Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
File:                     lUBmkfLjdO43pkBJKjZN_FO6RBI.mft (raw, json)
Hash identifier:          W+yPHoJC79nu9pl5P5cnAhbx5k3BKPdrWzJL2UMcrqk=
Subject key identifier:   9F:6B:E1:0A:3F:7D:1F:9C:99:81:C3:50:6B:4F:EC:84:6A:B7:33:24
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Certificate issuer:       /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial:       01905358D63790A47EB0BCFF33D519E1652D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
Manifest number:          11E3
Signing time:             Wed 26 Jun 2024 07:00:49 +0000
Manifest this update:     Wed 26 Jun 2024 07:00:49 +0000
Manifest next update:     Thu 27 Jun 2024 07:00:49 +0000
Files and hashes:         1: MgovnyBuiQJnDJrFLNV-JS6Zatw.roa (hash: mbaOxBIV4Nsoc0MM1/Uy46D/rKsQE3Ree//AGKtAi8I=)
                          2: OCfk8a4AVa7fwNgkHNEQMnss8E4.roa (hash: aynvRDkjlUgqMpx+ScZgdMmALbmwshDelkQVQPOOxxY=)
                          3: lUBmkfLjdO43pkBJKjZN_FO6RBI.crl (hash: WH5xw3lyLrnyyDc9ty9XIufta4i3qvo/BpdjDGKNjpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:58:d6:37:90:a4:7e:b0:bc:ff:33:d5:19:e1:65:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
        Validity
            Not Before: Jun 26 07:00:49 2024 GMT
            Not After : Jun 27 07:00:49 2024 GMT
        Subject: CN=9f6be10a3f7d1f9c9981c3506b4fec846ab73324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:f2:8e:91:a8:ae:c4:8d:f0:36:30:07:8b:
                    29:c7:d7:5b:f5:b1:77:ff:02:58:f4:b0:31:61:8a:
                    55:30:fd:82:4e:6f:65:50:91:6f:14:47:c7:d5:93:
                    78:b3:b4:30:ab:13:62:22:a4:e8:cd:6f:2f:18:5d:
                    1f:60:d6:5f:80:91:04:9e:55:2a:a2:01:15:cc:9e:
                    1c:02:48:5d:7f:f5:60:18:7f:cd:98:21:6a:a7:c7:
                    27:4e:e5:b8:55:db:c6:bd:b8:a6:33:b0:81:46:00:
                    24:be:98:88:9a:37:af:0b:ed:bc:6b:33:c6:65:7c:
                    8d:3f:38:55:ba:17:37:36:9f:48:89:23:11:af:54:
                    dd:be:f4:31:e3:47:c6:61:73:f8:7b:60:79:8a:fe:
                    b4:09:7c:f9:a9:b5:86:23:b2:49:ee:7a:23:a3:cc:
                    7c:8c:c0:df:1f:42:08:ac:15:ed:2d:bd:f2:ea:0d:
                    58:01:33:15:fe:fd:61:bf:83:b5:c4:4a:7f:7d:18:
                    82:b1:ab:b6:1d:d0:68:03:f7:b9:9d:df:ac:3c:d9:
                    d8:1e:74:25:4e:00:85:8e:1c:1d:c2:aa:53:57:65:
                    33:87:58:cb:27:80:0d:ed:57:36:40:64:57:ae:2a:
                    a2:4c:12:1e:4f:77:7f:f9:5a:53:38:fa:f7:a3:29:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:E1:0A:3F:7D:1F:9C:99:81:C3:50:6B:4F:EC:84:6A:B7:33:24
            X509v3 Authority Key Identifier:
                keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:2b:68:b1:e6:f0:55:da:62:a7:ca:3c:90:42:d1:72:65:
         a5:9f:df:06:9f:97:fc:63:af:b5:cf:59:7e:0f:3e:65:e0:f0:
         0f:5d:03:96:a7:80:eb:db:d3:dd:5f:0f:ae:5b:c0:ca:85:b2:
         42:12:d2:df:50:83:72:02:be:93:f4:98:48:71:17:09:30:a6:
         8d:4a:75:25:62:01:20:57:f5:8c:84:44:42:43:96:bc:2b:21:
         34:f1:fa:be:64:3b:77:bc:7a:49:4c:2a:ec:ad:2e:41:d9:57:
         4e:e0:f1:1b:7d:f4:c2:b7:ac:5d:11:33:4d:dc:6a:cd:0c:7d:
         ef:d7:da:83:4d:15:07:78:e7:05:0a:9a:f0:0a:53:d4:e4:f6:
         c1:a0:86:5e:20:98:65:d3:93:7d:bd:3b:51:be:9a:8d:a1:04:
         cb:1f:b8:42:47:6f:01:9a:71:70:b6:b8:2d:40:dd:50:d2:4b:
         42:5d:4a:ee:a6:3d:7b:40:cb:95:bb:44:45:f5:0e:67:e1:ce:
         8c:dd:50:dd:32:60:ba:8a:8c:d5:42:13:0d:a4:88:f5:d9:3c:
         28:ac:96:d7:de:b1:82:00:01:4a:52:23:bf:d0:8c:bf:99:88:
         32:3a:91:65:25:b9:1d:fe:ba:eb:a1:61:41:7b:31:65:5e:2f:
         36:bc:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:52:45 2024 by rpki-client on console-ams.rpki-client.org