Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File:                     LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier:          2tkD0lmMr6fxxC7Y1QVHBnSGfgNh6z9RbpsNLzTLcpk=
Subject key identifier:   C6:D3:FC:DA:D1:29:1E:35:21:CB:3F:7D:CC:72:C1:1F:3A:34:20:5C
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer:       /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial:       018F87ED0227CA1F3E3F185DFBFADDDA5D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: Fd_O0meoBJxOr1FhdBT1UrwRHOc.roa (hash: UidVlB0HyX/vjPax7RE3VFbamOlkG9F6mLlUCCdtqQQ=)
                          2: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: E0KyybCViUZXXlgmat66xHRvEqvbKTxViYZ59Gs3Nsw=)
                          3: bWi0plzwqv0v7xYAxMKLXsrQZ7U.roa (hash: L8SSPHl6CrvJh7Odrb1ki3f2ZcjsZS8PEM+TUDWJ5aM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:02:27:ca:1f:3e:3f:18:5d:fb:fa:dd:da:5d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=c6d3fcdad1291e3521cb3f7dcc72c11f3a34205c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:ae:b9:59:dc:54:1f:d1:b1:5e:83:ca:d5:
                    36:d4:f5:55:f1:c1:b0:b1:de:80:77:29:b8:ed:44:
                    74:96:7b:dd:cd:30:d7:1d:45:f0:68:d3:7c:6d:8e:
                    e9:8f:b2:c7:fe:22:83:13:aa:98:8a:ad:12:9d:8a:
                    2a:39:85:b5:e6:d5:cf:90:eb:e5:94:5b:d2:5e:df:
                    ec:a3:a8:68:69:58:e4:dd:8a:34:a2:d3:8f:dc:a2:
                    92:d3:36:aa:cc:ce:4c:4c:2a:af:49:11:62:ec:89:
                    75:d0:5d:53:ff:07:cd:26:20:e0:46:67:a0:0d:81:
                    95:d4:6f:e7:1a:3e:02:68:41:fb:07:b6:99:56:ff:
                    ab:d6:a3:15:cb:a5:55:d7:17:56:40:8e:87:ed:ca:
                    1d:68:6e:0b:09:8d:d9:07:a3:66:1b:2a:02:a9:50:
                    ac:d8:5f:43:ec:80:cd:41:05:fd:3d:61:c8:cc:21:
                    59:08:af:33:57:6a:b8:c9:74:c6:a1:11:b8:8e:03:
                    15:50:62:0f:84:81:4a:4a:0b:39:da:f0:8f:2a:70:
                    f9:bf:51:2e:be:e0:90:f2:9d:13:d6:ca:72:f1:85:
                    53:52:25:e6:08:5b:ef:9e:7f:41:93:f3:e4:ed:d0:
                    10:ad:7e:c2:f9:69:54:90:6e:9f:79:d7:eb:3b:d7:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:FC:DA:D1:29:1E:35:21:CB:3F:7D:CC:72:C1:1F:3A:34:20:5C
            X509v3 Authority Key Identifier:
                keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:fd:08:99:75:e0:76:41:a5:8c:d0:37:80:97:b5:cc:2f:
         4c:e3:4a:09:18:35:57:b1:bb:6a:d4:2a:2f:e2:34:d2:ec:49:
         52:83:80:e4:8e:f7:fa:81:67:00:ce:3f:e7:e6:e7:89:4e:7f:
         e9:22:4b:08:b3:54:66:3a:70:00:f6:fd:69:46:29:c4:7c:98:
         45:40:ed:8c:80:a1:07:e9:7b:a1:cf:33:a6:33:9a:16:f9:4c:
         a0:74:2e:24:68:92:65:71:70:d9:15:2a:bc:06:a7:62:86:c2:
         6a:08:f2:b6:59:61:59:54:0b:36:60:ef:21:7b:66:1d:19:98:
         41:94:97:ee:02:f0:a2:46:a1:86:56:e4:2d:90:ea:91:b4:83:
         9e:cd:c9:0a:33:61:48:98:09:50:56:65:2f:e4:61:9c:0f:50:
         02:8c:d2:e3:3e:42:cd:3a:71:07:26:42:a0:02:27:59:1e:b5:
         2b:8a:79:62:b1:68:c9:90:03:aa:fa:a6:34:fc:dc:e2:9f:ae:
         91:b4:c7:db:d5:30:d8:d7:92:3a:6b:17:e8:b8:33:6b:52:a7:
         2b:42:ca:53:fb:d8:a9:09:ae:e1:f9:55:bb:fb:e9:35:07:62:
         31:4c:1d:61:d9:75:f2:1c:40:26:b0:f9:25:34:bf:02:83:3e:
         59:49:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:42 2024 by rpki-client on console-fra.rpki-client.org