Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          nj8Buk5mzhk10i+B4MA8EgeJq33k4f/PWFko+vKwwv0=
Subject key identifier:   20:9F:3F:8C:5D:8E:19:3E:44:62:17:E8:9C:25:CF:8F:26:DD:42:68
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       018F584B187C0338EA33427667D8D1C69613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1161
Signing time:             Wed 08 May 2024 13:01:07 +0000
Manifest this update:     Wed 08 May 2024 13:01:07 +0000
Manifest next update:     Thu 09 May 2024 13:01:07 +0000
Files and hashes:         1: HKzKLaEA_szmsMalXLBkpecuNPo.roa (hash: Vnbn/JOVJZP7Tb4z8ydifZ5MTQiPbrRix53uT7WiBaU=)
                          2: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: ZnaXpx953azAyskcLdGahRw2V5n27hdIlRcVWutjUvw=)
                          3: uRxAkO0VD8K2UqCbgGXwVmX7uJ4.roa (hash: 9/hPoXVDP+7tt/TcWt2QZMdAKcGAf/ZLz4gB4D/g334=)
                          4: vEkhIQbjKt1qzZyuioN1NQB9x-A.roa (hash: /KwM/1CpjVc38VC6Xk0iJKc8a7LIQnSWKKs5b99Dcvs=)
                          5: zLVR5eHsVyF3v7DJZuYpTiYit7U.roa (hash: 9CiKI5OxCios8CUTCapBMdu2mulRUdKCWZ7HsE14B50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:4b:18:7c:03:38:ea:33:42:76:67:d8:d1:c6:96:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: May  8 13:01:07 2024 GMT
            Not After : May  9 13:01:07 2024 GMT
        Subject: CN=209f3f8c5d8e193e446217e89c25cf8f26dd4268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:5c:82:7d:f7:a6:74:de:17:f8:12:1b:c8:
                    14:1e:9e:d1:6b:9a:63:1f:56:eb:ce:1b:c9:bd:d2:
                    51:68:04:a5:56:dd:67:77:f8:7c:05:d8:be:51:2b:
                    2f:99:c7:4e:fb:be:74:ba:1d:b7:bc:3d:af:14:df:
                    35:09:51:69:ca:eb:53:a8:53:39:1f:0e:73:14:cc:
                    78:20:3d:c7:75:96:32:8d:7a:30:3c:22:f2:6d:47:
                    c8:e6:2a:bc:39:02:24:cb:ca:db:2c:52:5c:64:b7:
                    79:8a:f1:d7:b6:81:6d:4d:35:db:e5:ac:04:ee:ad:
                    d9:b9:6b:23:bb:97:85:88:4c:3e:e4:dd:e2:26:4c:
                    56:74:8c:43:17:c4:ad:d8:6f:cf:e3:42:d6:b6:55:
                    ce:8f:31:8f:77:d7:11:78:8e:fa:5b:d3:64:8c:a6:
                    89:a5:df:03:5a:c1:c8:10:0d:a3:9e:27:bb:a3:e2:
                    86:00:c9:ef:92:c8:66:97:98:20:12:29:a4:91:47:
                    cb:dd:ab:5b:32:ae:20:57:78:43:d3:c3:d9:6b:0c:
                    26:9f:29:cb:06:7b:9d:5d:05:c4:6e:77:98:24:25:
                    08:d9:9b:12:d4:90:bb:49:21:e4:76:4e:73:86:79:
                    3a:a8:56:59:cd:d1:63:ba:a4:a5:13:86:ab:01:2c:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:3F:8C:5D:8E:19:3E:44:62:17:E8:9C:25:CF:8F:26:DD:42:68
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:76:ec:a5:71:eb:25:2e:df:7f:38:bf:ab:37:42:4d:6b:af:
         53:89:1e:6a:da:68:2f:61:ef:af:bf:ed:ae:a9:ce:d8:49:76:
         dc:cb:4a:b1:72:bc:3a:1f:8f:93:45:e3:22:8c:22:bd:6a:04:
         49:9f:e5:95:e1:6d:78:27:dc:c6:5b:82:35:ac:f3:44:7e:04:
         d2:e0:dc:40:c3:30:b2:20:1c:67:e8:61:8c:60:83:5f:9c:78:
         12:65:b7:b5:f2:29:c6:72:8e:99:23:0f:2c:5e:d7:4c:56:f5:
         cd:4e:da:3e:b2:5d:89:30:d1:72:bc:13:46:78:45:2b:14:28:
         63:6b:72:f8:39:47:73:0c:f3:8f:8c:4a:c7:56:0b:6c:13:99:
         10:39:60:78:c6:54:30:90:38:6d:5c:1b:f9:1d:e5:02:38:9d:
         cd:f0:01:c0:46:6d:a7:5b:c4:3d:7b:a9:7c:9b:a8:0f:e9:10:
         8f:33:f2:ba:5b:5d:9c:0f:58:41:d9:9d:67:b6:b8:9f:5a:a5:
         4c:22:d0:74:00:9a:ba:b6:1c:d9:3d:5d:12:d7:3d:78:28:35:
         1a:01:82:a7:a3:6c:39:b5:d5:b5:dd:85:49:9e:ed:63:cf:20:
         8b:20:d4:cf:17:00:1d:bd:01:9c:60:b5:9c:a1:cb:ed:0e:8b:
         8a:e1:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:30:54 2024 by rpki-client on console-fra.rpki-client.org