Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          vwHKcSF4Eb77rf0ehMR10/435dKwEpimrD6FNQkSOhY=
Subject key identifier:   6F:28:EB:6B:70:7A:02:93:AE:0A:D6:8A:E1:4E:39:0A:FF:CF:D2:8B
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       018F866C9AFE92CF3C18A81E85F986A9FCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          0DF2
Signing time:             Fri 17 May 2024 12:00:15 +0000
Manifest this update:     Fri 17 May 2024 12:00:15 +0000
Manifest next update:     Sat 18 May 2024 12:00:15 +0000
Files and hashes:         1: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: q9TdNArPPqOIPl70NVdwqooeaL845HZn15vQ9C68ab4=)
                          2: kBPXRf28zyiRq98E_wCHdYJQuTI.roa (hash: DQ0DAcXNp5fSgofu+1ekF7JSk7/wTpZAgTJ9w+2Obf8=)
                          3: zGz0INvPdrTt769D0_hXxTWDTuk.roa (hash: RuOKN0E4t+jkbM9JBe4DhZxW5EKY2n+OBz4QkbAetqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:9a:fe:92:cf:3c:18:a8:1e:85:f9:86:a9:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: May 17 12:00:15 2024 GMT
            Not After : May 18 12:00:15 2024 GMT
        Subject: CN=6f28eb6b707a0293ae0ad68ae14e390affcfd28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:5f:11:b2:79:0e:1b:f8:95:94:38:63:23:
                    3c:9b:30:c1:a8:34:c5:2a:1b:75:8b:30:23:74:14:
                    1d:2a:29:36:13:73:12:d4:94:7f:43:59:0d:1b:f0:
                    d2:31:2b:6e:1f:45:d6:38:ce:a8:91:7d:7f:c7:ef:
                    eb:cf:96:0c:ec:d8:2a:c4:31:82:c2:0a:fe:ea:19:
                    b3:f5:0d:34:62:5c:11:f7:7c:f5:f2:39:a3:87:f0:
                    f6:a1:fa:31:bb:8f:fa:8d:07:9a:49:b6:b8:f7:ee:
                    2d:9f:aa:ea:7b:31:3c:b4:18:9f:ab:3c:0e:42:43:
                    31:7f:2f:b1:0e:45:2c:42:5e:a2:cf:96:c2:a5:09:
                    da:2b:c4:9b:16:c0:45:c9:1d:ae:49:59:70:f4:5a:
                    93:65:18:e6:8c:da:b3:d3:8a:62:b8:57:1c:f0:74:
                    f7:09:69:b0:88:ce:2f:b8:c7:19:22:85:40:78:51:
                    eb:e3:d5:4e:7a:57:0a:39:71:8f:91:29:04:59:e5:
                    8a:4a:1a:2f:91:fd:d3:04:80:0e:da:4b:f2:16:94:
                    47:c3:34:39:13:f7:72:23:7a:a4:4e:f8:04:fd:28:
                    2e:e3:52:01:29:ba:f3:37:ba:4c:a4:09:a1:25:14:
                    32:67:74:17:14:c8:cf:b0:68:cb:33:d7:9c:46:5f:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:EB:6B:70:7A:02:93:AE:0A:D6:8A:E1:4E:39:0A:FF:CF:D2:8B
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3c:2a:b7:50:c1:bc:50:1f:b7:da:80:f7:a7:55:a5:15:5d:
         da:76:35:a1:30:d8:f8:a0:20:6b:dd:5b:16:58:a7:70:d3:d8:
         72:27:b3:43:00:3a:a9:98:fd:7a:a9:78:fb:ef:0c:7b:bf:7f:
         59:b4:8d:a5:68:c1:e3:5a:c8:47:30:2e:a5:89:ad:38:77:f6:
         ac:ee:8a:9a:ab:be:de:a6:e1:25:0f:82:1f:95:7b:15:3c:d5:
         31:56:fe:c1:2e:cd:dd:34:11:8b:59:f5:86:6d:e3:b5:03:66:
         54:d4:23:b8:30:fb:2f:32:ea:7b:bd:89:a9:e4:73:ed:af:04:
         f4:f5:1c:d8:8b:02:b8:31:7e:7b:68:e6:59:ec:16:da:e7:99:
         35:78:be:cf:f6:75:63:f8:3a:0d:be:00:cb:6d:f1:ea:b3:ab:
         33:b6:04:13:fd:0a:5b:d6:0e:82:ff:bc:52:35:06:dd:c4:98:
         b3:72:74:3f:df:a2:ab:95:9c:94:e4:ac:f8:90:fc:2e:5c:c3:
         17:85:5e:9d:06:53:4f:d9:d7:ad:46:b9:ab:f5:02:46:12:63:
         65:96:60:71:c1:d4:cb:b7:11:8c:5b:8b:30:c4:b0:f2:fe:e0:
         75:c0:36:2e:64:8e:b9:3e:db:1c:6c:79:80:c9:59:73:ec:81:
         1d:ce:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:54 2024 by rpki-client on console-fra.rpki-client.org