Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File:                     LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier:          OJMNWM5ngkWIBF8+H6FVGHV0xV9wAMPfeyC+EX6cnx8=
Subject key identifier:   DE:BB:D0:BD:0E:7E:8B:26:85:5F:92:60:1B:4F:5E:2E:45:3F:89:52
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer:       /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial:       01901E590B77AA668193290B02C834FBD163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number:          11C1
Signing time:             Sun 16 Jun 2024 00:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:10 +0000
Files and hashes:         1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: bwWqwsHjH6rB2rBa54gZaKnvK781RLMDhE2x4q8JwkQ=)
                          2: Sxc6oSjCwCfzdOIXuRAz02mCDTw.roa (hash: nP6QXyUqXZuFCor2w0yS/DLk2R4kNHZtsqHtpQBMGlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:0b:77:aa:66:81:93:29:0b:02:c8:34:fb:d1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
        Validity
            Not Before: Jun 16 00:01:10 2024 GMT
            Not After : Jun 17 00:01:10 2024 GMT
        Subject: CN=debbd0bd0e7e8b26855f92601b4f5e2e453f8952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:b9:fe:76:7b:a5:f4:2f:35:4b:d3:c1:c2:
                    f7:de:1f:c5:b0:6b:1e:9f:4e:6d:7b:27:b4:79:02:
                    ef:c5:f5:87:48:bc:7e:33:83:41:1e:ea:bb:21:ed:
                    ef:b3:86:a9:41:2d:28:49:88:eb:3c:83:f1:88:a5:
                    4e:1c:ab:0d:6d:60:6b:4d:45:2c:e2:b0:4d:85:89:
                    17:02:f4:6b:5c:22:48:a9:fe:d6:0a:da:5d:6e:7c:
                    dd:e7:c7:67:a7:31:82:b0:b7:98:47:d7:7e:24:43:
                    d6:82:26:45:74:53:e6:f9:bb:2a:9d:89:6e:97:2d:
                    40:87:c5:ee:66:59:37:95:d0:45:49:aa:02:02:b0:
                    ff:72:9f:90:d6:e4:1b:12:ce:f8:10:7f:88:de:8a:
                    a9:9b:b2:22:d4:ae:d1:99:bd:65:07:74:d2:53:0d:
                    be:0e:30:52:64:33:3a:5a:84:de:5a:e9:7b:47:5f:
                    0c:3d:0c:65:dd:74:07:dd:2f:5b:03:c6:a5:17:33:
                    ea:39:b6:31:39:5c:f7:04:96:21:78:30:37:7b:a1:
                    96:3d:ad:87:a0:da:da:e5:22:ac:b7:fa:ab:f1:57:
                    fb:36:4d:23:1b:5e:ff:de:41:bd:dd:9a:c0:f9:bc:
                    3d:fc:5c:92:3b:83:42:60:94:a3:2e:12:bd:6e:f0:
                    68:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BB:D0:BD:0E:7E:8B:26:85:5F:92:60:1B:4F:5E:2E:45:3F:89:52
            X509v3 Authority Key Identifier:
                keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3b:f2:15:03:8d:e6:23:05:a3:1f:9c:36:0a:a2:87:8c:82:
         c8:6d:9a:52:04:36:fa:8b:7a:9f:e6:3f:56:32:28:10:2b:fa:
         81:a4:ca:41:da:c4:3c:6a:a1:ad:ce:80:3b:50:64:ea:5a:74:
         73:45:13:85:6f:a8:5f:d0:17:e1:bb:f0:e4:d1:69:56:da:65:
         89:82:1a:b9:e5:70:c7:92:01:f4:72:13:74:97:2b:81:8e:51:
         fd:e4:38:c5:fb:ba:8e:38:0f:ca:bb:17:b9:23:24:a9:80:bf:
         c0:c9:c0:17:4f:97:cb:02:77:94:a9:ff:ac:f4:7a:22:37:6b:
         f3:46:29:a3:51:04:17:99:4c:f5:c9:f4:37:d6:1a:6f:10:25:
         6f:8f:71:a2:c5:fb:f7:c8:55:51:66:b7:8e:c4:61:2a:b8:c8:
         a8:c4:ee:78:05:a5:34:0c:4b:4e:16:ba:fc:c1:9a:3a:e8:81:
         7a:85:25:b6:cf:e9:86:37:19:cf:4d:c0:ce:e7:54:cf:96:81:
         2b:79:36:72:ec:e5:21:da:6e:37:e0:5c:53:02:ef:5b:1c:21:
         84:37:9c:91:85:1f:d2:ab:3d:32:e8:78:87:47:99:7a:7b:4a:
         8a:eb:1c:0f:6e:37:f8:42:f3:49:78:b2:72:4c:ac:d6:55:40:
         f9:6e:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:22 2024 by rpki-client on console-fra.rpki-client.org