Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File:                     lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier:          o8sTBXEcergVBVp+Z2YVT+ClGXXEP1WrAQVaLVYbFj8=
Subject key identifier:   22:BB:3E:32:DD:10:F9:0B:34:E3:F8:02:79:70:8B:DC:06:1C:E0:F3
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer:       /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial:       018F874A7013DFEF8DCFABE443ED9E1DC2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number:          08AE
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: edpENM9sql54NqBm8JVOVUioXhc.roa (hash: I/xbUYdH73HbXkHFn6g2KmkLqZ/n1AwGaZEm9Ed5H3o=)
                          2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: vbmVOkrNEknCY2aR12Fn67BVGbEtux7LXGvDOjXeO1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:70:13:df:ef:8d:cf:ab:e4:43:ed:9e:1d:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=22bb3e32dd10f90b34e3f80279708bdc061ce0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:a2:15:28:bc:4c:96:b7:7d:16:8d:0b:6d:
                    13:2a:4d:40:de:83:79:e5:64:e7:a0:db:ef:c8:2e:
                    4a:7e:55:1d:25:d2:23:75:a7:ac:76:f5:d2:f3:1c:
                    8f:9a:ad:a6:11:51:cc:1b:bc:19:bc:a2:a6:00:76:
                    34:5b:e0:5e:b1:a2:e8:c3:2c:0b:e4:97:ad:e3:78:
                    2e:92:34:5d:ba:cb:f6:12:7b:c9:5e:c4:d5:5e:5a:
                    6d:93:c6:5d:7b:30:a2:c7:d3:b9:53:c7:86:0c:03:
                    a8:f0:69:47:f6:6f:46:e7:02:17:60:0a:ca:23:7b:
                    bd:b4:20:5c:be:b9:af:2a:8d:f0:b1:5f:8f:0b:ef:
                    50:3f:ad:e0:e5:16:ab:0b:10:84:93:bc:06:ac:a0:
                    89:20:fb:07:32:8f:fb:8c:32:f4:b5:aa:5e:bc:2f:
                    44:0b:9f:3f:53:fb:3c:64:2d:51:85:d0:56:53:95:
                    5f:92:51:60:27:ec:4b:49:40:3f:c0:22:77:5b:2c:
                    d2:1c:e6:7d:e4:7a:0f:50:6e:a0:9c:0f:12:b0:50:
                    14:ff:d7:56:b3:b8:a9:24:59:0d:f7:13:43:fd:0b:
                    1d:1f:63:7f:22:2c:b9:71:45:13:91:ec:99:87:cd:
                    3f:37:fa:d5:31:10:92:1e:5c:06:49:bc:cf:f3:75:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BB:3E:32:DD:10:F9:0B:34:E3:F8:02:79:70:8B:DC:06:1C:E0:F3
            X509v3 Authority Key Identifier:
                keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:6f:55:8c:c6:e0:06:ad:85:fc:62:30:ad:2d:dc:8e:f6:
         39:e4:4e:29:1e:e7:96:96:31:fa:ff:0d:5c:c4:2e:1f:35:14:
         9e:ee:3d:28:89:9e:7f:a8:d9:f5:41:3f:32:61:08:e4:ad:85:
         60:6c:34:aa:71:e4:bd:b5:10:fb:9f:54:57:2a:3f:29:22:ae:
         a2:af:e6:ae:1f:2c:49:e5:7c:6b:8a:9c:67:98:b2:dd:e8:15:
         76:c5:d2:ee:c6:2e:58:4f:39:56:61:e7:4e:15:57:0f:7a:34:
         9a:70:6e:65:ef:6e:7b:85:3b:4c:58:4f:73:94:b0:32:06:e1:
         d1:70:9d:d9:83:34:02:c5:a4:c5:72:c7:9a:9d:e5:14:f7:df:
         94:b9:0c:54:b7:09:e9:ad:ac:ce:4c:b7:31:cb:b7:d4:32:17:
         a5:21:90:04:22:34:2a:f2:76:0f:2c:a0:b5:b2:18:3b:3f:b2:
         64:41:0c:74:c8:66:9c:c9:c7:0d:c6:c3:45:7b:d2:6e:24:0a:
         0f:e4:a9:e7:d7:b5:cf:ee:9d:19:66:ba:32:a3:9d:07:19:e4:
         ff:15:de:a2:c7:14:1f:11:0b:69:dd:40:34:80:d7:f2:df:48:
         b1:60:a9:d0:1a:59:7e:ac:a3:50:9f:db:54:1a:e3:30:5f:b2:
         89:80:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:19 2024 by rpki-client on console-ams.rpki-client.org