Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File:                     lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier:          GWT7f6003f917lW/fNHqg7CMgNqdhN9J1hPX4NsMjpk=
Subject key identifier:   3B:2B:3D:78:21:E5:FD:9D:43:2F:40:42:94:AF:42:1F:2F:35:B5:91
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer:       /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial:       0190520FE2C6C25D8B36FF7065ED404837A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number:          040A
Signing time:             Wed 26 Jun 2024 01:01:30 +0000
Manifest this update:     Wed 26 Jun 2024 01:01:30 +0000
Manifest next update:     Thu 27 Jun 2024 01:01:30 +0000
Files and hashes:         1: kcjDtJPy5EM5G8_3UsoJZYtrR4o.roa (hash: GX48a21Jh8MgumoipKA2/jUj9OT38O6M3KgqCrBkBJA=)
                          2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: kJ6AxEzR+L0liuqW18vqLwkUitq1pZiDxPMqRygbXPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:0f:e2:c6:c2:5d:8b:36:ff:70:65:ed:40:48:37:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
        Validity
            Not Before: Jun 26 01:01:30 2024 GMT
            Not After : Jun 27 01:01:30 2024 GMT
        Subject: CN=3b2b3d7821e5fd9d432f404294af421f2f35b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:5b:18:67:52:57:d5:e4:44:ab:3b:d0:ec:
                    e3:0c:11:b5:fa:9e:f7:9b:61:9b:44:93:1a:32:3e:
                    97:e1:2c:81:20:25:af:57:d9:52:97:63:e0:75:5d:
                    3a:e0:ca:36:12:3d:4a:27:ed:ba:03:3d:4a:35:73:
                    d1:a4:16:98:eb:68:d8:f4:63:28:92:70:13:79:5f:
                    33:2e:38:69:31:68:09:f0:2a:61:48:31:6b:2a:b6:
                    a8:91:7b:10:45:78:b4:73:ad:3d:7b:b7:06:50:10:
                    38:89:50:d0:f0:cd:ef:e0:4b:1a:6f:c2:24:49:92:
                    83:62:28:e0:e0:c0:4a:48:e1:6e:44:f3:d6:c6:0a:
                    7f:e5:3a:1f:4a:50:47:b6:01:0e:0c:ed:55:dd:81:
                    f9:bc:c1:1f:3c:39:2a:4e:ac:56:6a:5a:bb:99:e0:
                    a0:87:fb:ea:73:18:99:d6:55:a4:35:fe:73:ef:62:
                    83:d8:15:ef:0e:ca:bd:cf:3f:52:d7:ff:91:2c:5f:
                    32:61:44:52:d4:02:9a:fb:d4:94:c9:94:a3:7a:79:
                    48:b1:14:b3:c3:68:b4:25:a8:59:4c:53:13:c7:a0:
                    e5:77:9d:38:22:5a:61:09:fd:fe:92:69:26:40:3d:
                    8a:23:c7:dc:cb:31:cb:50:f5:c0:c5:2f:1a:ad:c1:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:3D:78:21:E5:FD:9D:43:2F:40:42:94:AF:42:1F:2F:35:B5:91
            X509v3 Authority Key Identifier:
                keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:61:3e:37:ea:9f:89:b1:a8:eb:c3:75:49:36:a8:80:fc:
         91:48:9a:94:9f:6d:bc:da:7a:47:b4:f3:03:b3:3a:30:d9:f8:
         ec:21:a0:c7:de:14:72:16:4d:b6:45:fc:b4:4a:1a:5d:b6:38:
         2c:e8:b9:3b:68:80:32:b8:dd:7f:83:eb:43:10:7f:c7:2a:ca:
         df:82:0a:b5:97:eb:12:65:fa:44:a7:66:3b:a4:d6:c3:ee:37:
         21:97:6e:26:12:77:76:13:4a:dc:34:88:47:21:7f:0b:62:fd:
         e5:42:5e:20:af:04:6f:03:55:02:60:cb:46:9d:a0:9d:a8:dd:
         9a:8b:67:62:7f:bf:27:c0:db:a9:99:16:fd:28:4b:01:b7:cb:
         7f:ef:15:8b:83:28:0f:d2:8b:ee:96:4b:3f:13:37:f6:9f:37:
         d1:56:6d:0d:7f:92:31:c9:54:be:e0:ea:71:97:4b:e2:08:4c:
         a3:38:3c:de:fd:8c:54:bf:d4:70:44:2b:43:45:ff:05:66:f6:
         36:72:b3:8b:44:af:2d:ac:dc:da:a7:c4:19:be:df:60:74:27:
         ed:77:8d:4e:b7:cf:15:e4:17:39:8b:4e:e8:67:a4:50:62:1e:
         8c:f3:4f:10:db:70:0d:04:97:f6:b0:ca:a0:95:a1:ce:19:b9:
         ef:8a:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:49:55 2024 by rpki-client on console-ams.rpki-client.org