Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File:                     l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier:          btIcQZqeTIjdNh0aDfkWaLyNbznDGZR5/M0oewPFdY4=
Subject key identifier:   27:55:86:80:63:2F:CB:2E:E1:ED:AE:94:F0:EE:EF:41:79:BB:06:75
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer:       /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial:       018F877F44C47B8B4C2701AB679B5AD53F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number:          0404
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: BinnJbClmc_tZ2rTnPm8Xy4Iutg.roa (hash: Z3wePSwCBx+JM5uvW5D2eVYCW6ddKKmUTCuNzOmWWC4=)
                          2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: NWMwmbeeSAbdJirJnbviYjcr146Da37yaoy7ahPD6/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:44:c4:7b:8b:4c:27:01:ab:67:9b:5a:d5:3f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=27558680632fcb2ee1edae94f0eeef4179bb0675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:33:22:40:26:db:42:15:4c:87:0e:db:57:
                    87:7f:b9:74:1a:ec:06:ee:69:73:fb:5d:5f:04:61:
                    b2:85:6c:65:b9:be:0f:de:78:37:35:f5:8e:cf:4e:
                    d7:7c:3d:86:7f:1f:78:c7:d0:c0:51:4f:2f:1e:f9:
                    d9:78:9c:d7:c4:ae:44:5b:e2:ca:11:43:75:ff:9c:
                    73:a3:22:4e:37:84:36:6e:82:da:c4:2b:ca:b8:77:
                    66:c4:4f:4d:9e:07:ee:3f:26:50:63:23:df:85:0c:
                    70:68:28:b4:91:51:27:0e:23:4a:05:6e:e9:e2:6f:
                    6b:f3:06:be:a6:44:94:bc:e2:26:9e:34:82:98:33:
                    8d:34:d2:66:0c:58:39:1b:49:3b:7f:56:1c:a7:b5:
                    e8:9c:e0:b5:80:a4:07:18:75:fb:c5:de:8d:c3:16:
                    89:b2:c9:9d:13:69:df:df:f4:7d:3c:40:da:f9:d5:
                    a1:be:c3:49:fc:2e:3f:24:9e:81:48:d9:16:8b:53:
                    28:09:13:2a:a3:ab:22:0b:c5:10:db:5c:a7:91:03:
                    68:73:34:e1:7e:69:a9:9e:f6:83:c7:e5:12:9a:8f:
                    fd:36:a6:c6:f5:4f:3d:2e:85:dc:a9:f3:23:0a:97:
                    3b:af:53:1a:dc:a9:8a:c4:fe:5e:2f:15:c4:00:b0:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:86:80:63:2F:CB:2E:E1:ED:AE:94:F0:EE:EF:41:79:BB:06:75
            X509v3 Authority Key Identifier:
                keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c6:b3:e8:e1:1a:72:b0:b6:d9:26:09:47:32:27:10:c6:22:
         ff:bc:b3:6c:4e:4b:5b:11:08:5c:de:82:63:20:1b:7e:40:48:
         6e:73:69:d2:ca:f3:a4:08:5f:7d:ef:f4:0d:25:e4:2d:ab:ec:
         51:fd:48:14:f3:db:b2:bf:6e:ae:9b:99:9e:0a:c7:46:b1:cf:
         fa:79:88:37:e8:f4:4c:59:6d:d3:c0:2d:4e:c8:06:7b:e3:ef:
         41:4a:ce:fa:6b:52:c3:80:51:ee:3d:f1:a2:e9:1d:65:e4:81:
         42:49:af:ac:af:f4:fb:39:ed:54:57:5b:34:84:a4:a2:40:35:
         70:4b:90:85:e8:dc:11:5f:90:47:82:13:4f:b2:98:e5:27:62:
         cf:b0:ef:0d:36:5d:7a:ea:1a:11:35:9d:9e:5a:7a:dc:43:1b:
         c0:ee:4e:19:f7:88:9e:19:4b:ed:2e:0c:c1:1d:a2:44:29:46:
         46:9d:ba:b1:6e:a6:fa:5f:f0:02:dd:29:d5:1f:c5:1c:82:b2:
         a8:87:07:6f:90:bc:b0:57:f6:80:d1:2b:a5:0e:b0:92:f5:3f:
         d0:2f:b7:e1:b7:92:df:27:c2:7f:5a:a9:f0:fb:da:28:ba:1d:
         e8:ed:e1:3b:2c:64:80:65:d8:c6:1a:5a:78:8d:97:1a:72:6a:
         87:3e:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:22 2024 by rpki-client on console-fra.rpki-client.org