Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File:                     lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier:          xVvxhOa1O92YYU14YFyTPCAPlLQthZg3647Bdz4ZObI=
Subject key identifier:   3E:28:A6:52:2F:95:6A:D5:B2:71:E8:BB:55:BF:3A:F6:A9:E2:BC:14
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       018F429F487A42CA427ACB7FADE1DAB0FEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number:          0D7E
Signing time:             Sat 04 May 2024 08:01:26 +0000
Manifest this update:     Sat 04 May 2024 08:01:26 +0000
Manifest next update:     Sun 05 May 2024 08:01:26 +0000
Files and hashes:         1: O6la6v66tJUK1nvrXYuEyNEX52w.roa (hash: 5sIqpnuSrG+CKokkaCSwpP4vl/V7xzFw4GLj2V2lGsI=)
                          2: RMChs2fNq_joitEhMfCp1crAR0g.roa (hash: JGMIUji+jtOkbrxSwFnZYVpcTRA+YM3YLGtTOasQVZA=)
                          3: ekXAJs9ln0KogD5rZelScpzpKw0.roa (hash: z7wdq5m/icdZPGNgM/tFXqTButN0DAyz2YqjxEBbDrc=)
                          4: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: 6bHOgCtWgujUhWYwPCuDq9jTdImpEA8XS5T3VGDDE1I=)
                          5: uaEB4-lTmaTjqs5M5wB5QXYtgSI.roa (hash: MIkS+VNSrNsz8TgRMmQNoTDvCDL+nRHCyaH79hCqt7U=)
                          6: uhPs9NEjSkjkXZoHb-HaROAUp-k.roa (hash: TILq5aCCFJsvoUpVY5d5aNjGmJP66bBGJo8rmnvNZ2s=)
                          7: zkzr2l1aP0Uzlf7G7ROTnD5S774.roa (hash: CYTLmjqCLjv28b2fBHu9e2JY/s6S3Lw+3COyJhVmoFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:48:7a:42:ca:42:7a:cb:7f:ad:e1:da:b0:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: May  4 08:01:26 2024 GMT
            Not After : May  5 08:01:26 2024 GMT
        Subject: CN=3e28a6522f956ad5b271e8bb55bf3af6a9e2bc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:d7:ad:36:90:3b:c1:60:3c:27:27:72:a7:
                    a9:97:e9:9c:af:7f:d1:a2:ef:77:16:f8:09:24:8e:
                    b8:26:d5:10:9a:75:4a:d0:93:4e:a5:18:f2:4f:e6:
                    2f:41:b1:f8:eb:b1:ff:e2:58:24:fd:89:6f:85:26:
                    c9:7b:07:ee:bb:50:dc:e9:f9:18:0e:ae:b5:17:9b:
                    53:5f:54:ca:f2:ba:66:c5:05:8e:ff:4f:13:af:62:
                    e8:55:39:10:22:a2:cd:42:64:1c:4a:53:18:b3:ac:
                    44:a4:7c:cd:08:15:eb:62:a3:d3:c4:cb:a1:04:d5:
                    ec:d4:c4:04:f0:1f:42:b9:14:d3:f3:49:e0:6c:48:
                    4e:8c:98:5e:2e:fc:c0:d5:7d:9e:b5:9d:ef:f0:a0:
                    d5:16:19:f0:6a:69:79:f3:73:91:36:73:24:5a:19:
                    ad:3d:b7:1b:bc:fc:ee:7d:dd:c9:a1:99:03:a4:45:
                    6c:1f:f5:e3:ef:44:76:87:18:8a:ce:28:66:48:fd:
                    03:89:1a:d7:e3:d2:7d:80:b0:76:c3:3c:03:81:56:
                    56:fe:97:4d:02:07:9b:56:db:f3:50:e3:19:db:45:
                    3e:ec:33:62:97:29:a4:f3:5d:03:6e:a6:d3:6c:4e:
                    54:58:e2:22:95:50:c8:d4:99:05:27:ea:7b:15:c4:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:A6:52:2F:95:6A:D5:B2:71:E8:BB:55:BF:3A:F6:A9:E2:BC:14
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:83:82:bf:3b:43:2a:ce:38:44:0f:f9:7e:1b:31:9e:b9:
         27:f3:25:8d:40:37:1b:56:ac:a7:58:34:33:35:2b:02:b0:48:
         eb:cd:af:40:ef:4e:5c:a4:d2:7e:29:4b:58:40:4a:5a:e3:b5:
         0b:be:d2:3a:e1:67:85:83:83:b3:1d:69:4b:d9:a9:70:2d:5b:
         0f:58:8e:14:20:f6:b5:d2:25:10:dc:3f:3f:61:75:f2:ed:fc:
         12:15:48:44:32:70:a3:4e:c7:c5:aa:4d:ef:4a:b7:07:ef:26:
         af:19:da:b2:f5:12:20:38:82:a1:e3:b2:cb:81:a7:f3:ff:57:
         96:0e:75:0e:d8:d0:45:47:74:b9:eb:7c:c5:a3:56:58:41:f7:
         92:6b:35:ff:57:d7:ba:de:03:d5:8a:d5:36:66:a9:4a:6d:eb:
         e5:84:f0:f6:3d:fd:dc:a0:75:6d:03:65:bc:22:37:7b:a9:3a:
         04:2d:71:f0:2e:8e:cb:32:86:b8:f0:f9:91:0d:22:c1:b1:7e:
         87:41:1c:a3:81:6b:b9:0c:bd:68:62:7f:05:15:4c:de:da:37:
         fe:d5:2c:6c:fc:07:02:07:ed:cf:b8:f5:9e:fe:21:9a:af:0c:
         8c:09:54:ac:c3:19:5a:39:04:28:42:ad:60:95:aa:d7:cf:fc:
         21:44:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:11:45 2024 by rpki-client on console-fra.rpki-client.org