Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File:                     LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier:          XxkFWGct+ofEWNpWLoZjf6LzNxY/fci+EZFZEXFgyaI=
Subject key identifier:   F0:63:F1:69:79:76:E8:1A:29:6F:62:8B:D9:39:DB:DA:47:31:F2:28
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer:       /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial:       018F874A1DD4584831BC506C9EBFB25ACBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number:          0E0B
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: BE6Irx/XpSFFcTkxvkyC+TJyhG+pN4MA1/LCnjLeV6o=)
                          2: eUmwH2Njm9Tde52InLiStJ-3jio.roa (hash: Q12eDS1fydr78YXs8pfGMhKKNdAoxhioLl1Tg/McMIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1d:d4:58:48:31:bc:50:6c:9e:bf:b2:5a:cb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=f063f1697976e81a296f628bd939dbda4731f228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:31:cf:b1:68:dc:55:86:97:e1:be:bf:24:
                    a3:01:64:a7:36:42:68:2f:21:48:57:27:86:51:a9:
                    e8:0d:fc:2f:5a:1f:96:4f:b8:62:90:e5:89:c4:c9:
                    4e:b0:2c:a7:fb:c1:0b:e3:89:3c:7b:f7:bf:cf:e1:
                    30:43:0e:5d:bc:2b:de:05:f5:94:db:57:09:00:7e:
                    b7:87:2a:b5:7a:76:93:eb:1c:3a:a2:91:39:31:07:
                    e4:df:71:a1:f0:15:3b:3c:3f:86:1c:e6:b6:14:ab:
                    30:96:ef:29:45:ab:8b:06:38:ed:1c:8e:a2:64:8d:
                    db:55:10:85:33:f5:d1:f8:52:d1:eb:51:51:fa:ab:
                    2b:c3:3e:f5:74:2e:38:47:29:12:75:3b:cf:3c:e9:
                    f3:7c:ac:c2:28:c5:80:40:0a:95:9e:93:5c:51:5a:
                    8b:ed:06:dd:0d:75:88:7c:bc:3b:c9:4c:63:e1:4b:
                    bd:ed:e3:1c:39:9d:72:99:8a:b9:6e:b2:f9:6b:fb:
                    1e:00:a9:5c:3f:42:e6:f0:94:81:bd:e4:f4:cd:8d:
                    42:52:43:85:29:50:24:72:81:ab:02:27:69:ca:8e:
                    a3:0e:6f:64:2f:c6:c2:c1:bb:1a:83:8b:52:9e:90:
                    93:aa:61:98:60:f1:11:8b:5e:4c:ba:4b:4c:b8:6e:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:F1:69:79:76:E8:1A:29:6F:62:8B:D9:39:DB:DA:47:31:F2:28
            X509v3 Authority Key Identifier:
                keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:b8:d1:dc:b1:23:d7:b4:ea:97:4b:5c:8b:19:41:6e:2f:
         e1:e4:95:99:c1:16:a3:c7:f3:b6:a9:dd:e2:2c:0c:6a:7f:73:
         68:4c:28:2a:6d:a6:51:3f:f0:16:f1:10:c6:ce:d5:1e:cc:d4:
         cc:ae:09:d2:8a:bd:e4:ba:51:c4:9a:3a:84:9a:a7:db:8e:7c:
         1e:ae:5f:3d:92:53:79:0d:fb:de:8a:43:22:5d:a5:e5:b6:ac:
         a6:54:4e:52:cd:71:f6:a7:b0:43:24:89:75:82:df:16:6f:4f:
         c1:c5:5d:c9:5a:75:bb:11:08:1a:36:6e:3b:e0:a5:0e:22:8c:
         5c:62:64:47:f5:dd:7e:91:1a:90:e0:01:bb:7d:fb:eb:04:71:
         cc:0a:fd:06:ed:7a:8d:84:32:a1:f8:e7:02:e0:8a:0f:9e:ae:
         0f:2e:be:1d:87:3f:a2:a6:e3:b8:df:d1:e4:3c:f0:0c:ee:3a:
         c4:ae:3e:83:6a:42:72:da:50:e6:7a:03:dd:b6:70:01:99:ae:
         2c:9e:27:5d:2e:30:fc:b8:49:92:00:4b:f5:48:31:92:d3:24:
         94:4d:29:5d:76:de:c2:9d:ac:6b:d3:55:8f:01:53:05:db:76:
         cc:b9:16:c6:cb:c5:b8:33:38:5f:b5:04:75:a0:7a:49:75:81:
         d5:f5:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:39 2024 by rpki-client on console-ams.rpki-client.org