Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File:                     LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier:          xw7DexyBNqVmC7oEeSlV4TvSjjPPVifX80s5axTjllM=
Subject key identifier:   38:1E:2A:69:51:31:23:29:D7:11:5C:99:59:B9:03:20:B6:3B:03:72
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer:       /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial:       018F8749706EC7CCCD97EDAD345FB5F83ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number:          098E
Signing time:             Fri 17 May 2024 16:01:28 +0000
Manifest this update:     Fri 17 May 2024 16:01:28 +0000
Manifest next update:     Sat 18 May 2024 16:01:28 +0000
Files and hashes:         1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: tFDi0HK5FEApm0hZMdaT6O3oU9ZVA8xdcq/raEY4ONs=)
                          2: PipX-fEr0RLBb0-Q9kg46QNdhtI.roa (hash: g85sHlOfJ11WZWV/SAxtKYMmuHv2b1TdmnlDwy0sqPk=)
                          3: uZ_2kGUqrYABc9UpzcUk5SUW-DA.roa (hash: 3tkRKtQEoOboCbPUBaciYRb8PoiK3QI8nkTFwJzbNsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:70:6e:c7:cc:cd:97:ed:ad:34:5f:b5:f8:3e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
        Validity
            Not Before: May 17 16:01:28 2024 GMT
            Not After : May 18 16:01:28 2024 GMT
        Subject: CN=381e2a6951312329d7115c9959b90320b63b0372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:77:59:cf:fa:e5:69:cf:bb:1f:82:15:03:
                    fc:fb:07:88:a5:a4:ed:79:c9:84:2c:40:a9:2f:6f:
                    6d:c2:db:cd:8f:ce:58:f3:9b:5b:71:1d:73:df:e2:
                    61:b8:2f:6c:5a:6e:11:20:46:d1:ea:97:52:3e:aa:
                    ef:80:87:42:fb:e0:6d:2d:59:84:38:8e:82:16:56:
                    6a:74:0a:f3:87:13:8c:9c:b8:90:5a:cd:92:86:d8:
                    07:3f:76:a0:84:32:ea:59:8e:49:3c:db:51:79:01:
                    52:22:1d:24:b0:cf:82:02:8a:0a:f3:53:86:b0:00:
                    e9:f2:70:3d:e2:22:05:81:33:c3:9b:84:63:93:3f:
                    1b:68:01:d9:a0:cf:28:7b:19:33:77:42:40:d5:c2:
                    db:f3:81:1f:30:4e:ad:c3:44:25:4c:88:a1:ad:58:
                    e3:d3:d5:74:5d:ab:3e:6d:4b:ef:af:7b:07:12:e6:
                    f8:c5:61:e7:cd:58:74:24:73:6c:a3:49:c9:87:eb:
                    1b:e8:09:1a:5a:c7:30:fc:8b:d8:92:37:17:4c:8b:
                    36:e4:31:4e:ef:77:5b:47:49:4b:fb:f1:bf:e9:69:
                    4a:8f:9c:d9:f3:f7:fa:7f:66:e9:77:cc:10:b8:40:
                    66:bb:6e:42:03:7f:2b:e7:9c:50:d8:7e:15:ae:3e:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1E:2A:69:51:31:23:29:D7:11:5C:99:59:B9:03:20:B6:3B:03:72
            X509v3 Authority Key Identifier:
                keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:6d:4b:98:2a:cb:45:e3:8b:ed:16:05:31:cd:05:b7:b7:
         f9:84:d0:c3:7c:f9:65:c4:ee:04:5d:48:47:4d:e7:46:12:b6:
         8f:51:e5:24:5d:9d:b1:04:b0:ba:c7:06:c1:e2:4b:e7:0c:0e:
         e8:44:16:e2:cb:81:b8:da:2d:85:cc:29:b8:36:74:57:30:8f:
         57:92:d0:06:ab:e9:fe:c6:73:a4:f4:ee:0a:7f:0a:69:57:74:
         10:3b:44:e2:a4:9c:8e:d8:7e:4b:a6:80:46:09:a9:10:e0:a5:
         8e:94:90:d1:c5:ba:9b:f4:32:79:d9:69:9c:6a:82:e7:66:47:
         c0:f7:c9:03:fe:11:ed:83:38:1b:50:e7:28:d5:12:5a:b7:83:
         05:11:6a:88:19:2e:00:c8:d0:0c:04:47:ed:a1:76:e0:27:54:
         e0:ae:38:b9:88:29:55:5a:89:02:57:60:9b:f4:66:54:be:ae:
         a3:6d:c6:91:98:76:f8:74:4a:e5:1e:c9:82:c8:d8:e4:ab:26:
         20:93:13:23:ac:41:9b:f7:5b:90:b4:6c:90:3e:6f:e4:31:c9:
         ae:1c:06:da:ea:67:74:9f:94:9c:d4:66:6a:f7:ee:75:af:b7:
         ed:b7:29:35:ea:c3:ab:3d:bd:47:61:cb:8b:4d:81:04:19:72:
         1f:31:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:07 2024 by rpki-client on console-fra.rpki-client.org