Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File:                     llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier:          dVCr3gNLh8BPPE77YDi/FgXAoS8EAJ234JkkrYh/i/s=
Subject key identifier:   E9:DC:AB:63:16:47:E6:EA:20:63:6D:D7:43:D2:8E:AC:21:D0:5E:AC
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       01901E58EA4EF83569F3B910F5CAF22FD6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:01 +0000
Files and hashes:         1: LBGD6RLvAlB-CcAERQE-D-Umkw8.roa (hash: qA9WgESe01mWUjrUzskMuWHKqjllWIEl3jl0nghf/Ss=)
                          2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: N1GfwnX+N93Wywt1FX4lfRucKWI6Jak0jpKGQHh2eYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ea:4e:f8:35:69:f3:b9:10:f5:ca:f2:2f:d6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Jun 16 00:01:01 2024 GMT
            Not After : Jun 17 00:01:01 2024 GMT
        Subject: CN=e9dcab631647e6ea20636dd743d28eac21d05eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:42:77:ad:fd:0f:ea:fa:bb:be:cf:9f:8f:
                    18:4b:06:b0:8c:d1:8f:e7:fc:e0:11:63:54:ab:aa:
                    52:23:54:52:af:71:19:11:07:9e:a1:e3:e2:a1:ad:
                    f0:8c:df:85:0c:f5:8d:37:45:70:fc:c2:9f:0b:fc:
                    7d:74:91:17:00:0e:4a:0f:81:59:d3:bb:d8:8d:e8:
                    e4:52:f2:9f:94:cb:40:66:82:39:c8:be:7c:a7:9f:
                    9f:1a:b5:ff:96:fb:92:76:b8:96:b1:36:25:1b:03:
                    0b:29:2e:7f:e3:27:53:dd:94:0d:25:aa:89:b8:66:
                    3c:5a:2f:31:5a:f4:4a:d6:a8:20:e7:52:9d:b8:3d:
                    ed:30:5a:1a:5d:fd:4f:e4:55:a4:a5:6b:64:06:5d:
                    34:77:27:b3:db:5f:b1:d4:9b:18:d6:ee:37:34:3e:
                    b7:32:58:04:8e:94:a2:98:99:89:ed:a5:f6:20:1b:
                    0b:1f:d7:04:27:8e:ea:7d:20:b0:c6:80:52:19:74:
                    7e:38:43:4c:3f:47:87:b7:f8:1a:49:c4:d6:f4:8a:
                    3b:d1:48:a1:15:c1:25:ee:9f:e7:9a:cb:85:2f:1d:
                    ae:1c:4b:21:c3:65:cd:83:82:23:e0:6f:ae:91:eb:
                    bc:57:da:99:d6:a1:e8:62:f3:05:08:9f:34:a4:32:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:AB:63:16:47:E6:EA:20:63:6D:D7:43:D2:8E:AC:21:D0:5E:AC
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:46:d9:78:14:12:28:01:99:b8:ac:e4:cf:27:3f:c4:20:
         5c:a5:ea:04:fb:aa:d3:cf:44:f3:3c:5a:00:89:30:ee:a3:98:
         8f:1b:54:e8:d3:e2:a8:f7:a5:4f:8b:5e:21:e0:8e:b7:61:28:
         63:38:12:9b:d3:44:aa:1e:ff:9a:ae:e2:41:65:ae:07:6b:40:
         5c:88:6a:e9:f1:34:dd:5c:57:90:30:6a:43:cc:28:f6:16:f9:
         96:41:70:76:55:c3:03:4a:65:67:98:ec:50:59:a8:62:9a:04:
         95:75:2d:a0:84:53:2d:56:e3:3c:21:ce:c8:b0:bb:5d:c6:a9:
         a1:31:29:b4:24:3b:f3:59:e2:8e:b1:10:b3:7a:6a:6d:0e:1a:
         2a:bb:e4:af:82:29:81:a5:ce:0f:f6:11:4f:fa:f2:2c:70:8c:
         2f:e6:99:54:43:f6:09:c7:46:ab:46:25:90:dc:cc:fc:32:c3:
         df:4f:21:cf:3e:cc:c2:3f:85:eb:8d:39:ac:b9:7b:f4:09:fd:
         64:e1:89:7d:d7:ae:4c:94:1b:c5:e0:dd:a1:28:87:c8:85:e0:
         0b:b2:5b:a2:31:e1:6c:d1:7a:f6:47:f0:3f:51:37:1c:6d:0e:
         f5:c3:8f:05:da:3e:f5:50:e7:ce:be:f9:74:82:f4:98:81:7c:
         51:b6:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:54:31 2024 by rpki-client on console-ams.rpki-client.org