Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
File:                     LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft (raw, json)
Hash identifier:          J6vSmoKGU2uIJhJj41nAXzJkECTYfa0CjIn7k3xhZ6Y=
Subject key identifier:   64:A5:24:B9:AF:42:0E:B5:EB:C1:0C:48:EC:5D:41:9F:7F:92:B7:92
Authority key identifier: 2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
Certificate issuer:       /CN=2e39d330a5f04067eff9173473d67088abe9196f
Certificate serial:       018F885B07A73D886C63333D5AD55E591585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
Manifest number:          06EC
Signing time:             Fri 17 May 2024 21:00:17 +0000
Manifest this update:     Fri 17 May 2024 21:00:17 +0000
Manifest next update:     Sat 18 May 2024 21:00:17 +0000
Files and hashes:         1: KV-kiWU3FoqNUe8lrpAcdDgf7Q8.roa (hash: z6BC3I2OsjafqMGRJuJJiuCZ0pD1AaFoYmAkm1k5zmI=)
                          2: LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl (hash: 9q1E/Q1+YpklIgPElvVCP+bvlc/WthS1CM7bCKRHnsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:07:a7:3d:88:6c:63:33:3d:5a:d5:5e:59:15:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e39d330a5f04067eff9173473d67088abe9196f
        Validity
            Not Before: May 17 21:00:17 2024 GMT
            Not After : May 18 21:00:17 2024 GMT
        Subject: CN=64a524b9af420eb5ebc10c48ec5d419f7f92b792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:f6:22:a4:0a:f9:50:1d:13:5f:b1:8a:3c:
                    95:3e:27:17:8d:47:b0:43:8f:50:4f:28:02:d6:6e:
                    50:74:9c:6d:f7:93:0a:d5:85:da:1a:83:3b:3a:e9:
                    04:7f:11:10:e9:5f:cd:b5:c5:a4:7d:a8:94:58:03:
                    2b:a9:7e:57:95:44:87:15:a8:b5:23:50:6c:fd:61:
                    a7:8c:ac:6f:20:2b:4f:74:a3:ce:f2:5b:00:14:21:
                    bc:33:20:46:67:69:5e:e7:aa:36:18:39:5a:ea:c9:
                    82:f3:7f:ec:e5:44:42:48:40:e8:a5:11:9b:58:b8:
                    6e:2d:50:07:8c:55:48:d9:d4:1b:95:0b:b5:e1:4c:
                    32:c1:0e:2c:38:49:72:c1:46:83:66:fd:76:53:eb:
                    8c:87:e4:44:1a:9d:df:cb:42:26:1f:31:94:fd:0c:
                    31:f9:70:82:cd:2b:bb:7e:7e:b0:65:2a:5b:43:61:
                    20:0d:cf:52:9e:1b:8f:af:1b:7e:02:39:fb:e5:e0:
                    90:14:11:d4:8f:90:f3:65:77:70:d8:f5:85:d3:99:
                    fb:f2:6b:e3:16:b7:75:6c:46:59:7f:d5:ae:58:3d:
                    9f:4e:5b:03:f6:5a:57:e0:e7:a0:c8:82:11:50:8e:
                    67:dc:54:26:6f:0e:8f:5b:4e:ef:c0:7d:8d:3f:4c:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:24:B9:AF:42:0E:B5:EB:C1:0C:48:EC:5D:41:9F:7F:92:B7:92
            X509v3 Authority Key Identifier:
                keyid:2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:f2:dd:04:3f:95:6b:b6:b6:02:15:37:d2:44:59:4d:1f:
         87:97:bf:a4:d5:86:ec:3b:72:a0:93:45:a8:9a:79:a2:cf:2b:
         0c:7e:d8:95:e5:e9:53:53:f5:b9:69:0c:78:79:95:8f:e5:27:
         a2:eb:cb:ff:5c:91:9a:48:05:96:ad:97:8e:65:de:29:da:3a:
         57:41:2c:29:78:55:1e:aa:45:44:12:3e:8b:31:7c:b8:9f:a5:
         28:32:f1:17:2b:81:f1:4c:82:1e:9e:dd:c2:a1:66:5d:81:8c:
         a3:79:a3:d5:c6:ee:ca:7f:6e:40:86:1c:e0:b7:90:e8:68:9b:
         8b:b1:d5:40:20:29:80:58:be:be:1c:26:32:f9:94:85:32:61:
         5a:db:4b:7d:db:c7:5f:15:25:d0:3b:b1:b1:80:1c:66:5f:23:
         b3:01:73:90:7c:63:84:a1:a7:e8:3f:87:69:80:ac:e8:06:57:
         98:6c:b5:ee:9a:82:e6:e3:7e:8c:8f:3d:b8:b4:ed:3e:7d:cd:
         73:60:19:b8:61:e6:69:62:b5:4f:3a:6d:00:31:30:17:d2:d6:
         13:4a:22:95:5a:5e:56:23:2a:e4:0b:15:1f:ab:b2:dc:a8:9b:
         5f:f5:74:be:06:f7:bd:5a:52:33:94:26:07:a1:1c:0f:ba:c2:
         a6:75:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:05:35 2024 by rpki-client on console-ams.rpki-client.org