 GMT
        Subject: CN=354b09d23de3b0937d6155eee8d2ff60242f62ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:b7:dd:c2:cc:c8:33:79:e8:6d:ce:e2:b3:
                    4f:fd:95:fd:9c:dd:fb:4b:1b:63:49:14:ec:4d:63:
                    9d:2e:59:2b:95:37:ae:3f:57:d6:ba:db:94:03:93:
                    64:76:ee:e5:77:a5:69:ba:71:5c:f2:fd:c0:d4:49:
                    d3:82:63:3c:43:b0:e0:83:ce:53:a5:b4:8e:b4:84:
                    69:88:22:d5:c1:39:88:ef:90:da:d1:34:fb:b6:e9:
                    f0:95:91:81:50:55:f2:b2:3b:27:a3:10:c0:54:db:
                    40:8e:ae:59:7e:37:27:60:cf:e8:7a:9a:bf:a1:62:
                    1b:18:15:23:e7:7b:69:8a:37:7d:ba:0d:7a:69:e1:
                    9a:63:f8:c4:58:8c:c8:5f:31:1a:17:45:10:f2:ff:
                    fd:47:d1:a4:0e:e8:e1:31:88:5b:fc:77:95:7e:f6:
                    74:38:ec:73:49:cc:3a:f8:b8:71:39:0d:99:a0:f4:
                    62:99:4e:9b:54:f8:5b:4a:fc:ae:2f:86:cd:2a:4c:
                    69:28:97:0b:27:45:55:c1:21:b5:40:b6:5d:fc:3d:
                    ae:60:cc:3b:82:91:84:e4:2a:01:89:22:ef:6a:ae:
                    3f:45:c6:16:56:7d:ea:d6:8e:ff:9d:1c:6e:31:a3:
                    bd:1c:08:90:34:71:c5:ca:e0:3e:48:02:08:5a:fe:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:09:D2:3D:E3:B0:93:7D:61:55:EE:E8:D2:FF:60:24:2F:62:EC
            X509v3 Authority Key Identifier:
                keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:2a:f0:a2:57:dd:7a:62:c4:23:49:21:18:1b:c8:76:c8:
         b3:ab:88:89:ee:5c:1e:74:26:00:77:7e:b3:1f:16:4d:aa:bd:
         87:02:34:3b:66:1a:63:51:a1:7e:79:1e:58:2e:6e:1a:b3:50:
         61:22:db:15:85:47:46:cb:d5:d0:06:1f:e6:c3:93:5e:ef:37:
         a8:e6:07:c0:60:3d:09:5f:ac:9d:60:60:12:aa:21:87:93:0a:
         a4:09:5a:cc:b1:6e:d0:ef:08:64:da:a6:29:0b:c4:a0:b8:ef:
         13:a3:fd:3d:25:d4:f7:2d:c8:36:db:b5:6c:38:a1:c2:9c:c7:
         08:a9:00:ae:65:7b:3e:7b:1c:a7:0b:06:e1:5e:45:5c:fb:b5:
         fb:26:07:af:cb:67:2f:53:ff:e2:44:7e:3a:19:d7:a1:0e:43:
         fb:23:06:41:6d:a1:cf:c3:48:3b:25:36:0f:3f:f6:4a:ea:e8:
         81:ae:4f:bd:41:30:06:c4:e5:72:24:15:33:f5:24:04:96:e4:
         6e:22:a5:80:11:d0:8d:78:1d:b5:79:b6:fb:01:b9:75:6b:46:
         05:9d:a2:56:18:51:db:77:a0:39:68:1a:b4:f2:e5:8d:42:b6:
         5b:db:27:d0:f0:30:11:ae:10:a9:a6:07:47:a2:78:0f:14:b2:
         6e:91:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:27 2024 by rpki-client on console-fra.rpki-client.org