Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File:                     ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier:          ThVH8l+BzX9/YNpnObdHXlX6kqIjKi2vmsTQ2RcCt0w=
Subject key identifier:   D7:1C:90:83:0F:7C:F8:8F:8E:D8:B0:A3:EF:5B:E9:E6:31:09:A0:91
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer:       /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial:       018F885B1E03B8D72479D870A676E78BBD66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number:          06B4
Signing time:             Fri 17 May 2024 21:00:23 +0000
Manifest this update:     Fri 17 May 2024 21:00:23 +0000
Manifest next update:     Sat 18 May 2024 21:00:23 +0000
Files and hashes:         1: SrEQg-73NxeORXx-IjzzpRS8ObQ.roa (hash: KkN+fARZreN3FliVgp12puEw552bCwePBqYvpvVdgrQ=)
                          2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: 9+dW/QBwLxym5uSPQXbJhl2ISO16m9GPXwTknT6Y7bs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1e:03:b8:d7:24:79:d8:70:a6:76:e7:8b:bd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
        Validity
            Not Before: May 17 21:00:23 2024 GMT
            Not After : May 18 21:00:23 2024 GMT
        Subject: CN=d71c90830f7cf88f8ed8b0a3ef5be9e63109a091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:8a:a6:9b:dc:bd:c4:33:fc:54:aa:00:57:
                    1d:47:a5:45:42:2a:f2:eb:0d:40:47:f4:2d:f8:11:
                    a7:b8:9f:87:a0:ed:16:ff:74:01:52:a5:d6:d8:d3:
                    5c:c0:28:62:ee:f0:6a:26:ea:4f:77:5f:ef:72:f0:
                    5d:67:4a:df:47:b0:f1:45:59:40:71:e2:7b:f9:e0:
                    8a:ee:60:fd:42:70:85:19:43:b8:64:74:6f:f5:38:
                    8b:26:31:d1:96:c2:ec:89:80:a0:d1:8a:ae:33:75:
                    b2:bd:f2:2d:65:c5:89:2b:c2:33:98:b4:cb:4f:13:
                    e4:a1:15:a9:e5:84:80:00:e9:c1:57:71:3d:6e:cc:
                    7b:7f:2d:ff:4e:0f:72:66:82:1a:f8:5a:73:9f:4d:
                    b7:f3:e7:da:f8:29:2b:11:a4:78:a1:32:6b:b4:fa:
                    28:50:ac:31:1f:10:9f:97:54:90:b3:4f:33:07:b1:
                    26:81:75:2d:c0:28:df:43:44:a0:94:d4:64:ab:0f:
                    19:9e:fc:5f:36:6a:b3:3b:e0:4a:9b:7d:8e:e8:98:
                    03:cd:f5:61:d1:c2:a3:84:27:df:77:3e:6a:e3:47:
                    41:71:38:96:32:2c:10:c0:58:86:4c:78:e1:c9:ba:
                    c4:a7:69:8b:da:35:ba:ee:b1:26:44:e4:47:7c:10:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:90:83:0F:7C:F8:8F:8E:D8:B0:A3:EF:5B:E9:E6:31:09:A0:91
            X509v3 Authority Key Identifier:
                keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:71:69:ae:80:44:8f:fa:f7:e6:b2:95:1e:61:58:54:28:7e:
         d3:03:e6:2e:fa:a4:8a:93:be:22:de:e1:06:de:aa:05:b8:83:
         2e:c6:66:0c:dc:ca:aa:0b:b5:f5:56:0d:ce:65:41:85:7f:85:
         9c:37:d4:47:43:2e:83:bf:5d:73:b4:20:4e:14:89:7a:47:9a:
         06:04:5b:a7:b2:86:f4:bb:f0:d3:0b:cb:b8:c9:dd:1a:df:72:
         bc:ed:52:3b:82:94:83:53:06:94:09:87:97:36:7f:60:a7:08:
         1e:87:88:47:03:36:db:de:41:e1:49:ed:10:de:92:ea:91:70:
         ff:05:bd:34:2c:de:ae:8f:a4:d4:4c:56:66:c0:ba:cf:0f:7a:
         9a:01:f2:62:c1:2f:b8:6f:4a:df:a0:f7:ca:3c:f5:8a:55:65:
         4e:e1:66:43:b3:fb:7f:34:28:1b:2c:49:27:9c:f5:f2:e1:92:
         98:c4:a4:61:ce:23:39:8f:49:84:d8:01:38:97:c0:ef:75:e1:
         31:ad:2b:30:05:4c:d7:47:ca:f4:f0:78:ab:0a:ee:88:70:ed:
         38:f3:b2:9a:86:ef:85:1d:2e:cd:d9:1b:a8:9e:61:60:76:d0:
         ee:e5:04:03:69:d1:af:9d:3d:15:7a:1e:06:c3:d2:30:df:90:
         d9:d8:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:59:51 2024 by rpki-client on console-fra.rpki-client.org