Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File:                     LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier:          a3Pn4aVjC3KFza7eqlZmQOfK/pamp9ea3Fd2Khk5FXk=
Subject key identifier:   0C:66:04:22:D0:76:E7:45:2A:F6:96:B2:27:2E:02:8A:9A:66:37:D4
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer:       /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial:       01901DB3CBDF0A66AB7409B664CF43B9B2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number:          87
Signing time:             Sat 15 Jun 2024 21:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:40 +0000
Files and hashes:         1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 4ZoGnWIAnjGX086cvEC2nW3GSn7HSQ2DTM1/rBanki8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:cb:df:0a:66:ab:74:09:b6:64:cf:43:b9:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
        Validity
            Not Before: Jun 15 21:00:40 2024 GMT
            Not After : Jun 16 21:00:40 2024 GMT
        Subject: CN=0c660422d076e7452af696b2272e028a9a6637d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:9f:d8:04:12:38:d5:50:62:9b:71:6f:c3:
                    75:4b:40:26:59:a5:df:dd:18:f3:ec:12:03:50:6e:
                    5e:a3:81:f5:38:35:54:4b:ca:e0:99:3a:3d:26:f1:
                    9f:21:89:fd:6f:bc:28:25:6e:69:20:08:c1:e9:a7:
                    68:79:e6:1a:f8:ab:e0:24:84:9f:e8:bd:90:a9:43:
                    c0:43:df:dd:5f:3d:82:b2:4b:a0:be:53:9c:c4:ff:
                    92:3f:4f:ca:5c:d7:7d:b0:57:3c:a9:fb:fc:d4:cd:
                    e3:73:5b:3e:8b:0a:0e:cd:59:5c:8e:c6:0b:87:84:
                    45:48:2e:ff:dc:54:53:f4:2e:a6:f5:ba:3c:eb:0d:
                    0b:f5:a9:e9:7c:68:f3:27:76:fa:a7:8d:83:57:a6:
                    56:c4:15:e0:38:f6:b5:79:3a:bb:e7:42:6c:26:82:
                    61:73:35:f8:a4:d0:3b:77:2d:94:8b:e5:ba:c1:3b:
                    43:54:88:ff:19:56:eb:a3:16:1b:b3:ed:b1:6b:64:
                    8b:fe:51:68:0c:43:fb:e9:18:04:d9:bb:20:09:c6:
                    c5:cc:43:98:69:4d:0d:20:3f:42:35:9b:9e:7b:c5:
                    85:35:a5:41:56:cd:71:38:28:76:6a:a2:9e:6e:ea:
                    ee:ba:c4:12:22:fb:b5:de:75:26:11:af:e5:f4:2c:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:04:22:D0:76:E7:45:2A:F6:96:B2:27:2E:02:8A:9A:66:37:D4
            X509v3 Authority Key Identifier:
                keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:82:c4:4a:7e:5f:54:b3:75:a3:63:ea:8b:e5:c0:23:14:
         7a:da:f8:c3:16:e0:f7:bc:cf:35:bf:9b:11:15:99:c7:cf:ac:
         54:0a:c0:ef:b1:11:60:29:bb:45:0e:bd:a2:4a:68:3a:72:17:
         90:4a:e5:b6:47:b9:60:be:78:16:b4:60:97:ad:cf:15:34:0e:
         5c:ed:08:f7:42:a2:ef:59:0b:5e:56:f9:ea:20:90:8b:3a:1c:
         a3:68:54:38:58:fe:58:3b:8d:b8:9a:67:cc:aa:33:20:38:e3:
         ff:74:69:4b:56:0f:26:3b:c3:9a:6d:08:06:75:60:7e:23:06:
         5a:6b:0c:87:d3:73:d7:8b:0b:06:9b:ca:0c:da:e0:7b:aa:6c:
         fe:df:57:4e:8b:00:25:cc:37:6f:58:72:88:2d:b5:19:26:a4:
         ef:aa:82:80:e7:a0:77:1c:0f:d4:13:ca:65:2e:42:9f:73:8d:
         a1:63:59:2e:c8:3f:2a:74:06:d5:86:58:1f:53:3e:37:34:47:
         40:70:a2:69:a6:a3:54:dc:8d:4a:4f:34:ce:38:4a:3f:90:14:
         ab:48:fe:5c:6e:cb:4e:f5:8f:fa:34:83:22:ae:8a:9f:a4:ce:
         36:9d:b8:48:e9:12:58:ec:7e:65:92:3e:ad:5b:3d:6e:59:ea:
         a3:62:17:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAds8vfCmardAm2ZM9DubKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDgwMDhkZTNjZmY2MmQyZmFjYTEwZDk5ZmYyMGMzZTg3
OGRjZGYwHhcNMjQwNjE1MjEwMDQwWhcNMjQwNjE2MjEwMDQwWjAzMTEwLwYDVQQD
EygwYzY2MDQyMmQwNzZlNzQ1MmFmNjk2YjIyNzJlMDI4YTlhNjYzN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOf2AQSONVQYptxb8N1S0AmWaXf
3Rjz7BIDUG5eo4H1ODVUS8rgmTo9JvGfIYn9b7woJW5pIAjB6adoeeYa+KvgJISf
6L2QqUPAQ9/dXz2CskugvlOcxP+SP0/KXNd9sFc8qfv81M3jc1s+iwoOzVlcjsYL
h4RFSC7/3FRT9C6m9bo86w0L9anpfGjzJ3b6p42DV6ZWxBXgOPa1eTq750JsJoJh
czX4pNA7dy2Ui+W6wTtDVIj/GVbroxYbs+2xa2SL/lFoDEP76RgE2bsgCcbFzEOY
aU0NID9CNZuee8WFNaVBVs1xOCh2aqKeburuusQSIvu13nUmEa/l9CxLYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxmBCLQdudFKvaWsicuAoqaZjfUMB8GA1UdIwQY
MBaAFC3YAI3jz/YtL6yhDZn/IMPoeNzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMt
OTUxZTVhZmFlOWU3LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMtOTUxZTVhZmFlOWU3
LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/WCxEp+
X1SzdaNj6ovlwCMUetr4wxbg97zPNb+bERWZx8+sVArA77ERYCm7RQ69okpoOnIX
kErltke5YL54FrRgl63PFTQOXO0I90Ki71kLXlb56iCQizoco2hUOFj+WDuNuJpn
zKozIDjj/3RpS1YPJjvDmm0IBnVgfiMGWmsMh9Nz14sLBpvKDNrge6ps/t9XTosA
Jcw3b1hyiC21GSak76qCgOegdxwP1BPKZS5Cn3ONoWNZLsg/KnQG1YZYH1M+NzRH
QHCiaaajVNyNSk80zjhKP5AUq0j+XG7LTvWP+jSDIq6Kn6TONp24SOkSWOx+ZZI+
rVs9blnqo2IX8A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:47 2024 by rpki-client on console-ams.rpki-client.org