Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File:                     LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier:          TlSsC4HDMc679xByHPGjNaljgrYbPg4mHiMfTQhr4Yw=
Subject key identifier:   71:BF:8B:DF:CD:66:4D:EC:D9:70:99:4F:B1:74:4B:C1:E5:4F:04:21
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer:       /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial:       01901E591D4EBE5C373689A30AF771C2765F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: CdV6ALD-WMhpli48mmkZuLb9-Kk.roa (hash: QZX9hvfsdcGOzWvh4UHNttZW8FuMkCh2lLKEIW3UEu8=)
                          2: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: e/6BButfm86mgnn3zUZelAasaSOYONlBThpEQO6VQcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1d:4e:be:5c:37:36:89:a3:0a:f7:71:c2:76:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=71bf8bdfcd664decd970994fb1744bc1e54f0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:ef:42:40:bc:52:ca:d8:0d:e0:92:e7:f0:
                    4f:40:be:39:1b:29:99:62:1d:a1:ca:88:af:68:da:
                    74:82:c2:89:d7:f9:96:d8:4e:fd:ae:e7:c7:d8:e1:
                    f2:e4:3d:64:ac:79:57:25:3b:92:94:83:99:64:79:
                    ee:38:ca:2d:ff:12:3c:e6:4e:ad:d4:c6:76:4c:7d:
                    ef:6d:ff:d9:e3:07:fd:a5:40:32:5c:9a:db:1f:50:
                    14:0b:86:e2:49:4f:5b:58:f8:fa:43:9b:0f:51:d5:
                    7f:08:ba:21:ab:52:e6:e3:16:d1:97:93:3f:c6:ea:
                    3a:f4:48:48:d1:6c:e7:06:da:b3:c8:66:50:c6:26:
                    58:e8:2b:b2:01:72:8f:f0:5e:ab:29:c9:f2:03:fe:
                    c4:2a:f7:4c:64:58:0e:40:93:9f:56:c5:e3:8e:75:
                    81:0c:3e:2a:57:27:23:cb:80:0e:9a:58:90:52:62:
                    de:90:c7:fe:cd:a4:8f:1c:1b:ee:5f:d9:ad:30:bc:
                    4e:d5:b4:13:1a:26:85:02:dd:e8:95:bb:73:c3:9e:
                    8f:a8:13:e5:e5:8f:bc:f8:ca:bb:66:1c:69:d6:e4:
                    a8:6b:c6:d4:9d:b6:07:3a:30:94:ea:bb:34:48:c5:
                    60:d9:70:ef:0a:c9:a4:df:62:d8:73:87:c5:46:c2:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BF:8B:DF:CD:66:4D:EC:D9:70:99:4F:B1:74:4B:C1:E5:4F:04:21
            X509v3 Authority Key Identifier:
                keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:23:88:1e:41:35:f6:35:cc:03:c0:43:e9:98:5b:16:6f:
         13:e8:cf:d4:1a:77:5a:5f:db:07:6c:1a:bc:b9:dc:ff:a2:b8:
         a0:d0:e9:25:d7:7b:47:9a:52:0d:2b:be:8d:26:33:ff:fd:65:
         e1:40:06:21:7d:3a:3d:40:f9:7f:b2:8a:b2:c3:a6:1c:61:21:
         3f:58:d8:80:e9:c0:0d:2c:31:7c:af:d4:71:ed:41:be:4e:e6:
         65:e0:00:c2:96:20:46:6a:46:85:e1:03:41:40:7c:82:6d:2c:
         43:20:fc:5e:aa:c9:f7:36:54:a7:ac:b5:ee:43:b5:27:06:14:
         7d:30:44:86:b3:fc:f2:84:c0:be:a8:73:05:59:10:3d:c8:02:
         4f:e6:e2:59:63:b7:e4:f5:82:6c:71:87:51:88:2b:62:b7:98:
         cd:fc:92:51:8b:83:02:25:75:98:7b:cd:0a:df:b9:70:96:22:
         9e:77:63:3a:a5:13:06:a7:e3:4c:77:71:5c:7c:0b:d2:86:b6:
         8a:70:91:37:66:73:2f:66:1b:50:02:3b:6b:bd:23:c9:cb:91:
         16:5d:b4:b0:3c:22:19:24:11:e2:7e:82:fc:d0:9f:19:0f:d9:
         18:f8:fc:53:4a:e2:b0:a7:ad:a0:fc:f9:f0:25:99:3a:43:86:
         57:13:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:45 2024 by rpki-client on console-fra.rpki-client.org