Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          MoSI+Z+TvxK72OnoUzKI6AfFvu7i1Vs6fk1JElaRD4E=
Subject key identifier:   E2:30:13:61:16:96:8D:5F:CE:59:B4:58:E5:31:C0:FD:FC:49:9E:79
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       01901DED8D477B7FF18EBC247D0BD00733E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          1155
Signing time:             Sat 15 Jun 2024 22:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:45 +0000
Files and hashes:         1: is2ryumT0Kim7BbBNa61Rv1t04A.roa (hash: xowPY5Q8ByvBHRSfBqEpTTK2SF4Tz1rfi3+sZToWz3w=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: kdyIXaJVVQ29zAuX5efAjUfQjoI/ulhAGMqISx0f2Tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:8d:47:7b:7f:f1:8e:bc:24:7d:0b:d0:07:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: Jun 15 22:03:45 2024 GMT
            Not After : Jun 16 22:03:45 2024 GMT
        Subject: CN=e230136116968d5fce59b458e531c0fdfc499e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:f8:07:05:9e:4e:85:e0:3a:35:fc:c7:ad:
                    bd:a6:3b:50:b7:4f:5a:7a:6e:f0:6e:9d:12:46:18:
                    08:9c:d3:1f:89:f5:29:46:1c:03:40:48:52:83:01:
                    bb:9c:9b:22:63:1a:aa:82:39:b7:5d:66:42:10:0a:
                    b4:4c:2a:93:81:28:8f:2c:55:30:44:41:40:37:33:
                    28:c7:62:24:07:70:c7:52:12:28:c4:1e:89:bb:5d:
                    56:1d:17:6d:3b:26:c6:f2:fb:02:3c:8a:ac:32:45:
                    ef:27:6d:7a:3f:5e:e9:af:be:13:4e:4e:ce:e8:cf:
                    c9:ab:e0:dc:26:b0:b8:01:f2:66:9c:5e:a8:81:cb:
                    ed:21:e4:c8:31:4c:9b:2d:34:22:5e:a6:24:a4:f4:
                    35:0c:83:6e:71:86:3d:e9:21:4a:95:d8:12:53:22:
                    86:37:5c:99:78:32:76:03:1b:bc:91:ca:b8:b6:be:
                    3a:dc:83:aa:14:e7:fc:ad:1f:7c:9c:51:bd:a4:f1:
                    77:98:f3:ed:cf:72:0c:67:ab:1d:88:40:5e:68:72:
                    49:7c:d7:c5:fd:de:b5:47:83:15:4d:20:a8:55:bf:
                    fd:8f:73:bf:2c:2b:70:c7:60:f0:07:34:97:20:d0:
                    e2:e6:c6:9f:93:8e:e8:78:5f:2c:b0:e0:49:13:03:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:30:13:61:16:96:8D:5F:CE:59:B4:58:E5:31:C0:FD:FC:49:9E:79
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:19:b6:e1:d6:16:04:2a:9c:c5:d7:74:a1:fa:05:a4:b3:
         37:8e:23:bc:79:e9:7a:47:9b:1d:42:be:ed:6d:d7:59:a1:a7:
         7c:4b:58:79:e3:17:b7:90:3f:5d:b8:cb:ef:62:14:21:bd:ba:
         71:5b:e0:09:d1:ab:ca:98:21:90:8b:11:31:bb:ee:b8:1b:ad:
         f2:8d:70:00:d4:e3:67:ab:21:62:a1:71:78:46:5f:d9:1a:1e:
         64:f3:b8:7e:d7:60:c3:8a:2c:3f:ed:03:70:b1:00:8d:1b:ed:
         a9:5a:35:39:d4:51:67:77:94:fe:91:d3:00:de:d4:6d:1d:eb:
         c7:2d:cc:52:8a:72:67:68:7d:bd:f5:d0:aa:2b:aa:fa:91:3f:
         80:af:70:4a:4e:1f:54:79:8a:0e:d0:30:82:1c:a4:7d:7d:97:
         6c:78:56:56:f7:a5:ac:30:d6:c8:7e:52:d8:58:e9:25:57:13:
         f3:c1:28:31:1b:fc:cf:d5:58:c1:99:5d:84:bc:be:35:f0:78:
         86:b9:98:d0:7a:5e:ff:e2:fa:75:05:6e:1e:0b:c3:21:09:28:
         6e:23:0b:71:fa:e4:9f:6e:c1:6a:75:b3:d8:6f:4b:bd:8e:ea:
         6f:21:1c:00:3b:df:42:75:5b:42:c0:9c:9c:dc:ed:e7:58:28:
         73:3e:cd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:38:58 2024 by rpki-client on console-fra.rpki-client.org