Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          lTu42Nsw+PzGegrnwZ5jXhvd7r5KpcOgCuOUzsM+PME=
Subject key identifier:   38:00:8A:9C:DB:1C:20:B6:A1:42:08:C3:DD:1B:F7:09:C6:E2:EA:FA
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       018F8892556693DC11688DE02594ACA3D670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          10DF
Signing time:             Fri 17 May 2024 22:00:42 +0000
Manifest this update:     Fri 17 May 2024 22:00:42 +0000
Manifest next update:     Sat 18 May 2024 22:00:42 +0000
Files and hashes:         1: GJFpnTRunndxL-_lGH8DsEBdbxQ.roa (hash: nJp0+8lrktVMUcPBVTLQM1TCIgghnuRaTN069WMtbps=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: 1SpuGsWW0l0IIb1Kg4O/XB5FXzS9BDOVe+8vnWY4jew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:55:66:93:dc:11:68:8d:e0:25:94:ac:a3:d6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: May 17 22:00:42 2024 GMT
            Not After : May 18 22:00:42 2024 GMT
        Subject: CN=38008a9cdb1c20b6a14208c3dd1bf709c6e2eafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:80:c6:a9:08:de:63:17:10:fe:66:e6:f4:
                    32:e1:7f:4c:bc:17:f0:b2:52:b3:0a:21:e4:e9:e2:
                    5b:f4:35:c2:1f:02:62:4e:60:f4:1c:ee:d7:90:7a:
                    cb:66:b4:2a:de:a4:8b:5f:7c:94:9d:ba:4d:c8:7d:
                    e7:ec:86:ff:ef:c0:dc:f2:2f:52:4f:51:b0:ae:c6:
                    ce:4e:36:33:22:98:42:90:64:aa:6a:5e:df:3a:79:
                    84:c5:a4:c4:0f:67:b3:48:d1:6a:6c:ae:de:1c:b8:
                    26:d0:e8:84:ee:2b:2f:a6:b4:49:ff:b3:80:8e:b5:
                    b5:54:07:71:4c:65:53:53:79:02:72:eb:7e:4d:c8:
                    50:b1:7e:7e:23:ee:45:7c:bb:e1:2e:8c:b8:00:21:
                    0d:ea:58:02:46:43:5d:23:d9:20:d3:6c:99:11:cc:
                    c7:0b:f5:71:05:dc:a7:3e:b1:93:0b:07:04:b2:67:
                    bc:f8:39:0e:59:65:cb:06:f4:bd:46:21:50:ca:8d:
                    09:b2:99:49:89:d5:c9:ed:e2:10:03:de:8f:28:e6:
                    4e:74:91:cc:cf:4c:51:61:36:01:b1:52:ac:5b:bc:
                    59:11:0d:f6:17:a9:44:f6:21:7c:fb:e7:ca:6c:30:
                    44:44:7d:c6:2c:f1:58:72:72:cf:ab:27:89:fa:03:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:8A:9C:DB:1C:20:B6:A1:42:08:C3:DD:1B:F7:09:C6:E2:EA:FA
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:99:b9:41:59:f4:17:d1:aa:58:6d:01:02:72:de:f4:11:8f:
         ed:1c:f0:1d:fe:a8:65:74:50:11:ff:ed:b0:71:b6:eb:80:b4:
         c2:60:04:d9:ed:f1:5a:20:38:21:1e:a2:04:71:01:31:fb:b4:
         3f:99:10:b7:42:92:30:1a:b9:0f:23:7d:8c:6a:71:f3:97:99:
         cf:c1:8e:2c:4b:86:1b:fa:df:4d:67:37:5c:98:46:65:3f:62:
         b6:82:47:b4:ee:ab:c9:66:74:7d:3b:6e:ac:aa:ef:8d:0e:28:
         7f:a7:4c:cd:53:65:6e:21:10:8d:94:98:f6:03:56:27:99:9c:
         b0:52:0d:78:82:f0:67:85:1d:99:66:8c:fa:ac:84:63:13:9e:
         06:a3:91:71:60:64:e8:02:76:6f:90:ae:b0:5a:3f:49:7a:c0:
         16:43:86:bd:78:42:71:04:2b:69:d3:c5:24:01:23:30:fc:35:
         d6:96:78:04:7c:07:0d:7b:b5:d0:a2:c2:f2:c9:34:ba:79:eb:
         2c:6f:7d:fa:b6:c2:ef:ed:4c:fa:ea:26:94:51:9b:35:26:aa:
         24:c5:33:d9:aa:4d:8a:04:d9:1f:f4:fc:b0:d5:f5:4f:a2:08:
         8d:09:8e:b0:fe:49:e9:f8:85:46:c5:f9:02:b8:40:fd:e9:73:
         42:df:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:07 2024 by rpki-client on console-fra.rpki-client.org