Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
File:                     lLUJKKlsuekSD_PLY1s_fXDJfOA.mft (raw, json)
Hash identifier:          /KnVsu2TSraE54NvVIMrOBwTgdrR63IY+H24DuFh1cc=
Subject key identifier:   1F:9E:E4:B5:46:7A:0F:91:EA:AA:F7:45:A9:1D:3E:59:2F:AA:00:0C
Authority key identifier: 94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
Certificate issuer:       /CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Certificate serial:       018F8749D00B70E00EE12C0CB178045C9729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 16:01:52 +0000
Manifest this update:     Fri 17 May 2024 16:01:52 +0000
Manifest next update:     Sat 18 May 2024 16:01:52 +0000
Files and hashes:         1: QS7nzrslgrOe-Po2XHX5CmZJ11Y.roa (hash: uxEJqWyrdEMpQcFF6cncECgrspKFOEvOfqeOF7UthTE=)
                          2: lLUJKKlsuekSD_PLY1s_fXDJfOA.crl (hash: Ihm3eYm2bcGZpMl5WxCmp9rXbFJrMy8KNO8u4ULE484=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d0:0b:70:e0:0e:e1:2c:0c:b1:78:04:5c:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
        Validity
            Not Before: May 17 16:01:52 2024 GMT
            Not After : May 18 16:01:52 2024 GMT
        Subject: CN=1f9ee4b5467a0f91eaaaf745a91d3e592faa000c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:71:88:57:c7:fa:1b:1a:8f:4a:f3:39:ea:
                    fe:cb:0d:0a:e6:b0:5b:be:72:bd:9a:2d:5a:f2:1d:
                    fa:57:69:e0:1a:22:0c:3e:4e:26:7b:5e:eb:56:32:
                    88:33:de:22:a7:d4:8e:7f:41:9e:9d:2a:23:a6:6e:
                    dc:85:3c:4e:8a:f9:1a:e9:0b:3b:9a:5a:b1:c3:41:
                    79:db:ae:0a:25:35:97:9a:c6:6c:77:de:b8:e2:98:
                    b1:ff:85:17:6e:20:57:0c:4b:51:16:31:a0:e4:94:
                    b8:c4:ea:a9:9d:2f:4b:dc:11:fb:f0:46:b2:30:65:
                    a0:15:fa:c3:27:ac:88:5d:50:d9:13:31:b5:fb:8f:
                    01:fd:02:b0:da:5d:5c:e0:9f:67:f0:3a:24:d9:78:
                    f5:f3:5d:fe:1e:7c:5d:94:77:0f:08:17:9e:5b:ab:
                    fe:96:af:9a:cb:a5:fa:28:f8:51:ce:f2:4f:95:9c:
                    7e:e1:66:19:65:a0:86:6c:fe:07:df:03:8c:e8:1e:
                    f1:db:90:92:3d:a3:ce:4d:7f:4d:35:05:20:71:1d:
                    bf:37:13:17:37:48:54:69:cd:27:8d:a7:fc:eb:8a:
                    d1:49:2d:b9:c3:ed:b9:12:5d:51:8e:06:25:c1:d5:
                    77:bb:91:6f:b7:81:74:b4:95:f6:ed:19:99:90:c8:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9E:E4:B5:46:7A:0F:91:EA:AA:F7:45:A9:1D:3E:59:2F:AA:00:0C
            X509v3 Authority Key Identifier:
                keyid:94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:90:35:62:b9:fa:f1:92:88:2a:d9:46:5f:a2:42:a4:6e:8b:
         73:4d:da:b6:32:68:74:82:d6:18:83:97:87:ca:80:ab:b4:92:
         d8:ed:3d:7c:07:ca:e4:74:bc:0f:45:c1:1a:d5:5d:5f:a0:bc:
         9a:e8:b7:d0:93:40:fa:2f:85:e7:b9:48:a1:bb:9b:4a:00:96:
         3e:21:98:9e:65:cb:e6:76:c5:cb:0b:8c:1e:bb:2f:14:79:80:
         8c:ab:43:b9:b1:b5:e6:f8:18:df:85:42:bb:86:bf:3c:d3:12:
         22:bf:2b:1e:f8:2b:bc:af:ac:1d:3b:f6:18:c5:93:80:11:17:
         e4:87:f6:48:04:6f:1f:c8:20:ee:e7:92:c6:13:f2:22:c4:58:
         da:01:1b:4d:75:66:38:7f:b8:b7:06:21:56:38:e6:56:89:5d:
         9f:f1:74:7c:30:04:c8:ed:de:6c:eb:73:e0:61:18:59:e8:cc:
         f3:04:a2:0d:98:97:5b:7c:ef:a7:ab:eb:82:b8:72:b6:6a:bf:
         2c:b1:56:82:7c:59:03:fc:7a:06:b7:31:6a:04:0c:3b:2e:26:
         e7:27:dd:08:f6:fa:59:ef:6c:a6:2d:93:53:d2:32:56:6c:67:
         22:ae:11:c3:2c:3f:73:94:ea:e7:c9:74:3d:cf:a4:6f:e0:8c:
         28:1b:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:16 2024 by rpki-client on console-fra.rpki-client.org