Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File:                     ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier:          eH6gEz4ByTj7LUvjPVXX0ErCBkI2JuB5u1Ix21VNX+o=
Subject key identifier:   3C:EE:E2:1A:22:7A:7D:B8:A8:03:EE:49:B5:D6:97:C3:7D:0C:B7:B9
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       01901E590E46648A579EDD2248251A29F4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number:          04A4
Signing time:             Sun 16 Jun 2024 00:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:11 +0000
Files and hashes:         1: N31qJRkMl3KkP1zX5vuFxj_suv8.roa (hash: ymfc1JGrYfUiIIGeOSURzKD7V08F5I91VzjO7Zsohr0=)
                          2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: B9aYnQYY41Gxp+Zcan4V413PuTS4FMPzTszXTnqf5M4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:0e:46:64:8a:57:9e:dd:22:48:25:1a:29:f4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Jun 16 00:01:11 2024 GMT
            Not After : Jun 17 00:01:11 2024 GMT
        Subject: CN=3ceee21a227a7db8a803ee49b5d697c37d0cb7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:45:51:3a:9a:01:cb:c3:50:2d:8c:d8:d0:
                    24:b2:c8:ef:54:f5:15:aa:0a:16:95:c8:1f:80:13:
                    f3:00:75:65:c6:b4:97:86:38:44:53:25:52:0c:4a:
                    53:88:10:27:08:97:38:fd:2a:ba:0b:92:75:d6:c8:
                    03:10:b3:f6:ba:f5:4b:e2:36:57:6c:ac:bb:76:00:
                    a6:7f:ed:4e:a4:92:d9:45:59:c5:e4:1a:9f:df:51:
                    00:f6:56:9c:39:a6:59:37:74:c7:50:b8:7a:ec:01:
                    00:cf:d3:79:3c:f6:5d:98:60:69:69:6c:a5:a0:62:
                    04:bb:b7:4c:48:af:97:2b:75:0e:0c:c1:83:b6:c4:
                    a3:6f:3d:90:63:13:91:b5:64:1c:4e:ad:fb:d4:a0:
                    e3:0e:b8:2b:62:21:98:54:70:5f:72:7c:83:1e:08:
                    21:02:67:0a:e6:1b:cb:f7:57:c8:7b:e0:b5:07:97:
                    9e:6c:f2:99:a5:cb:03:cb:f7:5d:c0:ce:97:cc:d5:
                    7a:d0:0c:f4:7f:9f:2c:18:ec:ab:8f:49:69:71:d1:
                    7b:31:42:0f:9a:5e:8a:59:6f:c1:69:c0:eb:f0:64:
                    5d:aa:4e:81:08:05:ea:62:18:fd:e8:30:0d:ee:65:
                    3a:03:a6:e3:be:79:53:90:86:7b:e9:88:77:cc:c5:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:E2:1A:22:7A:7D:B8:A8:03:EE:49:B5:D6:97:C3:7D:0C:B7:B9
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:d8:22:d7:d1:10:6a:9a:02:26:48:b0:53:9b:62:5d:2c:
         cb:ff:65:d4:b1:21:01:88:d0:0b:6d:25:bc:59:4a:74:5f:85:
         63:ad:28:15:83:c4:c2:00:0a:96:13:97:7e:e5:07:90:54:0e:
         2c:3e:40:69:d8:2a:b0:92:d3:77:ad:79:57:36:b0:5b:91:75:
         35:5a:f0:c9:16:94:7b:2e:72:21:c2:ab:c5:ac:20:5d:c1:92:
         31:4f:fa:29:4b:cc:fc:45:6e:c8:7a:9f:1d:aa:e4:ac:fa:2b:
         d9:95:60:a6:bf:6f:dd:58:2d:1a:c8:64:6d:85:7d:4e:02:eb:
         2e:e9:b3:4d:fc:02:2d:67:05:fa:b0:f7:88:5f:b5:38:58:37:
         45:2b:99:f5:77:a8:d2:ed:d0:f7:72:2c:12:14:0f:35:e3:64:
         66:29:3e:f4:36:d6:e9:eb:64:9a:ba:86:ee:1a:bd:b2:9f:73:
         05:89:bf:8b:79:43:4e:a3:c8:f0:66:32:80:79:9b:de:be:f5:
         4d:4e:f9:6a:23:f9:83:87:56:28:45:66:02:b5:1f:69:7a:00:
         e4:9e:6b:1c:08:a9:86:45:33:02:4b:d1:d8:22:38:a5:bc:c3:
         40:b3:13:2d:95:b6:d5:02:fc:44:51:22:f5:8e:52:b3:95:bb:
         3f:54:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:56 2024 by rpki-client on console-ams.rpki-client.org