Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          I8WtrW3GmNLq6iqhmUKGZQQf1VAVhMjESnU9Y5h5feE=
Subject key identifier:   6E:A5:07:F2:D0:A1:EE:C0:34:FB:36:31:20:82:50:63:EF:9A:E3:01
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       01901DEDA04345D2D09739AB496DCE213B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          0BEC
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: LdHM0G00gAp7s7NH_fshDoMWgMI.roa (hash: eK2lrS8HOFpDceZOfMdtj0ms/dpiJIB8Sx4elqgfGr4=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: BNwSuX3S5Ub1uHzM2+6AcnSe4WNY9ZVYpJ3UDYPU/IE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a0:43:45:d2:d0:97:39:ab:49:6d:ce:21:3b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=6ea507f2d0a1eec034fb363120825063ef9ae301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:fe:f0:a3:78:f9:d0:13:c7:d1:ca:6e:1e:
                    71:b3:94:47:2d:ea:86:1e:50:ca:10:37:56:5c:08:
                    b8:ff:55:98:49:bd:2b:0e:31:27:f5:cb:78:52:0e:
                    9c:11:62:07:65:1f:9b:01:a1:b0:42:35:89:ae:91:
                    21:24:c1:c5:e4:62:5e:5e:19:d5:d9:5f:85:62:cb:
                    8f:e2:0b:db:45:11:ca:73:1c:48:5a:f9:53:b7:a7:
                    4e:c9:53:5a:1b:c6:0f:9f:f2:54:0b:51:a3:b6:ff:
                    87:4b:40:ef:d4:ce:79:40:0f:8a:ce:ee:5f:78:47:
                    70:c1:9c:c0:d0:37:bf:91:76:65:76:f4:9d:9a:de:
                    fb:f0:18:f6:e1:a3:07:e5:ed:77:03:6b:a0:7e:07:
                    0f:cc:b1:98:76:a0:14:3c:dd:27:1c:49:34:93:6d:
                    09:1a:ca:71:b4:8c:70:95:6c:66:9a:e4:85:ee:8a:
                    bc:f9:0e:33:59:3d:14:6a:0e:5e:ca:c1:64:f6:fc:
                    c9:c8:4e:5a:9a:ce:2e:d9:e8:99:12:09:28:5c:78:
                    c2:f1:22:f5:75:88:69:2d:71:8a:ef:b1:45:47:92:
                    74:4a:db:70:ac:f2:0b:3c:6c:92:85:59:8f:a6:e8:
                    19:9e:23:25:45:ac:6f:ef:36:10:52:e3:05:87:10:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:07:F2:D0:A1:EE:C0:34:FB:36:31:20:82:50:63:EF:9A:E3:01
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:07:13:32:d0:fb:d5:19:08:03:33:aa:4e:62:03:6f:fd:07:
         02:0b:6a:36:85:51:3e:65:ae:94:f2:39:5d:c9:07:aa:ed:c7:
         d3:5f:8e:18:1b:88:63:de:92:08:e5:6a:d3:77:72:47:ee:dc:
         73:1a:28:3c:80:64:e5:71:90:eb:fa:f1:a8:50:ec:d1:a4:1b:
         43:0d:6f:f1:7e:08:f4:a7:27:9b:38:4b:8b:c2:1f:a0:2c:4d:
         5c:c9:d4:00:f7:4c:3d:6c:e4:93:43:7c:d2:31:b9:a1:16:8b:
         f3:5f:fb:29:f8:9f:d9:7c:3c:47:b1:9c:4c:fc:3e:dc:99:4e:
         b0:43:fa:dc:49:e2:86:f9:bf:7a:97:91:c2:d6:f2:08:8e:07:
         b8:e2:63:07:22:59:75:88:3a:44:1e:fb:09:4c:ad:df:3b:4a:
         7c:80:26:8d:7e:de:a6:b8:ac:6e:bc:f0:76:15:07:02:3a:ec:
         d1:c4:3b:d1:83:aa:31:dc:18:e1:d6:8a:83:a0:a2:04:3c:57:
         d9:4a:b0:e3:f3:4b:c4:16:35:15:9c:5f:e7:f4:b9:b0:22:c3:
         63:cf:28:4f:ea:2c:f5:4e:eb:7d:75:f8:9a:f7:b1:f1:41:00:
         ec:fe:e9:ad:2c:9f:2e:d8:ac:40:97:a9:29:90:2d:fc:7c:8f:
         75:d8:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:20 2024 by rpki-client on console-fra.rpki-client.org