Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File:                     Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier:          Ll74PRKvhEo/z0LqLLzq6iVzpkuSZh/LnQiwi+VGYNE=
Subject key identifier:   EE:72:6A:9D:62:20:30:4C:07:6E:01:FC:01:9A:29:5D:71:B0:E8:5A
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer:       /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial:       01901E8FDD50DA224F6EDA5B16A41CAFBF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number:          04CE
Signing time:             Sun 16 Jun 2024 01:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:03 +0000
Files and hashes:         1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: s9Lwlk2C7NaTmt3GVsNvLwDWARMjFBp3yGmOZPOiJNQ=)
                          2: fV8eq0s4PZtQw_rmbX7dSVeGpyE.roa (hash: twYd4ia5ik7a/UxXJ/KHMcJKd70S+BVCo10ylsoT19s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:dd:50:da:22:4f:6e:da:5b:16:a4:1c:af:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
        Validity
            Not Before: Jun 16 01:01:03 2024 GMT
            Not After : Jun 17 01:01:03 2024 GMT
        Subject: CN=ee726a9d6220304c076e01fc019a295d71b0e85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:4a:be:b3:dc:3e:36:e5:07:46:c7:ec:58:
                    7a:f2:c3:71:18:36:d3:a5:ea:84:c5:85:35:d0:59:
                    c0:96:31:22:a3:63:00:53:fb:71:ba:5b:de:d5:5f:
                    7d:e9:3c:46:46:57:7d:1e:74:1c:d0:20:66:29:21:
                    36:6a:e6:db:0b:39:19:5d:c8:d7:67:4b:fb:0c:bc:
                    f0:5d:af:f6:d1:ef:18:79:9c:74:d9:ab:f0:c8:3e:
                    10:b2:1c:be:bf:5d:4e:69:36:8d:c2:60:c7:d7:73:
                    7a:87:45:df:61:1a:00:e4:90:08:d7:6b:5a:65:9f:
                    f9:aa:c5:77:e6:82:8d:24:46:40:54:80:7a:e7:f6:
                    54:a2:09:5e:ba:2d:91:20:f8:68:36:6f:3e:c7:ac:
                    26:4f:08:b1:96:12:6e:08:b4:e5:96:94:30:5b:22:
                    23:8b:62:a1:8b:da:2a:ab:78:c6:55:4c:80:50:13:
                    3c:96:9a:ac:a2:6c:39:6b:8a:74:38:66:40:62:5a:
                    37:aa:f6:98:34:14:1b:04:b4:a3:26:ce:b5:5a:1c:
                    df:67:92:e0:e9:bd:aa:22:53:92:98:99:01:34:d1:
                    c3:9d:3e:c0:3a:2e:fa:6b:47:96:2c:b4:83:ed:04:
                    eb:60:1c:b4:ce:5e:9b:61:43:94:d4:1a:f1:69:03:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:72:6A:9D:62:20:30:4C:07:6E:01:FC:01:9A:29:5D:71:B0:E8:5A
            X509v3 Authority Key Identifier:
                keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:7b:7a:aa:11:44:f5:e8:98:50:6d:15:ff:91:7f:1e:2e:
         87:5b:83:b0:df:b0:d1:dd:6a:96:49:a2:92:53:69:b3:76:07:
         46:6e:aa:2c:ed:ba:8d:91:63:ef:94:0f:6e:a8:94:3c:09:ad:
         d8:68:16:ef:1b:7e:e1:88:1a:a3:72:b6:2b:26:a4:7f:2c:b0:
         54:b8:2d:63:0c:00:1d:38:27:df:8a:e5:3e:45:78:30:d8:15:
         58:0c:33:90:57:70:f0:aa:f2:ee:91:29:c6:95:dc:3d:cd:c4:
         c2:90:13:d9:36:30:7c:5c:37:1e:1f:cb:29:31:70:fe:d2:8c:
         c2:a3:cf:f9:1a:00:b7:86:32:0c:4e:50:e7:1c:fd:e7:aa:ea:
         07:61:d9:2a:ba:4b:77:a9:9a:f5:e0:a1:fa:71:de:23:0e:b4:
         a5:dc:d5:e1:d1:61:28:28:eb:07:7a:6e:54:8b:bb:54:bf:34:
         29:88:07:a2:ff:aa:0b:80:a7:53:30:f7:a2:73:87:29:df:f5:
         8d:04:c5:f7:2d:b6:ed:63:a5:83:d0:83:58:cf:11:02:46:ce:
         33:f8:71:e8:75:7e:f9:73:56:f9:42:43:64:b1:87:ff:b2:d0:
         64:e4:07:10:be:db:ce:d3:51:8b:79:3a:e4:c1:6c:4b:d8:d8:
         f1:18:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:03:34 2024 by rpki-client on console-fra.rpki-client.org