Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File:                     LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier:          gZjufDNGHAPDC83vvVj6Wu9WZck94rzaqXWzw/mowHg=
Subject key identifier:   90:5E:E7:24:8B:96:BF:5A:5C:92:6D:5A:FA:1B:DF:25:D3:13:EB:6F
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer:       /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial:       01903AE438D387280EDE00D090FFD0103FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number:          11D5
Signing time:             Fri 21 Jun 2024 13:02:33 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:33 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:33 +0000
Files and hashes:         1: 1-C13rJoh_2AG3349xoorPIufciI.roa (hash: jYnBANgVl9Odqh9yLErT/DVhNquN6U8W1KyVQOLPgcU=)
                          2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: 8mSGt/S0ZYOmkSkWgdjRiELLd2DxCbvwtligY3ZhIN4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e4:38:d3:87:28:0e:de:00:d0:90:ff:d0:10:3f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
        Validity
            Not Before: Jun 21 13:02:33 2024 GMT
            Not After : Jun 22 13:02:33 2024 GMT
        Subject: CN=905ee7248b96bf5a5c926d5afa1bdf25d313eb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:f8:7e:53:0c:8a:c3:b2:f2:11:68:c3:c3:
                    32:68:a8:f3:cb:a2:25:54:ea:f7:c6:6a:da:43:08:
                    12:b3:3d:5b:30:7a:24:66:8d:c9:97:bd:d4:2d:81:
                    c7:36:f9:0b:fa:90:9a:05:8a:c1:f6:fd:e1:a4:78:
                    a4:f9:62:7d:30:eb:d7:f8:af:79:c0:df:f9:23:f5:
                    d0:57:90:9a:59:dc:50:17:0d:fe:38:c3:d9:35:d6:
                    ee:07:1f:17:f8:12:c2:51:62:e4:34:4f:7f:7b:c9:
                    09:46:48:a7:7f:60:9e:f5:70:dc:0e:ae:96:15:b7:
                    d1:38:a0:36:7c:6c:59:8f:7e:6c:d7:06:26:01:7a:
                    25:79:c3:23:a5:36:fc:24:44:3a:a0:72:ea:18:18:
                    2c:fc:12:bb:1c:ad:4c:0d:03:75:ad:18:25:19:91:
                    77:0d:6d:04:b2:6f:2d:48:4e:55:3c:59:46:cd:a9:
                    43:39:87:45:e5:a6:c9:8d:57:35:01:3b:f6:4d:10:
                    41:ce:cc:13:09:2e:e0:9e:d5:52:95:4d:87:35:ce:
                    6b:9d:7a:8c:e8:06:86:37:38:a5:ec:ca:4b:c3:60:
                    03:f0:b8:c2:7b:96:3d:32:d8:6e:25:b7:83:69:00:
                    54:5c:a6:f3:51:ce:5e:71:be:9e:ce:95:90:6f:dd:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5E:E7:24:8B:96:BF:5A:5C:92:6D:5A:FA:1B:DF:25:D3:13:EB:6F
            X509v3 Authority Key Identifier:
                keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:87:d6:12:ac:40:ab:fd:e3:77:e6:7d:87:a0:17:8f:59:ac:
         cb:4d:f1:e6:cc:5a:ac:2c:59:fc:4c:a4:54:a9:a6:37:14:67:
         a3:0c:48:44:a9:27:5c:d3:23:3e:92:f9:2b:16:fe:d9:0f:4b:
         79:66:12:26:d7:66:8d:ed:77:62:d2:b5:de:84:06:5e:f1:ea:
         d1:19:9f:f6:ad:f3:47:5c:58:71:bb:5b:f4:11:15:41:f9:54:
         a9:16:81:50:4b:e3:e0:fb:18:16:99:06:03:f1:5c:80:63:f8:
         1f:61:3d:c9:c2:f9:2e:42:82:20:37:3e:bf:7f:46:1f:d3:63:
         c9:10:b7:14:d0:b6:e1:3e:46:f5:64:9c:ae:4c:95:51:22:1e:
         28:ef:92:ec:fd:24:0f:0a:6b:13:4e:59:d1:de:f1:e8:b9:36:
         0b:75:eb:04:55:de:96:7d:5c:89:5b:57:ab:25:22:2e:d5:1a:
         71:4e:a5:b0:ea:7a:2c:99:ce:f8:9e:5d:3c:50:1c:36:94:90:
         3e:64:0a:77:4d:6a:1c:f1:c7:fb:10:20:c6:5c:61:1b:9b:09:
         74:9a:2d:79:6a:93:a0:8d:00:5b:c5:fe:1e:95:04:c5:5b:8a:
         b9:ef:04:73:4f:6e:f5:b4:c2:e1:94:b0:2e:57:1c:7f:a8:1b:
         69:f7:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:45:12 2024 by rpki-client on console-fra.rpki-client.org