Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File:                     lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier:          srg3aDLgqT5Sxad4PBVtJo5BHugHl6IjRkslfeu46Ck=
Subject key identifier:   A6:8D:8E:4A:4F:39:12:DE:81:B0:17:44:01:24:0C:28:26:45:C3:8F
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer:       /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial:       01901DEAF74F6187397A74B6925A37373BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:56 +0000
Files and hashes:         1: AUnkV6XEKtxbP8gm_jE7Z1QsKWs.roa (hash: cPpG8LGNvzjfOetj/9bg4Qamc65v5eZvi2pM37VUI7k=)
                          2: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: qq/9rAtNJTOrolxwDjODFvjV1SV56LNpOZnLyhHMsu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f7:4f:61:87:39:7a:74:b6:92:5a:37:37:3b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
        Validity
            Not Before: Jun 15 22:00:56 2024 GMT
            Not After : Jun 16 22:00:56 2024 GMT
        Subject: CN=a68d8e4a4f3912de81b0174401240c282645c38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:fb:a3:c2:e3:91:8c:56:27:0b:92:70:8a:
                    ab:77:c3:32:84:12:4c:55:c9:ba:e9:a1:0d:43:39:
                    c2:aa:13:87:9a:d4:e0:f7:ff:29:86:f9:ef:9a:7d:
                    ee:81:c0:1c:5b:59:c4:70:7b:39:21:a8:0f:2c:9c:
                    69:08:bd:08:e2:7a:5a:ed:8b:35:ec:af:01:d0:01:
                    12:c1:63:5e:4d:16:26:37:56:ac:df:ce:75:68:fb:
                    08:24:a5:5e:f9:b7:1c:87:13:8c:56:34:81:7f:fa:
                    19:d6:fc:e8:23:fe:3e:f3:1c:cc:99:3f:f2:49:11:
                    a8:0b:9f:d5:43:85:66:4c:3a:64:8a:92:fc:bd:70:
                    79:80:a5:7e:d2:e8:cd:e9:01:25:61:74:5d:86:48:
                    4e:ea:eb:0a:31:81:a4:2b:4f:55:5f:b0:57:0b:8d:
                    df:f1:14:a9:45:b9:7d:9b:3a:97:0e:7e:23:a0:90:
                    db:58:ba:36:f6:00:c8:74:ef:c7:ae:4b:83:73:da:
                    82:cb:ff:0c:a3:9b:69:cb:50:d2:d8:e1:37:6a:ab:
                    7e:0c:ae:9e:35:c0:10:ae:3f:bb:1e:22:40:b6:64:
                    57:f6:ad:27:5a:8d:ad:b3:29:0c:78:83:8f:9d:57:
                    85:f7:c0:56:30:1d:57:1d:bf:df:12:f9:0f:d4:d9:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:8E:4A:4F:39:12:DE:81:B0:17:44:01:24:0C:28:26:45:C3:8F
            X509v3 Authority Key Identifier:
                keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:fd:4d:67:58:58:0b:3d:70:58:d9:e9:7b:5a:44:96:5f:
         02:bd:82:a0:24:a9:a8:e9:d4:42:04:e9:cc:5f:ca:40:39:3b:
         e6:68:91:c8:af:30:8c:63:96:c1:09:a6:55:51:91:ca:10:9b:
         3e:6f:9e:af:44:2f:bf:a7:60:09:ed:66:fc:1a:e7:d3:d9:a3:
         58:7e:d3:bd:10:78:e5:35:7f:7b:ad:5b:de:41:c2:b6:85:18:
         2e:e2:99:6b:9b:9d:10:9c:b5:c4:6d:4d:c0:a8:2d:40:09:7b:
         08:b1:ac:42:c4:0b:d4:e2:e7:19:a6:a9:66:f6:5f:87:5a:ce:
         f1:69:77:4f:ed:6b:f6:32:a6:ce:90:21:81:54:5e:4c:d6:ed:
         b0:03:87:c0:e1:a9:4a:a0:5c:87:18:e0:75:70:85:c7:1f:3b:
         93:43:71:0a:bf:05:0e:e3:1c:38:66:c4:e9:80:84:b9:70:00:
         b5:d2:4f:72:47:f0:f1:d5:78:ec:59:05:96:9c:8b:d9:26:6d:
         6a:6d:5e:ba:b4:9a:ac:16:57:c0:3e:24:9a:75:2b:0b:9a:a3:
         d8:0d:03:2a:26:88:89:d0:c8:31:33:b2:32:10:98:65:a6:8d:
         6f:15:1a:6a:d7:0b:aa:af:fc:d8:15:8e:57:51:ab:b9:03:21:
         37:f9:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:40 2024 by rpki-client on console-fra.rpki-client.org