Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File:                     LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier:          N/nvwprkQ2SoQSZHsLfGIaZrONlSZqmq51tG+hlq01w=
Subject key identifier:   AF:9A:0D:32:69:66:E7:DB:CB:DD:32:0A:07:81:CC:0B:4D:62:55:C6
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer:       /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial:       018F9F50DD8C4242326F9CB51AC63E16820E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number:          0EA6
Signing time:             Wed 22 May 2024 08:00:27 +0000
Manifest this update:     Wed 22 May 2024 08:00:27 +0000
Manifest next update:     Thu 23 May 2024 08:00:27 +0000
Files and hashes:         1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: lI/Tetnq8rz+7sBQak/WwAArO2sYFss6rkhlqsjkC74=)
                          2: jAQHkJVXme8TuGwWYIEe0kbxIvM.roa (hash: p1Sbv/yE7LawYxfYoh/N1ESHlGdePl3zsNucxGR7ZmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9f:50:dd:8c:42:42:32:6f:9c:b5:1a:c6:3e:16:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
        Validity
            Not Before: May 22 08:00:27 2024 GMT
            Not After : May 23 08:00:27 2024 GMT
        Subject: CN=af9a0d326966e7dbcbdd320a0781cc0b4d6255c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:67:9d:84:12:c0:3e:23:67:ed:b9:cb:12:
                    88:fc:84:b0:17:6e:fa:04:98:7b:a5:fb:68:f2:62:
                    59:38:55:48:e5:84:4c:af:6d:78:34:b4:5e:1b:02:
                    50:42:9d:a5:a8:fb:ea:21:0b:c6:2e:3e:b4:57:73:
                    74:aa:8e:42:d7:dd:46:a7:8b:7d:8d:01:2a:3c:7a:
                    ee:2a:d2:fb:4b:ea:23:59:cf:90:2b:e8:20:1f:c7:
                    3e:f1:97:36:44:b7:8e:b1:6e:f3:c6:87:aa:b5:44:
                    f3:be:99:65:f3:43:dd:b6:15:92:f4:98:70:2f:85:
                    d3:25:71:c3:15:68:cf:0c:85:bb:c3:98:62:98:b1:
                    b9:31:5e:96:41:68:29:a3:88:a8:fa:fd:08:53:76:
                    51:fb:ab:58:2b:0b:11:89:ab:1d:de:60:23:6b:dc:
                    0d:f4:af:9f:aa:fc:15:7d:4d:2b:1b:a3:dc:02:44:
                    1b:81:76:2d:20:42:63:96:99:62:a1:93:dd:b6:78:
                    14:d5:cf:7a:2c:34:39:12:28:3d:86:3d:56:a7:81:
                    04:f3:77:7f:06:99:d6:6c:ba:c1:ab:66:6f:e8:e4:
                    9a:7c:19:4b:70:09:6a:ba:96:4e:b6:89:bc:32:0c:
                    ca:cc:56:17:3d:ce:a4:aa:82:ab:29:03:6a:53:6f:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9A:0D:32:69:66:E7:DB:CB:DD:32:0A:07:81:CC:0B:4D:62:55:C6
            X509v3 Authority Key Identifier:
                keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:82:95:cb:51:26:48:57:48:de:9d:bd:a1:14:10:d3:3a:
         78:6b:b3:9b:1c:c1:e9:88:32:f3:d5:c1:8f:33:9d:04:8b:f2:
         88:68:a2:01:60:2a:11:6f:28:ff:74:dd:4c:ad:a6:7b:1f:ef:
         df:7b:79:7a:37:a9:48:d4:7b:43:1a:6e:1d:50:db:8e:61:7d:
         65:86:2f:d3:3e:f1:8f:1f:72:ce:69:86:42:6a:fb:0a:a4:2d:
         5c:f4:34:c9:0f:fe:a9:69:94:d9:8e:c0:17:b1:23:b0:c4:ae:
         1f:7d:98:5d:6e:c7:63:39:72:aa:c3:bf:98:bf:72:d6:18:b7:
         14:ec:cb:06:a2:88:88:f6:92:7e:b5:44:9d:ea:89:5e:d8:48:
         8e:aa:40:ab:b1:ff:74:1e:d0:af:7b:7f:df:65:f6:51:60:4b:
         44:32:73:7c:e1:c5:51:ef:39:3d:92:38:ce:35:24:88:35:f4:
         33:be:05:e9:7f:67:33:69:62:cb:f3:b3:43:d4:f3:a0:96:52:
         66:a4:33:bf:21:39:59:f3:4d:71:d3:3d:04:e7:82:a1:36:2d:
         cd:a5:23:b4:89:ce:b1:0f:a7:7e:79:b5:f4:b4:6c:42:59:ce:
         86:92:6a:47:3e:1c:a2:cc:3e:d9:53:87:69:76:14:04:46:09:
         11:ad:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 17:24:52 2024 by rpki-client on console-ams.rpki-client.org