Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File:                     LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier:          ar839pW7u/FFsnWyiIy+vK+R+TIjW5lYrsCqtRfySAw=
Subject key identifier:   49:97:8B:8B:52:59:18:AF:9C:F5:C5:53:70:F9:17:83:88:A5:75:E5
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer:       /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial:       01901CA17347086F29945E85A11C5A5A8A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number:          EA
Signing time:             Sat 15 Jun 2024 16:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:01 +0000
Files and hashes:         1: 2w2rR-CmGX2wa8X6bLMcwsFid84.roa (hash: nyh4AHIZ30SUgZh7tRDe0muzHgTVXa6XwQY+06ZgsHE=)
                          2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: hvlDzB4xKCL9PzlHsB9wTlW3MmWciNlrMbMyH+PAfho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:73:47:08:6f:29:94:5e:85:a1:1c:5a:5a:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
        Validity
            Not Before: Jun 15 16:01:01 2024 GMT
            Not After : Jun 16 16:01:01 2024 GMT
        Subject: CN=49978b8b525918af9cf5c55370f9178388a575e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:ea:05:7d:a6:7d:bf:ba:09:d7:4c:28:aa:
                    1b:5f:40:73:90:94:9a:2a:ef:d5:0c:9c:ea:a9:9c:
                    28:39:6e:86:7c:45:f5:36:37:25:6d:0d:d0:c2:05:
                    7d:98:4a:ae:65:ba:ac:02:31:f8:9b:c9:1c:ce:28:
                    54:f0:dd:b6:0f:00:7f:ba:c2:e7:bf:3f:4a:ad:dc:
                    9b:0f:05:4a:40:62:60:04:4a:b7:85:80:d7:75:1c:
                    58:00:bb:ee:6e:28:82:49:34:d0:4b:20:f6:7d:92:
                    e3:1f:4e:e5:7e:9a:8d:48:78:d6:6b:c7:84:72:7a:
                    ed:57:10:fd:75:9a:ea:1c:dc:06:36:4d:ae:c3:5e:
                    38:fa:43:e6:6d:b7:fa:58:7f:ba:f3:36:1e:23:43:
                    71:e1:33:5b:80:f5:b0:32:f1:fa:c8:d4:bf:c7:2b:
                    9c:5f:42:0d:0f:27:fa:bb:c3:a7:dd:61:4b:c8:9b:
                    d2:f1:2e:cd:b3:14:2c:01:cb:81:30:d1:4b:62:d5:
                    92:8c:75:69:9e:14:f1:a8:6e:b8:5a:d8:dd:b7:53:
                    6b:eb:dd:f7:2a:e3:4e:9c:8e:4a:14:bd:6d:5e:40:
                    05:2a:8d:aa:22:5f:dc:f9:1f:f6:60:de:2c:fb:d9:
                    4d:c9:31:e1:7e:e3:ac:5d:fe:46:16:7d:df:df:8d:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:97:8B:8B:52:59:18:AF:9C:F5:C5:53:70:F9:17:83:88:A5:75:E5
            X509v3 Authority Key Identifier:
                keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:0c:42:3e:36:ea:10:fd:70:f9:cf:60:9d:6b:ce:de:fa:
         78:d5:82:5c:15:39:1f:68:66:12:f8:de:e9:06:1a:14:42:9f:
         4c:10:87:25:af:2c:1e:48:3b:6f:dd:3b:27:40:77:52:3e:3c:
         d3:0a:c8:79:e0:97:05:e1:08:dc:a9:63:bd:f5:17:62:30:51:
         f6:65:ee:1d:2e:c1:a6:56:32:e8:5f:37:cd:9f:04:d5:fe:9b:
         51:1d:2d:ae:9a:d7:f3:d3:12:81:7c:08:3c:23:3a:4e:d7:e3:
         d8:e2:82:18:3e:8a:85:38:36:f3:55:da:04:f6:2e:ce:45:7e:
         18:ab:6d:66:97:20:22:f9:b6:b9:1b:6a:07:a5:fd:e5:88:d3:
         24:ff:0d:51:a7:ad:61:e2:7a:c4:79:bc:4c:ee:d9:e1:e4:b0:
         9c:aa:e1:d7:c4:3d:cf:ee:3c:cb:b2:b7:0c:40:cf:db:a5:91:
         71:8d:21:1f:5c:c5:b3:c7:0c:ce:f7:da:26:b9:b8:62:b4:a9:
         93:8d:0b:71:f0:d3:99:0d:7c:2c:39:13:d7:48:f1:5e:a1:d8:
         08:d8:48:f8:95:3f:69:69:0f:91:6b:5f:1c:e5:be:82:c5:31:
         3f:82:e9:92:25:9d:ba:9f:d2:0a:8f:47:86:6f:73:2c:8f:b7:
         6e:0d:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:49 2024 by rpki-client on console-fra.rpki-client.org