Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File:                     li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier:          8I959q8aG5hpYdH6QOLqj7AHfmodXXJTMJ8BMbm2ITk=
Subject key identifier:   14:E2:A4:9E:EF:38:99:75:E3:C3:C4:95:B8:DE:34:06:55:CD:DF:79
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer:       /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial:       01901DEDA5A7B7F58AC72DFDA8E874AB838B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number:          04A1
Signing time:             Sat 15 Jun 2024 22:03:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:51 +0000
Files and hashes:         1: RnwoULn3Xr5y1pgkY5FI0MeRZqI.roa (hash: RgPYk+xoFr3XcpLodSocxBhPztPJhUflynUvvrhV0A4=)
                          2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: uwShXpkSLlVbWy4mDfGfr5NcuS5zSl6HQYq7XTY20xE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a5:a7:b7:f5:8a:c7:2d:fd:a8:e8:74:ab:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
        Validity
            Not Before: Jun 15 22:03:51 2024 GMT
            Not After : Jun 16 22:03:51 2024 GMT
        Subject: CN=14e2a49eef389975e3c3c495b8de340655cddf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:2e:fd:49:e2:cf:4f:39:83:65:6b:cc:05:
                    0b:f5:61:c0:af:e6:20:54:de:b3:d3:42:40:34:c8:
                    e0:44:93:bb:4a:3a:e8:f0:f0:30:d3:1e:65:64:73:
                    d4:05:be:77:0e:2f:c0:29:01:8a:9f:c8:ba:e7:e0:
                    9d:6b:32:1f:6d:cb:0e:e5:f6:97:ce:cd:e4:48:f4:
                    fe:e0:fe:17:78:1d:87:60:07:c4:fd:f4:00:07:e4:
                    a6:f1:67:e5:84:c0:f7:24:a4:c7:e4:30:98:6e:40:
                    40:a5:d9:21:4b:58:09:9c:5a:2b:c5:31:ab:79:cd:
                    58:01:93:b0:1e:f0:f6:5d:ee:0d:07:e3:4b:fb:80:
                    b2:e9:c8:3c:b3:8e:a0:4e:6f:bc:e3:75:56:15:e9:
                    aa:08:f5:6b:f3:1d:ee:fa:69:61:56:0b:15:55:b3:
                    81:96:43:61:5b:e7:e8:4f:34:2e:ae:ce:c6:d3:13:
                    11:67:4a:08:86:4f:16:6f:8b:a7:e7:60:65:d7:ba:
                    47:ae:f4:6d:24:6e:55:fa:b0:e0:34:e9:68:2e:59:
                    c8:10:1a:c0:34:42:3b:94:83:7c:20:91:00:65:dd:
                    7c:3f:87:eb:e5:25:c3:11:8e:05:dc:1b:98:4b:7b:
                    0e:0b:86:0b:8d:1e:7b:97:f3:de:0a:9f:39:d5:b6:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:A4:9E:EF:38:99:75:E3:C3:C4:95:B8:DE:34:06:55:CD:DF:79
            X509v3 Authority Key Identifier:
                keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:9d:c7:cb:d3:aa:c4:1e:1b:b8:44:f9:8e:4c:8c:15:16:
         c7:c3:d3:2f:85:88:b8:7f:64:8e:a6:f4:dc:22:e9:cd:a4:ed:
         d7:05:c5:24:1b:f1:95:e2:05:1d:b6:3f:fd:b1:4d:51:da:fa:
         08:af:59:8a:8c:e8:69:6c:c8:b8:a2:a6:61:50:30:e9:c0:97:
         de:ff:39:b4:fe:91:41:b4:d4:94:05:97:7b:a6:ed:f3:84:bd:
         b0:03:22:a4:49:83:48:3f:4e:28:64:53:f6:fb:9a:9d:49:d8:
         d8:a8:09:af:a9:35:55:25:74:94:50:48:c5:d0:6a:03:42:61:
         18:2c:a5:11:a1:7e:63:4a:2e:ed:a9:f5:2e:6c:73:6e:ee:07:
         92:a7:50:64:1a:97:9e:ab:e6:d0:14:08:90:8e:bf:3b:54:2e:
         14:75:56:5c:39:09:7c:f0:30:b9:9b:14:4e:75:32:3b:70:dd:
         fa:b4:9a:e6:9e:cd:29:e5:e8:55:08:03:12:fc:d4:17:93:4c:
         3d:d4:d2:f1:56:3b:70:06:f3:fb:ee:c4:89:9e:70:79:ed:13:
         8e:6b:75:39:d2:71:be:b3:bb:74:ed:c9:c9:5c:5a:4d:ee:87:
         d6:b6:51:09:e8:fe:4c:f5:13:e8:1f:01:cd:87:dd:88:8a:a0:
         8b:05:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:40 2024 by rpki-client on console-fra.rpki-client.org