Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File:                     sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier:          NXffhpw0gW5FiR8vkB1PdGPpkzaFueUqm+GFVf9pnxI=
Subject key identifier:   A7:7E:77:D9:06:D7:3F:62:71:E6:8C:B3:EB:08:E5:38:1C:D2:66:7E
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer:       /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial:       018F8939224BD910911D3F4B93B076F5FC6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number:          0F1C
Signing time:             Sat 18 May 2024 01:02:53 +0000
Manifest this update:     Sat 18 May 2024 01:02:53 +0000
Manifest next update:     Sun 19 May 2024 01:02:53 +0000
Files and hashes:         1: kI0-WuzIDsTsbnmrOFPls33Gn04.roa (hash: JseEbM1Mk2j4m4aTEasYYBQuwDzH9XEzOciaYNz8Fc4=)
                          2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: +mm3wXMPFHVQ//rIQ+SfGJywSepZ/SO3SjQ1eslnVj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:22:4b:d9:10:91:1d:3f:4b:93:b0:76:f5:fc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
        Validity
            Not Before: May 18 01:02:53 2024 GMT
            Not After : May 19 01:02:53 2024 GMT
        Subject: CN=a77e77d906d73f6271e68cb3eb08e5381cd2667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:6a:f3:60:2e:b9:0b:16:3b:a9:4b:7a:20:
                    f4:fd:58:92:66:31:76:ce:b6:63:7f:a5:04:b1:f2:
                    0b:ec:e6:57:79:9f:9c:47:69:60:08:74:6e:01:46:
                    0b:69:67:f9:45:ef:ba:5b:69:45:c2:cc:f0:a5:61:
                    d0:53:b6:53:7e:38:52:22:20:78:d7:8b:8c:c3:43:
                    04:34:61:14:b6:88:20:3a:2d:a0:aa:0d:9d:9d:e2:
                    02:d2:c2:64:e4:04:77:3a:9d:88:74:74:a2:65:92:
                    b3:ce:89:59:e9:69:b0:9b:c9:06:73:d6:11:26:be:
                    9a:52:2a:0f:c1:58:2a:1d:b8:20:25:90:f5:c2:39:
                    dc:26:69:53:eb:d9:fe:e6:fd:9a:bd:af:8e:ad:fe:
                    9a:8d:81:3e:9e:f8:9a:ff:3c:80:01:07:e3:1c:30:
                    d5:aa:7a:8c:bc:6d:58:e7:f7:38:4e:6e:1b:8e:85:
                    8b:7e:d7:76:e2:b2:9c:28:7d:f8:d1:ed:9c:1f:07:
                    cf:d7:c1:a9:e7:9f:da:f4:da:c1:8d:ba:09:85:29:
                    7c:52:9a:90:c1:cc:bd:b9:d2:a2:b6:ba:38:25:41:
                    fc:ec:2e:49:d2:f7:46:a2:4f:04:9a:9c:84:5d:d6:
                    08:d9:bc:ad:09:f9:b3:0a:ae:8a:d4:02:70:f8:50:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:77:D9:06:D7:3F:62:71:E6:8C:B3:EB:08:E5:38:1C:D2:66:7E
            X509v3 Authority Key Identifier:
                keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:6c:c6:f0:95:63:10:aa:00:aa:b7:4c:3f:28:be:4c:c4:
         e3:4d:a6:97:fd:e4:ab:fb:cb:b9:68:53:ce:13:b8:5c:6c:3b:
         00:f1:fd:8d:ec:79:58:3f:5d:fe:7b:04:2e:8a:ae:09:5e:2e:
         4a:1c:25:2a:dd:da:89:7b:a7:b9:70:7c:c9:c4:7c:d1:e9:62:
         d2:17:23:90:46:77:f1:36:be:5b:32:b9:d9:52:4e:33:ac:0a:
         86:67:1c:08:b5:cf:e4:e7:97:40:50:71:2a:14:92:08:13:a3:
         54:da:61:ac:48:d4:b7:9d:41:46:de:61:4d:fe:e0:c1:da:37:
         9e:f1:34:a7:d0:c4:b7:bd:6e:27:5d:c8:d7:55:c3:7b:75:9d:
         78:7e:a2:2b:53:31:41:6d:d3:cb:63:19:d6:7f:7d:90:f5:a7:
         ce:35:7c:8b:f8:b1:07:0d:cb:59:a7:cd:d8:da:f2:12:c4:db:
         f6:ce:eb:1b:40:d0:eb:13:1c:c7:61:ca:45:a3:9d:00:c3:4c:
         6e:df:56:53:ad:0f:ff:9d:68:c3:37:a6:2b:97:99:c2:46:5f:
         a4:27:27:26:d9:0c:2c:a3:c6:00:3b:59:05:e9:68:1e:93:4a:
         b2:82:97:c9:ad:45:c9:e4:45:d7:76:9b:dd:29:1a:26:ff:18:
         58:e0:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:49 2024 by rpki-client on console-ams.rpki-client.org