Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File:                     LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier:          avfnwI15pD8vNI3Z3fDSHzR25dQ+XTGHQO1AwUHvNMw=
Subject key identifier:   21:DD:3E:EA:5E:66:58:AE:0D:F4:91:66:1C:81:AA:B4:B9:5C:A8:35
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer:       /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial:       019054D941A5EE0F07C70B6EB9984DF9B285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 14:00:42 +0000
Manifest this update:     Wed 26 Jun 2024 14:00:42 +0000
Manifest next update:     Thu 27 Jun 2024 14:00:42 +0000
Files and hashes:         1: 26oa8CODwn2vMfUhIfkvEo_0bts.roa (hash: zAAptls4e58p0KM3V5DO5eCsrFwuIjwcEtcH1B8u6TE=)
                          2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: qD0LgL+uGNjYzOnaKLEUx4PA2IOOmbBMxtw8QZ3Xf8c=)
                          3: k9ZztoSpqS375UGjJ_pX7Yq9hKg.roa (hash: 8L3eqFL3eIDSBXfvUSPjMn5n46lp6xTSSnJ3zT0jzLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:54:d9:41:a5:ee:0f:07:c7:0b:6e:b9:98:4d:f9:b2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
        Validity
            Not Before: Jun 26 14:00:42 2024 GMT
            Not After : Jun 27 14:00:42 2024 GMT
        Subject: CN=21dd3eea5e6658ae0df491661c81aab4b95ca835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:b1:db:5f:81:cd:ec:fd:d6:bd:aa:15:16:
                    81:98:92:d3:d2:4b:ed:9f:4c:a7:a3:31:d0:93:86:
                    ec:df:b2:41:46:04:93:00:04:e4:41:d2:97:b9:1b:
                    8d:9f:3c:c9:60:30:53:ce:3c:a6:a2:72:ff:a7:c9:
                    1e:49:f8:d1:9b:1f:16:4c:a6:ea:26:f6:04:3f:1d:
                    ce:ff:d5:b6:53:89:e8:64:59:08:d6:e7:b6:84:3a:
                    7c:e1:0f:9d:cf:75:64:f6:f5:6f:1e:24:61:8f:4b:
                    44:81:4c:65:4f:cf:32:f8:f9:d3:8e:65:80:a4:94:
                    dd:59:04:a4:26:95:6a:ee:22:ee:dd:82:09:39:da:
                    9b:15:3a:62:4b:33:5f:7c:84:fb:61:b1:7e:dc:4d:
                    1e:4e:ce:62:09:30:57:a2:cc:62:6b:2a:2c:ad:0d:
                    9b:3b:5c:d5:c0:14:d0:27:d4:e9:ee:c7:35:8b:14:
                    84:f8:ec:4d:fa:e2:87:ef:09:c1:1d:1e:8c:3b:d4:
                    2d:76:38:fe:df:44:85:ff:fc:92:11:a3:f2:75:19:
                    d1:a0:44:7a:46:8f:3a:f1:c0:1a:05:47:ac:d2:3b:
                    e6:2d:db:00:be:22:ea:0e:05:05:84:b7:82:29:5c:
                    3e:81:80:18:60:d8:b7:1c:0b:03:d6:f4:cf:8a:73:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:3E:EA:5E:66:58:AE:0D:F4:91:66:1C:81:AA:B4:B9:5C:A8:35
            X509v3 Authority Key Identifier:
                keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:0c:ed:c4:6f:a9:eb:02:88:7a:75:9a:7b:09:4d:2f:68:
         51:48:8f:60:9f:34:65:c8:b5:4f:cb:d9:09:17:97:c9:ac:11:
         60:99:d4:06:4f:2a:a1:9e:df:f0:7f:73:d0:9d:c2:95:24:d9:
         79:f3:ab:09:d1:0d:36:86:94:2a:ab:65:60:e6:86:e0:db:22:
         e6:d9:67:a9:a5:36:b0:41:78:a4:63:44:10:14:06:db:5c:0f:
         4e:a9:64:37:5e:6e:3b:9b:ad:18:9e:84:2a:b5:35:b1:20:91:
         97:c6:00:06:98:19:25:a8:85:36:0a:31:4f:d0:b9:8f:87:4c:
         d9:e5:1b:71:be:7b:7d:df:88:5b:a1:e9:c6:9f:ed:e1:f8:32:
         68:0f:04:c4:ab:ea:57:79:09:99:3b:1b:46:46:28:53:57:4b:
         14:dc:1c:46:42:99:cc:8a:e4:c4:0b:0a:c3:a0:12:6b:66:b6:
         31:39:4e:9c:92:ad:b1:cf:4d:81:23:12:d1:4d:2a:cd:86:3e:
         c4:71:41:95:33:06:d4:08:50:f8:30:17:ae:77:18:c6:68:5f:
         43:4a:67:66:f0:3a:a6:92:09:ed:d1:2d:71:dc:ee:8e:1a:ee:
         9d:31:e5:7f:63:30:95:2d:71:49:a8:38:70:02:c0:8d:11:22:
         bb:f2:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:23:21 2024 by rpki-client on console-ams.rpki-client.org