Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File:                     lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier:          YLReEhxRr0gdDjxRNdTzS4iPf1F9owi/afmUJjyfce0=
Subject key identifier:   E5:50:44:D1:90:EE:0B:4E:87:0C:CA:02:9D:D4:94:97:1F:56:64:02
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       018F3776C6FB85FC7A1B98F16EBEC433EB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number:          11F4
Signing time:             Thu 02 May 2024 04:01:22 +0000
Manifest this update:     Thu 02 May 2024 04:01:22 +0000
Manifest next update:     Fri 03 May 2024 04:01:22 +0000
Files and hashes:         1: 5OP5ndR10GHZW07nd31gCw7yNH4.roa (hash: 7ZfEeiMkCAOOWG/UpR1SCHfiZXSKo3MGHtevyRDA2Go=)
                          2: OMfxh4JmqMpejXInh7SzHALuXOc.roa (hash: 3Foug8V7Ad28sOTJpHfS/ph89OQPz2LbQ7w6ix1Iv7Q=)
                          3: QUEGbcdRVlCBBGhR7kvXnzLCe1Q.roa (hash: rhpFPWVSOuNNRsFu8jRdpR/0eGg69bKsJTDAM34KxdU=)
                          4: Yn06Ef93NXcIFnbftWxDYTK2Ya4.roa (hash: eSXlHcUut/6Soyao61LoA6BJlt7ff0ouRGTIO0WU3h8=)
                          5: _AXWezBs9vjBwIqxl2n6HkCgPvI.roa (hash: wYHCsNvvwxV1ZuOCMghAu+XGWZSmBrUriITwP4FZJ9g=)
                          6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 462aeMhJH7geJHZcHlcGLsJLEkh90XU3aHnC3FM7xMY=)
                          7: t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa (hash: SERe9eZCoiYDVhyZf52IBB+DxhtZRHtWTLkr4YOBX5w=)
                          8: xYWUygTHRqNFV4RDaCXX5KPcR4Y.roa (hash: pJlI2bLeR3GkV04H5fL3g6hK8NexsOU+oHvnmva6ntw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:c6:fb:85:fc:7a:1b:98:f1:6e:be:c4:33:eb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: May  2 04:01:22 2024 GMT
            Not After : May  3 04:01:22 2024 GMT
        Subject: CN=e55044d190ee0b4e870cca029dd494971f566402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:ba:14:b5:e4:ef:34:1b:c7:b2:eb:18:5d:
                    0f:83:4c:00:23:bf:50:04:4a:69:60:9d:db:c6:f2:
                    1b:24:5f:ec:2c:b6:c4:ee:98:0d:a4:43:10:6f:c1:
                    8d:05:ba:ed:1d:63:53:98:79:2c:bd:cc:e9:ba:e0:
                    ca:c8:93:31:26:25:94:15:7f:91:cc:42:bd:3d:06:
                    a0:7e:1b:90:b4:1b:8b:fe:74:75:83:da:26:8d:76:
                    21:48:b4:ed:2e:79:a2:1d:7f:51:fb:cd:0a:4d:28:
                    95:e8:c3:39:b6:e6:13:46:2b:63:0e:3f:92:92:ce:
                    c9:5e:63:db:c3:8a:f0:35:eb:70:34:dc:2f:c9:ed:
                    bb:47:ac:ac:e7:53:d9:61:16:89:6e:07:6b:a5:78:
                    21:84:49:c2:b1:d8:b5:9d:0f:08:b9:5f:29:ff:9f:
                    dd:01:14:37:ee:1d:a8:b8:56:a3:10:be:fc:f9:a6:
                    48:55:91:6d:f9:c9:82:ce:6b:04:fc:bd:59:5b:49:
                    98:8e:6d:3b:cd:2f:8e:66:26:4c:fd:74:cd:7e:da:
                    4c:d7:fd:4d:61:cb:b5:aa:60:70:e4:58:c7:2b:da:
                    a1:00:84:f8:f4:ea:06:e5:fb:44:8e:e4:01:42:e4:
                    8b:30:d7:bb:c9:dc:1d:3f:ed:ec:80:af:f1:16:5b:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:50:44:D1:90:EE:0B:4E:87:0C:CA:02:9D:D4:94:97:1F:56:64:02
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:12:b2:61:2e:8b:1e:41:16:77:8e:df:06:de:ad:0b:41:
         6d:20:82:06:a0:d0:8d:1b:7e:c3:e9:a9:46:f3:29:9b:65:fe:
         54:fc:02:17:c5:a5:2e:b2:cd:28:67:d3:62:3d:55:91:fd:fb:
         38:f0:76:7f:87:9f:af:fb:47:73:52:a0:d3:51:88:d4:cf:c2:
         2c:c0:e7:b5:cc:da:30:b1:85:0a:ae:66:d5:4d:79:d1:f5:2c:
         ef:c1:77:b3:d6:12:fa:b2:f3:ca:7b:b5:8b:6c:04:74:36:ed:
         23:d3:2d:a4:ef:fd:e2:db:a5:02:01:5b:41:7f:ba:45:c5:3c:
         83:63:6e:25:a1:86:88:5c:49:b7:cc:b4:fc:42:be:90:ec:1e:
         07:cc:99:d1:21:de:95:ea:3f:90:1d:17:fc:b8:e4:e9:39:d2:
         f6:27:6a:62:9b:21:6b:21:51:39:eb:b6:1f:bb:09:84:95:ca:
         d1:a1:15:86:89:16:1d:12:25:33:68:09:55:02:ce:7e:88:f9:
         a9:08:5d:55:9d:b5:39:9a:73:2b:14:e5:73:39:f9:4a:a0:3f:
         c3:23:97:d0:29:f7:69:4d:fe:fb:ef:36:d6:d6:d3:2e:a8:8b:
         ae:b1:bb:7a:c8:ee:3f:65:d8:1e:ec:ce:c7:c0:d6:66:3b:62:
         13:9d:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:25:59 2024 by rpki-client on console-fra.rpki-client.org