Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          uemWBRohEw4rlXt1IGLG9RKBKW+bSWIl7I8lTm3wLAk=
Subject key identifier:   4A:47:60:B2:BB:ED:44:FC:05:A1:7F:79:E2:4B:70:4A:D7:5A:B7:18
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       01902ACB2F7ACB6BC3781527E5744289C230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          11D0
Signing time:             Tue 18 Jun 2024 10:01:17 +0000
Manifest this update:     Tue 18 Jun 2024 10:01:17 +0000
Manifest next update:     Wed 19 Jun 2024 10:01:17 +0000
Files and hashes:         1: j6vn8Tq4QfV68pFE4XqinT6qF38.roa (hash: PVJRhd+fm5M+yXEvk2nEvEWt6WQa4VaNHakcskBTtYY=)
                          2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: fojrqr1d/w+7WkMR80NWen3laR+roiE0D0pd4UvbPPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:cb:2f:7a:cb:6b:c3:78:15:27:e5:74:42:89:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Jun 18 10:01:17 2024 GMT
            Not After : Jun 19 10:01:17 2024 GMT
        Subject: CN=4a4760b2bbed44fc05a17f79e24b704ad75ab718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:cd:f1:a2:a1:1e:b3:f2:4a:60:5e:a0:0d:
                    b0:03:7d:b2:14:b2:98:0e:85:32:93:40:ca:a4:3b:
                    db:c3:ae:b8:ef:9e:6c:84:a5:1b:00:12:66:0f:3e:
                    86:e8:aa:e4:84:23:8b:cf:cd:fd:ce:43:1b:f3:59:
                    e7:33:7f:21:52:64:e7:c4:45:de:9e:d3:02:fe:da:
                    56:b0:a4:35:83:1e:30:f6:2d:36:d7:83:1b:5f:52:
                    ab:28:ba:2e:a8:a5:0c:b6:98:76:29:12:e3:1c:f7:
                    7b:10:b4:fd:8c:b0:60:ac:4c:3b:d2:0b:6e:94:c3:
                    56:8d:81:b2:d5:da:f4:a8:61:ff:26:0d:bf:c6:68:
                    66:3c:b3:e4:0d:32:88:d6:79:81:8a:89:3f:7b:8a:
                    e0:aa:5f:a0:a7:08:2e:4f:a4:8c:15:c1:eb:68:13:
                    81:aa:77:6c:e0:77:16:12:b4:aa:e0:ce:1f:43:4a:
                    da:b5:5a:1a:22:21:5b:d8:a1:0f:e3:76:bb:89:6f:
                    83:a8:fa:59:84:70:cc:f2:32:17:68:b8:bf:48:6b:
                    73:2c:19:f0:28:cd:05:12:8c:75:9f:0b:54:a6:5d:
                    67:47:aa:07:f7:f4:ad:97:ef:8b:74:bf:9d:72:68:
                    df:c0:16:d9:4c:d4:ac:49:f6:93:be:a3:a7:74:76:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:47:60:B2:BB:ED:44:FC:05:A1:7F:79:E2:4B:70:4A:D7:5A:B7:18
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:47:d4:4b:d4:b8:c2:c3:fa:da:be:98:71:4f:c7:ac:a2:
         3b:d8:3e:7e:88:d0:e6:b4:50:65:93:2b:73:12:29:37:ca:b7:
         10:e7:e5:af:5b:dd:87:53:9f:40:8f:a2:b9:39:cb:e8:96:a0:
         96:44:42:64:df:e0:c9:21:91:53:e8:0f:95:a4:5b:bd:51:17:
         07:d2:c2:8e:eb:8d:2a:df:43:aa:a7:51:a7:37:7a:2c:c0:67:
         38:fe:16:07:06:ba:de:00:57:66:f1:8b:c3:62:54:cb:29:37:
         1e:b6:34:99:c9:ec:c4:14:a7:b7:9e:85:23:ea:85:a7:33:60:
         13:9e:42:17:a6:54:f0:fa:bb:64:d7:8c:9e:0c:dc:6b:10:84:
         08:ca:89:a3:28:1e:9a:f4:85:ee:61:74:26:f4:d3:ed:73:67:
         6e:d2:87:7f:ac:05:0b:93:af:a7:e0:6d:f1:7d:4c:42:62:05:
         77:c2:0a:0a:db:bf:12:19:1a:69:91:64:e9:c2:4e:db:b1:8a:
         f8:15:e3:33:d6:da:d2:d9:47:31:11:05:57:98:46:18:a0:a8:
         43:00:09:00:01:9a:7b:78:7f:ba:d9:96:2f:c3:c0:ed:d3:2c:
         dd:5d:3c:22:c9:62:d4:4f:6b:e0:6e:a4:c9:18:97:23:ec:2e:
         cf:d4:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:03:15 2024 by rpki-client on console-fra.rpki-client.org