Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File:                     li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier:          vYkxVztC/08uQlD8+uHQ1njRJDMiTt8Yqa8jZ5aeOPk=
Subject key identifier:   0C:47:C5:5B:59:D3:D2:B4:5E:46:DE:DD:77:47:02:1A:51:D1:C0:49
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer:       /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial:       018F866C9E36826D542BE6E689F685A5D284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number:          1108
Signing time:             Fri 17 May 2024 12:00:16 +0000
Manifest this update:     Fri 17 May 2024 12:00:16 +0000
Manifest next update:     Sat 18 May 2024 12:00:16 +0000
Files and hashes:         1: AbwfR81Ym5r4Rz4WAapd3IQP2qk.roa (hash: Sdnu2H8sTIohyTZl1MPHFMtOPnKzaAQTpTgg1gQ6kUI=)
                          2: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: T7sY9XygoaWbSpxk1ZFxN3aqnbAH7Tsly8AZWIa+mo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:9e:36:82:6d:54:2b:e6:e6:89:f6:85:a5:d2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
        Validity
            Not Before: May 17 12:00:16 2024 GMT
            Not After : May 18 12:00:16 2024 GMT
        Subject: CN=0c47c55b59d3d2b45e46dedd7747021a51d1c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:a4:0e:db:32:c2:59:ad:c7:7f:6c:b1:e9:
                    52:2c:b9:38:21:d1:35:2c:66:e3:65:c7:19:97:a6:
                    e1:6c:61:05:46:27:14:05:c4:eb:65:96:fb:6f:cd:
                    c4:49:b3:d0:f0:34:1b:2c:a9:9c:ae:9b:26:95:08:
                    67:c0:49:2b:98:a4:d9:4d:2f:58:65:c9:ea:d8:3a:
                    06:97:b8:e5:ce:84:3e:f7:5d:20:67:d0:4d:42:cc:
                    d4:04:ff:bc:d4:76:77:a7:0b:3d:c6:b4:6a:83:55:
                    ef:0b:71:7f:43:57:3e:40:9a:f8:a5:f8:57:b6:b7:
                    44:e7:12:79:ed:c5:62:76:46:cd:a7:e6:c5:d3:b2:
                    e3:5a:93:ad:83:d5:f2:30:9c:fa:c1:6f:13:f0:ff:
                    51:6a:14:90:6f:a0:6a:b9:ea:1f:93:97:ba:6f:08:
                    35:06:6a:0c:7a:55:dd:ce:ba:78:da:a8:63:c2:d9:
                    05:9b:f7:07:4c:e5:0c:43:6b:d1:20:b0:ef:c8:02:
                    e8:fa:eb:b7:2b:92:77:9d:72:2d:41:db:8f:85:bb:
                    95:19:47:f8:d7:73:04:bf:85:54:16:b7:c1:21:13:
                    23:0a:5c:61:1b:7f:49:22:ec:fc:7c:83:90:1d:70:
                    ce:d3:0d:09:6a:72:4b:f4:5d:29:2e:d9:ae:45:f7:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:C5:5B:59:D3:D2:B4:5E:46:DE:DD:77:47:02:1A:51:D1:C0:49
            X509v3 Authority Key Identifier:
                keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:99:b7:5d:a8:38:23:67:c4:4f:d1:84:9e:c1:f3:4c:22:
         f6:07:0d:23:56:82:e4:b7:dd:b2:43:ec:8a:62:dc:7d:a0:90:
         62:35:61:c6:bf:67:d3:5e:a8:85:cc:42:51:db:bc:03:1b:43:
         64:27:7a:c1:bd:44:2b:9f:70:d3:0b:12:6f:ba:39:ed:23:49:
         7d:fe:1f:d9:b2:93:f3:3e:42:93:f5:a7:44:2d:ce:0f:c5:42:
         28:75:d5:8a:d1:c6:2d:ee:ad:44:c4:e9:4e:48:8e:ff:29:74:
         6b:43:e1:75:4a:31:3a:ed:d6:9e:15:08:1a:99:f7:95:9d:45:
         b2:d6:59:20:48:05:b5:d5:41:67:53:58:94:36:c8:d1:29:5b:
         42:9f:bb:2d:e5:e1:f8:1f:69:96:40:87:e7:12:e3:74:2f:73:
         09:e3:e1:c8:68:6f:af:17:6b:54:9d:67:da:66:21:4e:6a:5a:
         c1:28:b1:af:a1:e5:62:b2:df:6f:11:60:15:7a:4d:43:4f:c6:
         ca:72:97:96:62:1f:24:83:8f:b1:e5:be:ff:a7:be:9c:5a:fb:
         e5:18:f7:2a:b7:c8:11:c1:b6:8a:5a:65:55:e9:2e:d9:51:1d:
         8e:12:80:ad:18:c1:97:7f:97:6f:24:5a:7c:27:d7:78:75:39:
         57:ee:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:30 2024 by rpki-client on console-fra.rpki-client.org