Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          HNbi8hFdPC2TbX1ePSvvEH0oAD3NS1m57x6CtRh43lE=
Subject key identifier:   70:26:BA:BB:E5:B6:CF:D4:A6:2B:7E:DC:77:70:B6:4A:78:AA:FA:67
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       018F701F6F0300DF2E5BB020E40E149657B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          0DB4
Signing time:             Mon 13 May 2024 04:04:19 +0000
Manifest this update:     Mon 13 May 2024 04:04:19 +0000
Manifest next update:     Tue 14 May 2024 04:04:19 +0000
Files and hashes:         1: C7zpZN-1q0H_M_S_vpNYnlFGVTA.roa (hash: epMhPon6PxtUyLTu/HBkF3J2cyCB/KYTILmUnDYVUrU=)
                          2: bJSCFqTukybTMGHt2jOsj1RN1Jw.roa (hash: F9VGPFtGfYW8PORc+zIuKedCDRVZ07YSKvNhB3wFeps=)
                          3: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: jzgJRagvrB187QsDZLE2SUuU/0g3PZ+uvhmKthZriBE=)
                          4: fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa (hash: uTIlXCxuxfn4l2zqV8sWOHfJaFDTjasJ/obkOnGL1L4=)
                          5: xH15JpMxA1SVuRoIJklxq0Le_mA.roa (hash: 6cVPKb7lD5VXFjrXWMg8gc0Rpz8Icrd/mFgn/NRlRuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1f:6f:03:00:df:2e:5b:b0:20:e4:0e:14:96:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: May 13 04:04:19 2024 GMT
            Not After : May 14 04:04:19 2024 GMT
        Subject: CN=7026babbe5b6cfd4a62b7edc7770b64a78aafa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:cb:c1:a3:39:f4:95:0b:fe:88:99:13:6c:
                    a7:d0:6f:3e:cb:af:0c:38:f4:44:e7:58:26:bc:ec:
                    1d:19:22:b6:ab:08:51:52:84:03:35:98:34:75:cc:
                    72:c3:ca:75:5c:4d:22:d0:6f:c7:7b:7e:8d:68:1c:
                    e7:91:a4:e2:fd:a3:a2:68:5d:33:d1:6e:92:75:be:
                    d6:bd:f4:1b:14:a2:f4:10:35:fa:6a:b6:5d:14:c7:
                    31:b4:bd:7d:d3:19:de:82:9a:54:a0:ee:86:8c:7e:
                    3a:30:ee:59:ea:7e:0f:54:6b:cf:ae:7f:e4:8b:87:
                    67:0a:47:c2:b5:0d:18:bd:73:0f:2c:7e:f3:b5:19:
                    34:03:8f:85:51:d5:c4:2e:88:cd:64:15:1e:38:f2:
                    b7:52:64:d8:d8:3d:1d:17:6d:c0:90:88:85:09:fe:
                    a3:9c:90:10:1d:79:93:e2:44:db:63:ac:00:74:a0:
                    c0:a6:d9:5f:1c:06:23:dc:b1:c4:b2:e0:52:5b:5a:
                    8f:90:f2:9a:04:a4:f7:a0:f1:af:e7:cf:26:28:f5:
                    00:fd:f3:3c:c5:dc:3a:da:26:a1:c7:27:49:68:18:
                    e7:18:7d:bb:8c:b8:96:34:1e:3a:1b:42:c3:06:30:
                    97:c7:7c:ef:cb:1e:0d:7c:26:d3:61:8a:41:9d:bb:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:BA:BB:E5:B6:CF:D4:A6:2B:7E:DC:77:70:B6:4A:78:AA:FA:67
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:77:45:c5:b8:b1:01:c8:ec:b3:46:4d:10:ca:e7:91:a5:
         de:c3:e4:61:36:01:49:5f:33:bf:56:f8:42:28:f4:78:ad:e9:
         be:5c:89:bc:13:c7:78:e8:7a:e9:c0:9c:70:17:0a:b4:2d:fc:
         1f:f5:5e:49:d5:58:79:e9:67:c4:ec:bd:59:da:a7:82:37:82:
         f5:d0:69:dd:2c:ec:eb:9f:b9:fc:02:e3:cb:36:8d:b7:ea:6f:
         98:d4:a9:aa:9b:e8:6e:d1:9c:f2:88:1f:ea:bd:10:cb:48:f4:
         54:80:a1:70:c4:40:68:b4:f3:23:a6:01:ba:33:90:da:98:de:
         89:a0:90:1a:60:4c:83:cd:c7:f4:14:db:68:40:b7:b2:bf:94:
         48:90:11:91:f2:8f:a2:2e:92:93:13:a6:39:0c:f4:bf:c3:32:
         6f:54:8e:4b:90:05:8c:b5:89:6e:99:d0:e6:11:fa:c2:19:d0:
         b9:53:05:3e:9b:ba:49:fe:ed:d4:88:50:34:41:99:d4:48:88:
         2d:4e:7a:60:b7:41:94:b4:5c:06:ef:1c:ac:60:57:02:ea:dd:
         cf:ab:e4:d8:ba:63:e0:73:22:b9:e2:d0:f1:51:9a:c0:13:25:
         b6:2c:55:25:b0:46:dd:23:8f:75:ba:de:dd:b3:85:50:7a:76:
         5f:5d:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 07:37:53 2024 by rpki-client on console-fra.rpki-client.org