Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File:                     l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier:          jfGULo2BsXILNo6Cm3wx+xYGQQuro8LvTTUVMfyeaiQ=
Subject key identifier:   86:AA:AA:EF:52:F3:64:DF:12:52:17:63:24:BF:D5:43:75:30:A7:7B
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer:       /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial:       01901E591A0F82D26189F76B275584C3EAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number:          116E
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: EMfHL9N1LYXXN0QP7n62GBIIMLo.roa (hash: tYd93vlIlXuuTelCJp9I2jO1yVIkJXp4WwuuD8LdrFw=)
                          2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: 6DQxvCZZPf9YltL316+ETPVAjZGsMogGRzga74q0yPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1a:0f:82:d2:61:89:f7:6b:27:55:84:c3:ea:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=86aaaaef52f364df1252176324bfd5437530a77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:84:45:f3:f4:fc:8d:1a:b4:d6:e7:ee:7b:
                    8c:d6:d7:4a:b5:96:25:ff:72:3f:ad:24:bc:44:7c:
                    e3:dc:14:78:3f:6e:1a:86:9a:7f:92:6b:a9:50:59:
                    af:a4:52:cc:3c:0d:07:13:9e:7d:c5:d6:24:b2:1f:
                    71:a9:b9:8f:3d:7e:f6:d9:eb:97:48:d8:3c:09:ae:
                    ae:51:08:a7:4b:d7:d8:e8:ec:f2:97:3a:a1:a3:bf:
                    af:17:20:17:00:90:7c:53:38:b7:6a:44:2f:de:f8:
                    43:1e:83:3a:d0:80:70:e4:af:4b:ac:8e:6b:9a:80:
                    43:d1:c8:c3:6e:0c:8f:05:87:ab:f9:3b:21:c7:f7:
                    af:7d:99:e4:5e:2e:b4:60:ab:13:c6:97:62:a6:6c:
                    22:0d:98:ce:73:e2:2a:71:cd:b0:5c:3f:09:04:7e:
                    0e:94:06:65:0e:fb:b7:7d:c4:9c:46:57:2d:00:b1:
                    8c:91:40:ca:eb:79:72:fc:0a:3e:94:79:99:d6:3d:
                    9c:0a:4b:bd:c4:09:6b:00:31:ea:8f:73:2e:7e:1d:
                    05:5b:c2:0f:dd:f9:ed:3b:0f:e5:64:d3:20:67:e7:
                    f9:03:65:55:f9:81:11:7b:05:c2:d6:04:06:bc:18:
                    af:13:87:0d:4f:b0:f1:8c:ff:e6:41:11:1c:1d:d6:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:AA:EF:52:F3:64:DF:12:52:17:63:24:BF:D5:43:75:30:A7:7B
            X509v3 Authority Key Identifier:
                keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:51:20:0e:c2:47:7a:91:bb:4d:0f:58:05:1a:a1:8c:15:95:
         af:b4:fa:66:99:99:95:28:06:d3:8d:bc:93:fa:36:01:76:0a:
         0e:30:52:e7:8c:60:68:19:af:02:d1:25:8a:9d:5d:ad:a6:60:
         c3:f7:d6:2a:49:11:2e:73:04:f3:1c:b4:c4:8c:7f:05:79:d3:
         a1:f3:92:5b:e2:fa:2d:f4:72:e1:38:12:6f:1d:c4:a5:05:77:
         70:42:ec:2f:18:3c:4b:c0:86:20:a4:87:9b:4a:25:7c:de:fb:
         3b:27:ee:86:4f:4b:a2:f2:32:ec:55:1b:86:3f:de:68:2b:23:
         29:55:d6:5e:f8:74:c4:39:fc:d5:a7:47:81:f6:7b:a3:64:ba:
         2c:a0:cc:32:05:4f:e5:f7:08:dc:c1:23:46:1c:95:9c:03:f2:
         ff:d8:6e:5b:5c:39:23:cb:49:8e:fe:b6:24:82:8e:a6:9f:0c:
         66:c0:fb:5f:fd:2d:41:65:b1:58:79:b2:20:1a:78:f0:4d:33:
         57:cc:cd:95:1c:c9:7b:6c:08:5c:ce:80:99:bc:55:2d:6b:1b:
         86:07:0a:6f:b6:c4:a9:f9:ed:56:a4:02:65:3b:9e:96:5f:ca:
         3a:f2:21:15:34:77:d9:75:66:b5:3d:6f:8d:73:df:05:37:b4:
         30:59:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:27 2024 by rpki-client on console-fra.rpki-client.org