Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File:                     Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier:          u7UbxgwuU87Qzc/2KNm02ZpFLtUHF8dk4hRvPlOBDEo=
Subject key identifier:   41:B4:2F:A7:48:B2:88:A5:D7:4E:D9:E6:6C:E9:2D:FE:C0:43:D6:A6
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer:       /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial:       01906DF40532FD5581BFE92DB5CDD5D6717E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number:          11EE
Signing time:             Mon 01 Jul 2024 11:00:26 +0000
Manifest this update:     Mon 01 Jul 2024 11:00:26 +0000
Manifest next update:     Tue 02 Jul 2024 11:00:26 +0000
Files and hashes:         1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: a3Yis+VdVbCSe1iefMMUdVExmIGAFaoPSwCZlnoHFvI=)
                          2: eEbiDGdUtdDbwe6zCkntuD8hyJU.roa (hash: SF0OiKwA9Gfu9v6t973wmyNn5QZ8Ki78iu1QYgU19dg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:f4:05:32:fd:55:81:bf:e9:2d:b5:cd:d5:d6:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
        Validity
            Not Before: Jul  1 11:00:26 2024 GMT
            Not After : Jul  2 11:00:26 2024 GMT
        Subject: CN=41b42fa748b288a5d74ed9e66ce92dfec043d6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ba:02:2b:a8:c8:4b:c8:cb:4b:d2:b3:da:1b:
                    7e:4c:61:c6:24:ea:95:32:e5:37:d8:7b:10:ef:c5:
                    31:c5:6f:cb:1f:46:99:9f:b5:0d:07:1c:0a:b4:91:
                    f3:51:59:5a:f0:f8:10:46:c9:f1:04:cd:e0:4f:72:
                    b7:2f:aa:c4:0c:43:b3:f2:de:19:84:95:6d:5a:7e:
                    29:6b:97:4d:05:f3:9d:cb:c2:41:1b:bb:16:d7:82:
                    f9:9b:50:64:01:6f:3c:b5:1b:6f:70:f2:2b:d1:4d:
                    47:10:65:b7:32:d5:e3:85:47:95:b7:c8:29:9b:30:
                    2c:60:69:b8:97:e8:11:0e:50:ea:9f:24:48:4e:ae:
                    2e:19:d8:dc:c1:dd:4f:fc:fc:a6:21:f2:ed:db:50:
                    32:42:21:71:38:05:fa:d0:3f:6f:f7:a3:63:7d:22:
                    a5:63:5e:7b:04:e9:f1:83:39:aa:00:f0:61:04:19:
                    a2:da:2d:fd:16:8e:01:89:f7:55:2c:f4:9c:4c:99:
                    25:a7:a5:0f:d0:44:1e:68:11:f3:a1:eb:81:46:8a:
                    31:8e:cd:18:0b:37:d5:84:69:7f:a1:12:44:a0:91:
                    53:bf:76:6f:75:eb:86:b6:f6:5a:4d:24:05:24:56:
                    0f:e0:a5:5d:ff:dc:09:42:47:70:39:d4:45:ac:a5:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:2F:A7:48:B2:88:A5:D7:4E:D9:E6:6C:E9:2D:FE:C0:43:D6:A6
            X509v3 Authority Key Identifier:
                keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:76:14:d3:06:77:49:77:99:36:64:cc:b6:97:dd:b1:53:97:
         1d:56:4c:4a:3d:f8:f8:b7:57:bd:b7:35:14:af:32:fb:2a:b6:
         0e:f3:5f:d5:58:5d:8a:1a:1e:97:fe:e6:74:bd:10:55:0c:1a:
         4f:48:ea:7b:3b:6d:50:83:32:11:d8:fa:c3:61:a8:d1:dc:20:
         6c:12:72:8f:00:d0:22:a1:98:c9:7f:79:18:09:17:f1:12:24:
         94:b6:96:e9:63:e1:04:d7:88:2c:eb:43:05:c6:d0:24:5f:74:
         a9:99:89:2a:e6:51:f6:19:6c:a6:94:41:98:ac:b3:2c:a8:62:
         a0:8f:92:17:27:bb:1e:f9:67:7d:ec:84:cf:aa:0a:8f:5c:55:
         55:d4:95:62:29:81:23:59:25:21:9a:10:c3:06:3a:34:b5:12:
         9b:11:0b:bb:31:3e:ae:97:2d:82:b3:22:fe:3e:e2:60:a4:cb:
         49:e1:a0:a2:77:ca:90:b7:0e:41:23:59:4c:2c:8a:71:ed:f5:
         25:34:9d:1d:52:03:0f:bd:9d:a6:19:18:ff:c0:2d:fe:f1:6f:
         44:76:0c:3a:be:28:63:20:97:c9:a4:eb:d8:42:37:3e:4a:07:
         25:59:88:b1:65:5a:f1:bb:de:cf:ae:4e:95:7f:c6:63:aa:c5:
         a9:78:87:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBt9AUy/VWBv+kttc3V1nF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1
ZjU2NTgwHhcNMjQwNzAxMTEwMDI2WhcNMjQwNzAyMTEwMDI2WjAzMTEwLwYDVQQD
Eyg0MWI0MmZhNzQ4YjI4OGE1ZDc0ZWQ5ZTY2Y2U5MmRmZWMwNDNkNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLoCK6jIS8jLS9Kz2ht+TGHGJOqV
MuU32HsQ78UxxW/LH0aZn7UNBxwKtJHzUVla8PgQRsnxBM3gT3K3L6rEDEOz8t4Z
hJVtWn4pa5dNBfOdy8JBG7sW14L5m1BkAW88tRtvcPIr0U1HEGW3MtXjhUeVt8gp
mzAsYGm4l+gRDlDqnyRITq4uGdjcwd1P/PymIfLt21AyQiFxOAX60D9v96NjfSKl
Y157BOnxgzmqAPBhBBmi2i39Fo4BifdVLPScTJklp6UP0EQeaBHzoeuBRooxjs0Y
CzfVhGl/oRJEoJFTv3ZvdeuGtvZaTSQFJFYP4KVd/9wJQkdwOdRFrKVj0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG0L6dIsoil107Z5mzpLf7AQ9amMB8GA1UdIwQY
MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt
OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl
LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2XYU0wZ3
SXeZNmTMtpfdsVOXHVZMSj34+LdXvbc1FK8y+yq2DvNf1Vhdihoel/7mdL0QVQwa
T0jqezttUIMyEdj6w2Go0dwgbBJyjwDQIqGYyX95GAkX8RIklLaW6WPhBNeILOtD
BcbQJF90qZmJKuZR9hlsppRBmKyzLKhioI+SFye7HvlnfeyEz6oKj1xVVdSVYimB
I1klIZoQwwY6NLUSmxELuzE+rpctgrMi/j7iYKTLSeGgonfKkLcOQSNZTCyKce31
JTSdHVIDD72dphkY/8At/vFvRHYMOr4oYyCXyaTr2EI3PkoHJVmIsWVa8bvez65O
lX/GY6rFqXiH0w==
-----END CERTIFICATE-----
Generated at Mon Jul 1 14:14:01 2024 by rpki-client on console-ams.rpki-client.org