Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File:                     lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier:          ZrTS/LpD/II8YY4OhAXEzFT0PCMa8lEK1a8WQH22YR0=
Subject key identifier:   CB:DF:F9:93:24:8C:06:CC:2E:26:09:49:8D:96:A8:96:97:C7:CB:C2
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer:       /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial:       018F874873F045D565C967C3C26AB6D9621F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number:          0496
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: 3GmXalHTagAfFkFNtIPJwTXql8s.roa (hash: vnoZ5auP0c5bPs/iuh7yemkaTM8gj5Y1ToplKtTW2JU=)
                          2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 398VOe0Mch2mCLUqE64Ap54bV4x2+ejgQx8/ySZ7ETg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:73:f0:45:d5:65:c9:67:c3:c2:6a:b6:d9:62:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=cbdff993248c06cc2e2609498d96a89697c7cbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:dc:20:31:e5:0a:83:7b:36:02:7e:e8:e1:
                    16:fc:d9:09:92:f4:0b:7a:e9:09:c2:95:cf:00:9e:
                    be:ae:22:3a:6c:dc:ca:20:a7:97:65:fd:09:31:1b:
                    83:ea:07:1a:48:3e:65:b9:f1:e3:59:af:fa:f0:f2:
                    26:58:2f:f0:57:11:da:20:c2:de:ea:4e:09:aa:1d:
                    74:c4:d7:0a:7d:d4:56:1c:89:db:a7:a2:bc:12:3e:
                    81:8a:13:25:a8:09:41:bf:c5:32:53:2f:13:a8:2f:
                    1d:26:97:4d:a0:3e:c8:cd:b5:33:fb:17:c9:e9:4b:
                    df:4d:c8:26:b4:1e:df:09:90:02:2f:56:5a:2a:e1:
                    a1:d0:92:2a:48:e2:a4:b6:de:2d:d6:58:be:ed:96:
                    a6:d3:81:7f:14:b0:f6:da:b3:97:7c:9b:5c:9c:3c:
                    91:c3:79:35:24:28:54:0c:e5:3b:e8:22:03:35:53:
                    fa:39:86:36:01:a9:71:a9:2a:c5:8b:90:6a:29:b6:
                    06:c8:f6:88:f5:73:19:7a:87:7d:91:84:ea:b0:a7:
                    ec:1d:9b:f3:15:25:3e:5a:c5:35:f7:e2:09:b9:60:
                    1c:e4:e4:14:94:0f:d6:81:ff:94:2d:ad:a6:a9:12:
                    f6:2a:9f:2a:af:e4:a0:ae:4f:7f:8f:c0:c3:3b:6d:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:F9:93:24:8C:06:CC:2E:26:09:49:8D:96:A8:96:97:C7:CB:C2
            X509v3 Authority Key Identifier:
                keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:1f:59:bb:d8:63:45:d8:da:a6:aa:39:9f:6a:76:97:2a:
         1a:68:9f:c1:ad:50:66:1a:0d:25:05:5c:bf:39:15:d5:54:1f:
         2c:a8:c4:2e:6d:0d:60:88:61:eb:cd:70:3b:a0:ec:41:05:9b:
         e6:c5:90:96:3b:96:c9:cc:55:b8:9b:45:6d:94:15:8a:94:e6:
         cd:53:f3:6b:a7:84:f7:7a:9a:dc:90:45:16:c3:ee:0a:26:0b:
         1b:11:ad:df:18:6f:0e:e2:a3:3b:98:0a:96:15:e9:ae:32:92:
         ab:fa:e8:f8:6c:53:a4:63:67:c6:4f:90:78:b5:27:04:33:36:
         96:bc:48:ed:7e:8d:dd:04:97:1d:cb:61:a0:6f:92:5b:d9:74:
         9a:22:69:2c:7b:69:bb:65:7b:fd:85:f4:44:64:03:c1:9a:2e:
         9d:17:49:1b:2e:09:88:02:0d:fe:36:2e:b9:90:51:ff:96:01:
         c2:57:3a:bd:01:17:d4:02:c6:db:f6:ef:5e:82:f8:e0:55:8f:
         8e:d9:0e:cb:de:9b:d7:6b:26:61:cb:ee:54:9f:76:32:ff:c4:
         c4:be:1e:eb:2b:47:20:5e:1a:c8:76:ff:f8:a9:b5:9d:6a:cc:
         d4:0d:a4:2e:29:8e:75:05:ce:2a:22:ea:9d:99:f7:bd:2a:c8:
         71:c8:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:15 2024 by rpki-client on console-fra.rpki-client.org