Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File:                     lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier:          ASwv6O/0T5pK02um5ZfzL9g/KgLamHHC7HVeJalX8IA=
Subject key identifier:   CE:E4:C8:1E:5F:46:03:07:61:71:B4:E7:0E:18:26:FF:2B:09:67:5D
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer:       /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial:       01901EC66E821721EA7665C90DB3574D6487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 02:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:39 +0000
Files and hashes:         1: i0c4Pwt4he4mE4BRvbWW0ErjLL4.roa (hash: 4+h79yAzdgHoNgMdyjMqpw/6faJtWrlF4MMK733cYBo=)
                          2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: DOLjMk/YSjYqzkEJ88PC9HxAgI55DB1oVKWnZOz3wn8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:6e:82:17:21:ea:76:65:c9:0d:b3:57:4d:64:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
        Validity
            Not Before: Jun 16 02:00:39 2024 GMT
            Not After : Jun 17 02:00:39 2024 GMT
        Subject: CN=cee4c81e5f4603076171b4e70e1826ff2b09675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:cd:59:2e:4a:25:31:89:3a:ee:18:9c:7b:
                    7d:f0:ee:91:73:42:22:9b:07:eb:2d:8f:d8:8f:4b:
                    9c:3a:8f:fe:59:d6:23:2f:31:b7:fa:0f:91:2f:d8:
                    17:c3:9d:22:ca:0e:41:2a:49:f2:e9:96:a9:64:f8:
                    65:36:11:1b:0b:ed:94:bd:b3:09:40:60:53:e1:4b:
                    c1:3d:48:b7:13:d5:29:bb:4a:5e:d0:18:bd:0a:32:
                    7d:b4:fd:ce:4d:14:62:d7:5b:da:e8:b4:52:78:6f:
                    9c:ba:fb:20:12:45:35:73:83:6c:b3:a5:4d:77:5c:
                    1b:a9:8c:4c:18:73:9d:1a:11:2e:aa:88:15:87:5c:
                    82:1e:64:d2:b6:16:91:88:6c:a2:ec:c6:2d:c5:77:
                    90:88:f8:60:a8:16:04:cb:3d:ff:05:9b:b5:29:e4:
                    2f:8d:d2:cd:ee:82:20:ce:44:e8:7f:fe:30:05:3a:
                    8b:74:37:6c:cc:d1:60:78:e8:17:0d:70:2e:ba:a3:
                    c4:61:dd:28:4a:59:50:54:05:8d:6c:d1:1d:45:75:
                    74:86:bd:04:85:23:0a:92:94:92:52:3a:d2:32:18:
                    cf:8a:76:bb:0e:d0:97:d9:2b:79:82:0e:b3:54:9c:
                    cc:03:f4:ca:0d:3a:47:55:69:e5:b6:f9:8a:ac:9d:
                    2c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:C8:1E:5F:46:03:07:61:71:B4:E7:0E:18:26:FF:2B:09:67:5D
            X509v3 Authority Key Identifier:
                keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:92:38:ae:78:a4:38:3d:08:4c:23:19:e4:ab:44:c9:fe:75:
         8e:29:8d:0c:34:df:bc:0e:4c:6d:57:d8:69:1b:64:0d:1a:98:
         85:cf:81:ab:aa:1f:2c:f5:5f:bb:83:20:d1:32:a7:66:c6:2e:
         19:6d:dc:1d:ec:22:9e:78:82:98:b1:ff:13:5e:dc:8d:c8:1d:
         cc:4e:8b:fa:cc:cb:f7:d3:c3:b1:68:9b:0d:c2:d9:70:bf:3e:
         f4:00:e7:ca:5e:04:74:10:4b:e5:0d:bb:34:ca:bf:c2:b8:e1:
         fe:e1:03:30:f2:5e:f4:f8:9f:da:3a:ec:7b:05:bb:65:e3:fd:
         e2:a6:f7:83:6b:d1:0e:dd:37:a2:d9:13:df:c7:9a:ba:d3:07:
         b8:a4:4e:b0:3c:de:53:46:a1:97:bd:f0:be:d2:d8:46:80:b4:
         a8:65:80:45:d6:73:df:b7:7e:82:93:73:a8:c4:26:8d:d0:d4:
         aa:cd:23:9a:05:c3:76:04:fb:f1:85:a7:10:6b:8e:78:f2:ac:
         f7:3b:f8:c7:fb:25:5b:36:d3:65:45:75:d9:47:53:e4:6e:49:
         c7:53:77:3f:1d:71:d0:5a:3e:b2:ba:27:81:98:01:a0:20:b7:
         6f:ce:b9:a2:88:aa:e3:4a:5b:dc:bd:e5:4b:50:84:f9:a8:93:
         10:bc:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:48 2024 by rpki-client on console-fra.rpki-client.org