Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File:                     L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier:          646fWmCl8rEswHtiiCvKw3+B906Ay/GovWzad5NZ01g=
Subject key identifier:   79:52:6C:23:40:50:C0:F2:07:95:9B:20:35:99:73:04:61:D9:61:4C
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer:       /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial:       01901B57E835F14B0948BA16E711B916A3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number:          11AA
Signing time:             Sat 15 Jun 2024 10:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:04 +0000
Files and hashes:         1: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: Jp6PwW1mFwqgiFGwlNbvQ00pmz6c32tTWyrDSi3Q0HI=)
                          2: nXcd68FA6wzEBrKowRhwqwGa0wc.roa (hash: COA2j9H9lF4n8M+o6lTXEow6KedsZ5b6uvstYrcIQWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:e8:35:f1:4b:09:48:ba:16:e7:11:b9:16:a3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
        Validity
            Not Before: Jun 15 10:01:04 2024 GMT
            Not After : Jun 16 10:01:04 2024 GMT
        Subject: CN=79526c234050c0f207959b203599730461d9614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:7d:36:76:8e:cb:db:bb:38:35:2c:75:17:
                    da:24:9e:58:5f:3f:28:28:9c:e7:26:f7:14:b0:af:
                    66:44:37:21:09:55:bb:b0:ea:0d:2a:ce:c8:3e:fe:
                    d7:98:95:d7:8e:27:3a:84:66:f2:ea:37:5d:94:03:
                    d7:9e:6b:57:74:67:8a:36:69:e4:9a:45:99:8a:d8:
                    9c:08:39:e9:78:f7:2d:50:8b:1d:fb:ab:9e:2a:f1:
                    4a:31:db:1c:e3:3a:d1:aa:99:11:70:cf:18:11:09:
                    96:c9:4e:82:85:4c:86:2c:b0:12:04:ce:d8:f8:bf:
                    89:a5:05:da:db:5c:28:56:56:63:6a:9e:2b:7f:33:
                    50:b0:2a:b6:8a:77:36:27:d5:04:df:6c:47:cf:20:
                    a8:83:56:d3:b9:7f:a8:7a:4f:c9:60:9a:fa:26:b0:
                    c8:02:db:3a:b2:cc:1d:4e:cb:05:46:52:13:3f:4c:
                    33:fb:d3:d5:d2:2e:97:27:ed:d2:fd:84:c3:40:dc:
                    1f:e0:06:d8:31:c5:51:1e:d6:74:49:ba:6e:41:42:
                    9c:6c:59:49:ac:a9:99:71:6d:6b:1b:77:a4:35:46:
                    ed:69:f6:7a:94:37:ad:18:1c:08:cd:27:46:49:83:
                    fa:04:7e:1e:8f:75:6d:1b:69:48:cc:ff:bf:8c:98:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:6C:23:40:50:C0:F2:07:95:9B:20:35:99:73:04:61:D9:61:4C
            X509v3 Authority Key Identifier:
                keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:8d:f2:7d:f9:59:5e:58:a5:11:6f:86:5e:9d:6c:b6:9a:
         5e:2a:f4:17:c2:77:73:47:1e:ed:e4:01:8b:bc:76:a3:f9:f2:
         9a:d2:6a:30:4f:d9:4e:6c:9d:f9:e6:58:56:60:5c:4f:bb:20:
         a0:28:66:85:88:6d:d1:1f:69:a4:5c:18:ec:7d:b7:8b:d6:21:
         2e:e5:ec:3a:54:fc:16:ba:36:c3:96:3f:c3:8c:e8:8e:cf:0a:
         12:4d:73:b1:31:08:0e:d7:a3:84:ef:71:b4:3e:86:b6:e4:fa:
         ce:fd:b9:c7:79:f6:e7:03:e3:8c:b0:9c:53:30:ea:09:08:96:
         49:47:7d:b9:0d:9a:69:94:76:b7:c8:0d:16:b4:47:1a:3c:6d:
         fe:69:bf:c3:c4:41:96:03:1b:29:1c:8c:ba:60:6d:14:16:cf:
         90:b1:5a:16:74:43:56:e9:7c:95:81:9f:c1:68:53:c3:bc:df:
         d6:33:4d:bd:61:62:c8:70:e3:4f:e4:21:36:0a:10:24:4d:8f:
         18:42:10:99:b1:7b:5a:d2:4e:d1:34:90:95:9f:09:2b:29:ee:
         1c:08:d1:54:74:e1:9e:6f:9b:b9:60:31:d5:7e:a9:8d:18:83:
         50:71:be:5a:96:ed:c5:1f:8b:97:dd:f7:d2:57:44:07:bd:6e:
         22:2c:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:13:23 2024 by rpki-client on console-ams.rpki-client.org