Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          s3UPFbjLJ4iTx/GByFAoZjr5syNgXedL/Fvhd8dSf8o=
Subject key identifier:   EA:A9:14:EB:3F:91:9C:D0:12:C0:8F:EB:EC:E3:FF:31:A3:1A:65:27
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       01903818BB7E2F7D5C230A0A865B4417B94C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          0918
Signing time:             Fri 21 Jun 2024 00:01:03 +0000
Manifest this update:     Fri 21 Jun 2024 00:01:03 +0000
Manifest next update:     Sat 22 Jun 2024 00:01:03 +0000
Files and hashes:         1: ZLfZ3KLSTzAzvcn_p7cpBMFY28I.roa (hash: fmYs39TXwa3l+TLCw/cGvbw90YqvjsWFCke0W0GQtFg=)
                          2: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: bN+MhDT3iKmFyG9QVqb35uNOeqA2oj9NKthJ7oqJEoI=)
                          3: oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa (hash: FVWDDf09insCdZQ/CDGyPOkPc/wkhppWOkpIFaWU5IM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:18:bb:7e:2f:7d:5c:23:0a:0a:86:5b:44:17:b9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: Jun 21 00:01:03 2024 GMT
            Not After : Jun 22 00:01:03 2024 GMT
        Subject: CN=eaa914eb3f919cd012c08febece3ff31a31a6527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:24:1e:92:bd:a8:30:5e:ff:4b:ea:c2:b5:
                    ef:72:6d:2f:73:01:f8:7d:96:53:22:65:8b:51:aa:
                    f5:36:bc:0b:c6:6d:7b:55:b9:59:7b:2d:d9:82:72:
                    58:d8:53:b2:7a:b7:b9:b9:56:2d:37:f8:bd:66:27:
                    a4:3f:86:c8:e3:9c:76:c5:5f:c2:55:61:b0:c1:fa:
                    9c:40:56:a8:5c:d6:5d:18:af:31:28:cf:c2:e0:76:
                    bf:ee:06:5d:c9:9c:95:20:4f:28:74:c3:5f:2d:d6:
                    b9:5e:c0:d8:a6:97:ad:f9:04:a1:de:aa:6f:02:0a:
                    52:6c:af:9e:b9:85:4a:35:d8:e5:03:c2:2e:95:89:
                    c3:67:97:66:a4:19:db:7e:55:46:34:83:1a:ee:b6:
                    fc:a0:34:d7:06:90:07:c0:23:84:0a:ad:1d:8f:4b:
                    95:b2:20:0e:55:91:5c:c5:e2:fc:ec:b3:73:79:0f:
                    f1:7d:c0:2f:92:aa:1c:f1:06:a5:bd:19:4b:e7:8c:
                    fa:24:3f:3a:9d:e3:d8:ed:04:d8:5d:c2:c0:a6:23:
                    59:3b:b7:ab:a7:37:c8:4d:28:d1:01:8b:cc:ca:66:
                    46:f8:f9:be:1e:e0:05:ac:55:32:89:ab:4f:65:84:
                    a4:ef:65:5a:c8:22:34:5b:b9:5c:9e:52:f2:d4:7a:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:14:EB:3F:91:9C:D0:12:C0:8F:EB:EC:E3:FF:31:A3:1A:65:27
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:94:e4:cf:c2:c2:f3:b3:25:18:75:a8:b5:8e:0c:71:c4:57:
         e5:85:d4:dd:75:2c:0d:e8:1e:85:9e:94:1a:88:dd:dc:94:4e:
         5b:41:81:26:33:c7:4d:19:a5:72:d7:15:c7:8c:5e:51:09:1a:
         29:b7:a1:12:b4:da:11:57:25:14:83:0e:93:ef:bb:c2:34:97:
         24:50:dd:a5:22:2f:ff:4d:93:67:8a:ce:cb:e7:7b:46:da:95:
         1c:35:f1:89:89:5a:17:bf:9f:c5:f2:10:ac:e2:a6:8e:ec:d1:
         9c:92:8f:c0:f8:c0:36:45:58:24:91:4f:e9:b5:07:4e:20:23:
         9e:23:23:3a:50:11:07:ab:21:5c:e7:87:70:ca:cc:0b:11:15:
         0e:a7:53:d0:ca:8d:49:cd:1d:02:28:b7:00:3d:43:a1:86:91:
         88:bb:1a:11:97:e2:ab:3f:37:97:23:c4:9f:bd:44:1f:86:ff:
         59:73:3a:80:d8:09:b0:f7:a4:7b:b4:15:37:9b:27:5f:2e:c2:
         6b:a2:b2:0b:18:49:f1:10:84:be:3b:62:79:b7:79:87:b5:60:
         ed:45:68:bc:ea:78:47:ef:bf:f5:50:b6:df:4d:e0:fa:6a:1a:
         5c:ab:f6:b9:54:a3:0f:20:e4:73:65:4d:36:4a:5f:b5:f0:0a:
         42:9d:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:27:39 2024 by rpki-client on console-ams.rpki-client.org